Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier: k0Nv2dEFOOHUzGgWwp8RKCoeftHnTfnXPxamb8sXpi0=
Subject key identifier: 85:A2:BA:20:B5:1A:F9:50:A7:4D:F8:2F:4F:3F:54:89:D0:52:E5:6A
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial: 01A08D568CCA17C60E5E86B208535C1F0342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number: 0295
Signing time: Thu 10 Sep 2026 22:00:54 +0000
Manifest this update: Thu 10 Sep 2026 22:00:54 +0000
Manifest next update: Fri 11 Sep 2026 22:00:54 +0000
Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: DJnIqfLFj0J2BvujX1nr10hor4dbnbFAnYemwrnFawM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:8c:ca:17:c6:0e:5e:86:b2:08:53:5c:1f:03:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Validity
Not Before: Sep 10 22:00:54 2026 GMT
Not After : Sep 11 22:00:54 2026 GMT
Subject: CN=85a2ba20b51af950a74df82f4f3f5489d052e56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:70:31:81:47:4c:a6:87:fb:2f:7a:99:6d:
00:c6:1d:39:25:e8:8c:82:57:7f:22:22:46:18:cb:
ff:3c:29:36:5e:7b:56:b1:9f:b0:cc:72:8f:ae:80:
64:45:92:01:50:1f:3a:e4:5f:17:47:26:cb:c7:b4:
d8:73:f9:4c:4a:5c:87:bb:41:ec:ec:42:f2:cc:1e:
d2:22:97:de:95:b7:10:33:8a:c2:60:43:f7:01:86:
7a:63:45:61:bf:c5:37:ce:70:2d:72:69:85:f9:06:
a7:41:de:a8:77:12:86:f2:5b:43:0f:5e:6e:f9:b1:
73:8f:46:e3:74:04:79:f0:68:7c:a6:70:17:e5:56:
83:0a:38:3f:81:e3:7e:c0:89:0a:44:37:af:13:09:
fb:46:36:14:ed:2a:b5:66:ff:6f:79:93:b2:f0:4f:
cc:a4:8c:79:6c:d6:1c:9e:8c:5d:09:c7:87:44:41:
13:16:f9:a9:9d:27:97:34:d5:e9:8b:dc:17:6a:9e:
35:f6:52:6f:0d:62:34:e2:ef:91:e3:8a:0d:1d:15:
12:c0:2a:0e:c3:c8:2b:51:92:5a:70:7a:04:bf:50:
67:39:75:ad:e5:f8:52:bc:2b:b9:dc:70:c9:91:85:
24:e8:59:44:89:87:18:57:fe:0c:2e:04:3a:44:1d:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A2:BA:20:B5:1A:F9:50:A7:4D:F8:2F:4F:3F:54:89:D0:52:E5:6A
X509v3 Authority Key Identifier:
keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b8:02:39:64:9b:72:47:c7:04:8e:24:1b:14:46:ca:a2:28:
14:a4:04:2a:84:00:b6:b2:32:73:fe:8b:67:43:a8:13:3d:6b:
84:d5:2e:11:7d:55:4c:e0:cb:e1:c4:67:72:65:59:fb:bb:47:
40:94:23:f5:7b:e7:19:9e:fd:70:b0:6b:c8:f1:6f:c8:87:25:
ab:41:e2:14:c5:36:b2:4d:a6:e9:15:2f:3a:13:bb:8e:c0:a2:
fd:f5:f6:18:95:69:11:42:48:29:44:cf:2c:d3:1b:d1:10:38:
00:5e:04:5c:96:b9:ca:fc:a3:82:1c:2f:35:ab:8e:e3:0f:1b:
c1:c4:9a:21:e7:60:a6:01:2c:10:74:f9:e3:44:d3:fe:4d:1e:
04:14:af:78:c1:e1:3b:64:1b:1c:df:d6:5b:6f:6a:65:11:04:
38:a6:e8:74:0f:c6:54:a3:4e:e0:78:d3:ef:a9:ae:cd:b3:81:
52:bb:ee:2a:8a:b3:27:0f:e2:36:56:78:87:a7:ca:ca:15:a2:
68:97:07:7f:de:8d:52:2f:a3:d2:a3:78:0f:9e:27:6e:88:5c:
09:93:ac:f9:43:ec:a8:1b:6d:87:da:f9:93:4d:47:01:d0:96:
e7:15:0f:ca:50:99:c8:17:58:c2:59:e2:ed:1a:8d:5d:8f:09:
d1:e8:1d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:34:19 2026 by rpki-client