Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: zpMnueSEOn6sohq44gopIs+mi28Hm3uYRWdb8Df4PD8=
Subject key identifier: C9:B5:4C:C1:E2:CE:A7:60:20:0D:A6:74:BE:8D:1E:F9:BC:A9:25:8F
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 01A17BBB69EE79DE47C40A5C1CEF2F3D996E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0EBD
Signing time: Tue 27 Oct 2026 05:00:42 +0000
Manifest this update: Tue 27 Oct 2026 05:00:42 +0000
Manifest next update: Wed 28 Oct 2026 05:00:42 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: 9W3UmJnH0nloKBS96RRG9Xo630bepytwC0Lu9+nV3rQ=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:69:ee:79:de:47:c4:0a:5c:1c:ef:2f:3d:99:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Oct 27 05:00:42 2026 GMT
Not After : Oct 28 05:00:42 2026 GMT
Subject: CN=c9b54cc1e2cea760200da674be8d1ef9bca9258f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:16:3d:f2:8e:6f:6f:f0:b9:8b:57:b4:9e:
3d:f0:04:77:fe:3b:d7:59:5b:b1:79:30:b5:88:66:
3c:92:78:8b:ba:61:1c:7e:80:98:75:f1:17:38:a7:
6c:41:8a:bd:a6:54:30:14:e4:fb:90:5b:46:5e:9e:
8d:cb:bf:fb:29:65:1e:1a:32:98:28:42:7c:51:a7:
62:34:0d:31:45:4e:dc:a0:13:65:e1:7c:66:4e:a8:
cd:f1:34:ce:bc:2e:67:df:1a:2d:ea:96:00:b6:18:
8c:6e:b7:91:ea:06:06:37:cd:15:40:31:9e:20:21:
65:42:ef:bf:f1:07:a2:5f:29:cc:d8:a1:e6:a8:3b:
a4:ac:69:b5:a7:b5:16:ec:1d:3c:ae:93:c2:b0:c5:
92:47:77:cf:cb:87:b2:a0:83:8a:fb:ff:95:76:47:
f0:7a:60:48:20:db:5f:80:0f:c4:cd:12:0f:62:78:
e6:9e:29:80:78:e8:a2:c0:15:78:c9:1a:d0:81:e4:
2d:ed:61:06:ab:f2:53:ff:7d:c1:3e:be:e7:1e:fd:
a4:05:6a:2b:91:f5:5a:4c:ef:80:a0:a3:13:a1:35:
4e:3f:c9:37:2e:5f:50:6d:72:30:0b:01:09:88:2a:
6a:e8:6b:2c:49:50:af:e1:d6:5f:60:8e:b3:42:d4:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B5:4C:C1:E2:CE:A7:60:20:0D:A6:74:BE:8D:1E:F9:BC:A9:25:8F
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:93:ec:52:c5:18:63:a2:2c:89:96:80:1f:3b:46:cd:13:98:
91:81:48:6c:47:14:58:79:1a:c1:82:19:12:d9:b2:b4:f0:d0:
11:86:4e:62:8c:e2:4f:56:01:14:84:64:eb:a3:73:cb:f1:b4:
10:a0:18:d5:7c:21:a6:7a:d3:1f:da:38:09:ad:7b:47:7e:f3:
6b:ab:be:9b:a9:d3:84:5d:18:64:69:cf:5b:03:c8:f6:40:04:
51:47:47:09:b0:81:0e:d9:06:25:05:f6:f4:1e:8c:94:6d:dd:
e4:71:23:78:b5:56:eb:ea:72:2a:67:a8:ed:17:c6:dd:28:32:
c1:8e:f9:72:23:4d:7e:79:65:f8:37:ac:4f:0d:55:b2:ba:12:
22:89:63:93:3b:2d:bc:6c:d9:40:28:06:a3:0d:3e:fb:dd:3b:
46:c3:b1:b9:b2:65:0e:b0:71:7e:74:b3:3e:ae:11:fc:99:45:
c0:2a:92:bc:60:b5:dc:46:91:e0:9f:16:1c:ba:cb:5d:51:db:
e1:98:a5:84:d8:a6:f8:0d:4f:65:d8:8f:df:35:27:49:1b:e5:
73:ff:ad:c9:0c:68:c4:3c:05:fa:d6:83:0a:74:9e:b6:52:f4:
85:4c:23:84:1f:32:b7:1d:86:3b:4a:ae:64:3e:3a:ff:48:01:
b6:82:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:27:14 2026 by rpki-client