Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: YJMxYZ+W66Emgpt50VLz5oLjPUbvMDT+0MKK6bA53wY=
Subject key identifier: 36:1D:E5:F1:38:3F:2C:17:A8:7C:9C:CF:84:F9:EA:0D:D1:6F:4E:37
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 01A088D55BA64B6C731948876CA033CE5E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 0A37
Signing time: Thu 10 Sep 2026 01:01:19 +0000
Manifest this update: Thu 10 Sep 2026 01:01:19 +0000
Manifest next update: Fri 11 Sep 2026 01:01:19 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: vUKwviUuMQfnjaT2bS/G9n5eIDci2JhbAsnHz4Ce9nE=)
2: hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa (hash: 8W8T46xmoGGEFuN0xJIwYy5B+d+w5bYaaExN07s/4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:5b:a6:4b:6c:73:19:48:87:6c:a0:33:ce:5e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Sep 10 01:01:19 2026 GMT
Not After : Sep 11 01:01:19 2026 GMT
Subject: CN=361de5f1383f2c17a87c9ccf84f9ea0dd16f4e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:e7:4e:db:31:0e:7d:b4:48:bd:55:34:98:
88:11:ab:e3:f2:08:06:96:c3:d1:f9:7b:6f:9f:b5:
6a:ad:ee:ef:95:a5:68:ed:a9:ce:48:72:14:38:0b:
07:7c:46:eb:a4:1a:f5:da:39:a6:ee:9a:2a:e1:5e:
84:76:e8:e8:a7:95:af:85:61:b6:34:74:23:cf:cd:
20:4e:04:67:28:96:1a:f0:58:c1:5f:3b:a7:b7:06:
51:75:39:41:29:0d:91:6d:df:e5:97:0e:cf:ae:c0:
72:31:10:af:d5:5f:35:9e:6a:57:f4:d3:6b:90:f2:
c6:50:5e:46:4f:cd:16:4c:79:d4:3e:fd:13:3b:88:
a9:31:49:e9:97:cc:43:ce:e9:11:94:f4:72:e2:ec:
d8:3b:4f:14:87:b3:c4:01:47:fd:ba:60:ae:69:22:
a0:cb:e1:a9:01:38:5c:c0:9a:e3:ee:99:bf:69:12:
6e:ae:7e:c3:80:c5:a1:4c:26:36:d4:a9:2f:8b:fc:
50:91:9d:39:ae:32:a2:4b:b4:4d:66:62:f5:ac:60:
52:68:27:af:6b:4a:b5:0f:2c:43:57:e9:71:36:cb:
bc:2a:fa:a9:c7:61:22:95:36:80:4b:42:d8:01:d0:
b3:f8:36:54:84:40:3e:c8:fe:62:ff:2e:c2:06:26:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:E5:F1:38:3F:2C:17:A8:7C:9C:CF:84:F9:EA:0D:D1:6F:4E:37
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a1:3a:ce:7f:4b:74:b0:1e:37:ab:95:88:22:7d:63:9d:1d:
53:92:b3:ee:53:cc:03:b2:b6:f6:f4:5e:a4:d2:69:3f:f8:4d:
08:74:16:f3:2b:a4:0b:5a:7f:a4:f2:00:ce:43:fc:da:1d:ae:
c5:78:f9:12:3f:ae:db:f2:89:6c:44:fc:a1:90:9d:08:b7:f1:
4a:34:b8:a7:7b:0a:6e:65:f2:ed:82:a6:8f:8f:3f:23:dc:a2:
10:aa:95:db:2b:18:75:7e:4e:83:68:a9:e7:c9:6f:52:a4:e6:
15:91:1c:2c:af:0e:67:78:ff:45:b8:cf:bd:34:e8:94:93:36:
c5:3a:7c:86:79:e1:ae:51:70:a9:80:fb:05:ab:06:7a:ba:96:
c8:cd:c0:78:1a:f6:5b:f2:e2:4d:b9:ad:b3:de:cb:c7:39:fb:
e1:94:fc:d7:4a:eb:ba:4b:11:66:db:c8:d1:75:8d:77:65:b0:
7c:c9:c2:e2:00:74:3d:16:3d:b7:1b:44:5e:f5:a0:0f:d6:f5:
b4:b8:79:d4:80:a4:1f:6f:b3:03:48:69:4d:2e:f0:85:77:8d:
26:d3:b1:6d:a1:c3:55:1a:31:60:75:05:92:28:69:65:84:08:
66:2b:11:05:81:f2:23:f0:5c:f9:46:7c:40:e7:e6:15:b4:35:
86:f0:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:50:28 2026 by rpki-client