
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: Hur/NZ9M3avEgwUtxGp8Dg6W+osBptLABHrf8zhGS38=
Subject key identifier: 73:D5:4A:7E:FD:3F:51:6E:F1:58:7F:7F:73:5E:AF:02:30:26:88:9B
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 01A1740219C5CCE207A6CAEE09D0FFA341B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 08B5
Signing time: Sun 25 Oct 2026 17:00:56 +0000
Manifest this update: Sun 25 Oct 2026 17:00:56 +0000
Manifest next update: Mon 26 Oct 2026 17:00:56 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: 1Fd0pmxy3HRaU2RU9TGGgtL3Tv5DHwVqnRsWWF6x71Y=)
2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:02:19:c5:cc:e2:07:a6:ca:ee:09:d0:ff:a3:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Oct 25 17:00:56 2026 GMT
Not After : Oct 26 17:00:56 2026 GMT
Subject: CN=73d54a7efd3f516ef1587f7f735eaf023026889b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:0b:d2:b7:70:3b:68:d6:9c:57:e6:25:b1:
01:70:e2:e7:06:ed:e6:76:87:5a:ba:41:0f:c2:28:
ed:f1:bc:9c:ee:07:b2:f2:c4:56:f9:b2:ca:40:e2:
9f:59:7d:c7:4e:f7:ef:4e:f1:2a:1c:28:c1:4c:c4:
50:ea:82:d6:67:eb:05:25:02:6a:ce:83:38:27:8f:
41:8e:fe:72:18:c0:64:fd:1b:40:fb:43:de:cc:18:
0f:b4:8b:42:41:74:46:88:cc:53:e3:f5:05:66:d5:
9d:78:24:cf:6c:b6:da:7e:f9:58:d8:46:90:57:91:
95:3b:f1:e8:1d:4b:f2:e9:7a:c8:bc:a1:15:84:32:
50:4c:64:5e:36:14:47:92:8e:42:1e:62:95:fa:0a:
86:3f:cd:22:6f:e8:21:a4:d7:19:f0:47:1d:a6:2b:
af:ed:01:a1:c9:89:f8:be:00:77:b5:7c:a1:0b:53:
48:ac:f6:fb:40:f0:86:e5:cc:e8:e3:7d:a0:41:ac:
50:66:6b:d0:7a:45:cd:aa:0f:18:93:dd:97:03:86:
9d:2c:47:95:81:d9:f7:7e:18:6b:45:3e:d9:97:ea:
64:7e:bf:ef:af:c1:c5:18:65:8f:af:25:85:e6:cb:
a4:b1:f0:61:e6:28:30:3a:df:1e:23:cb:0e:54:36:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:4A:7E:FD:3F:51:6E:F1:58:7F:7F:73:5E:AF:02:30:26:88:9B
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cb:8e:21:ef:0a:de:91:73:4c:f8:b8:f8:14:f7:03:14:99:
6a:dd:4a:77:97:4c:0e:65:26:7c:1c:6b:8d:a5:88:64:e1:24:
d1:5e:46:6a:8b:1b:07:6c:f6:0c:e2:8b:64:c5:68:54:59:9e:
86:c7:19:ef:1a:df:a6:ce:db:5f:53:6b:bc:76:75:a4:28:f4:
6d:86:d7:dc:63:a4:3d:a2:15:84:5c:8f:28:f9:41:fd:a9:22:
95:0a:bb:8d:39:6a:7d:ce:90:ee:23:14:39:b2:28:ce:2d:29:
1b:e3:12:cb:3c:46:96:c8:35:1a:f8:16:51:9d:cb:d0:47:d7:
ee:e4:62:04:02:7b:76:59:64:f7:18:1a:a9:39:91:94:93:1e:
3f:d9:53:82:d2:90:c0:41:7a:9d:ce:ba:ae:92:29:2f:44:72:
aa:c2:03:fe:aa:79:ed:5f:28:35:cb:e5:81:46:1b:31:73:4d:
a3:07:ce:14:12:71:cd:d0:0f:ab:19:0a:a9:33:4a:1a:47:85:
e8:bf:4e:56:36:1b:f3:41:a2:2e:63:f0:1f:ff:31:ba:2a:3f:
37:0d:33:e4:9a:3c:a6:8a:49:7a:08:6a:de:6a:97:10:b2:d6:
62:02:42:9e:21:61:00:5f:34:85:23:96:6b:c6:e1:e3:9c:f5:
42:44:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:07:35 2026 by rpki-client