Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: jobMMWP1lJgt38pQ5xh+BvLxpL/y3XiKl5is5IamSKs=
Subject key identifier: F4:2F:8F:2F:20:99:BE:65:7D:A1:A6:C1:B0:28:C3:ED:2B:CD:9C:59
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 01A08C7B3F7C8ADAE2BA83E921CB0CC0E096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 1465
Signing time: Thu 10 Sep 2026 18:01:22 +0000
Manifest this update: Thu 10 Sep 2026 18:01:22 +0000
Manifest next update: Fri 11 Sep 2026 18:01:22 +0000
Files and hashes: 1: 3kj2IZUmhg4c3fn_vDNshjS1bYM.roa (hash: F1j+Rw7AK0w/RfaxR+vC5zwL/WwgyQ05RgO+QAvekpY=)
2: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: IgXnS+2/cOz2ylgL8Aw2gpxHNc7Jeso0M6OgIrnqsfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:3f:7c:8a:da:e2:ba:83:e9:21:cb:0c:c0:e0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Sep 10 18:01:22 2026 GMT
Not After : Sep 11 18:01:22 2026 GMT
Subject: CN=f42f8f2f2099be657da1a6c1b028c3ed2bcd9c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:42:d3:83:7d:7f:f9:89:e8:da:81:4f:e7:
e9:10:7e:f3:65:40:cc:cb:17:58:5e:47:be:af:36:
4a:13:ce:77:b9:34:1d:98:70:21:d8:9c:ae:96:e6:
d0:50:70:37:a4:7a:a0:6a:29:fd:94:a8:49:0f:87:
29:59:d8:3e:41:1b:44:04:18:cb:7d:6c:74:8b:cc:
7f:58:ae:d3:b0:47:6b:10:66:d4:8a:4f:f5:84:92:
bd:70:e7:63:80:96:40:a0:08:8f:ef:3b:b0:74:7a:
5e:ec:84:f3:65:94:b1:07:46:21:a6:43:55:99:b9:
75:74:60:02:5f:f7:ed:90:7a:86:33:3c:ab:47:aa:
4f:a8:1c:b0:73:54:6b:15:97:f9:df:c6:cc:58:1a:
a7:2c:14:1c:98:31:80:56:c6:aa:a2:1e:28:1e:11:
b3:c6:35:07:6c:f2:86:50:0a:86:34:ff:a9:c0:fa:
7f:3b:3f:a5:32:97:80:02:bb:e9:1e:78:b4:b1:f0:
1b:ed:80:07:c5:59:56:67:bd:df:cf:73:4e:1e:46:
08:42:1d:f0:a9:dd:23:22:74:a2:9b:c4:ab:61:f4:
d4:fe:d0:7e:36:b0:f9:b8:1d:a9:30:f5:b1:7c:79:
33:f0:f9:a9:1f:1e:f3:a1:d2:d8:6c:8f:b6:4c:62:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2F:8F:2F:20:99:BE:65:7D:A1:A6:C1:B0:28:C3:ED:2B:CD:9C:59
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:89:1f:d2:54:a6:cb:84:4e:32:c1:2b:a3:be:bf:0f:9c:eb:
60:e5:18:9e:d7:39:1c:10:69:43:43:52:8b:c6:39:8f:fb:93:
c1:24:6d:c9:48:c8:c4:16:1e:0f:2c:21:f4:8a:52:8b:e5:a5:
47:5a:8d:37:fc:c1:56:58:a8:66:4d:14:b2:76:5b:14:82:4f:
96:b0:88:e1:66:f8:76:93:3b:2e:4c:01:87:c2:cc:c2:b6:64:
aa:2f:2e:28:15:62:0d:4d:2e:a5:2e:6e:ee:0f:04:9c:1d:01:
53:1a:59:7a:21:d7:0c:5c:91:71:65:37:db:e1:8d:f9:e6:30:
1c:d9:a0:20:98:34:41:06:4e:55:53:b4:be:78:aa:33:88:64:
a9:92:0b:41:9a:dc:7b:19:1b:9f:b5:bf:d3:06:8d:57:c3:a7:
3b:ec:9b:aa:ff:5c:3f:2c:cb:da:0f:14:ce:1c:13:8b:95:69:
b5:98:98:66:da:6d:b2:5c:ac:da:68:eb:ef:c7:e0:28:b6:e1:
32:6e:c8:3a:66:d8:5e:4c:bf:60:f7:1e:e3:42:c5:36:6c:99:
bb:f2:8d:fb:59:2f:82:89:43:2c:23:84:a6:13:ce:dd:46:07:
3c:26:ae:09:ea:f1:01:97:9f:c7:4e:3a:14:58:8e:61:ce:b5:
20:42:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:40:54 2026 by rpki-client