Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: tV9A3YzDunHyzLUvevpo/LctQhFdokjdOAHNjhC2JgA=
Subject key identifier: A9:F0:F1:E6:98:E1:B1:68:78:65:55:13:AE:CC:2B:81:9E:E2:8D:3D
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 01A002B89F9B347A3ACC262A5021B813D1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 00:00:48 +0000
Manifest this update: Sat 15 Aug 2026 00:00:48 +0000
Manifest next update: Sun 16 Aug 2026 00:00:48 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: qjggslEOYM6DFr2d5cYHYNAyyDWydhbZB/qwC4dZAvU=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:9f:9b:34:7a:3a:cc:26:2a:50:21:b8:13:d1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Aug 15 00:00:48 2026 GMT
Not After : Aug 16 00:00:48 2026 GMT
Subject: CN=a9f0f1e698e1b16878655513aecc2b819ee28d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:3b:88:d0:9c:e6:7b:f0:8b:4e:90:75:c9:
99:8d:40:6d:4d:9b:dd:7f:5c:0e:b2:5c:fa:1d:44:
93:58:13:a1:fa:74:cb:d4:7c:08:aa:37:c8:32:45:
24:e8:06:b0:65:69:d2:7e:08:96:cf:cb:9a:ed:78:
7b:03:5c:e0:09:be:cc:b7:fb:1a:04:b6:c2:4d:39:
d5:32:46:38:f8:30:89:96:3c:de:98:a2:75:c6:7d:
c4:07:2c:98:5d:f1:33:bb:eb:67:3a:c2:76:6a:46:
ed:cd:b8:0b:16:fd:99:0f:df:e9:0e:24:59:32:78:
d2:40:af:cc:68:42:7e:03:dc:fc:4e:66:3c:2b:90:
ca:17:60:74:11:f4:9f:7d:a7:8a:f4:68:f7:ac:7e:
65:a2:64:d9:dc:84:b2:32:bd:5d:51:18:65:ad:49:
1f:78:dd:ed:01:68:08:78:cd:48:fc:2f:76:93:53:
cc:fb:4b:ee:56:16:41:13:9d:7e:9d:1a:cd:18:01:
60:33:3d:9d:f5:04:39:36:78:31:7b:3b:d2:0b:98:
92:46:64:c2:20:71:0b:1e:92:6b:dd:6d:e4:44:e9:
2e:6c:2f:a5:82:d7:82:4f:c6:37:99:a0:01:30:b9:
e6:8c:ae:5a:6c:30:33:ff:16:a1:38:f3:c1:a9:c9:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:F1:E6:98:E1:B1:68:78:65:55:13:AE:CC:2B:81:9E:E2:8D:3D
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:94:40:4f:0f:ba:eb:b2:49:7e:74:96:95:5d:09:53:d8:82:
88:3e:c7:e6:31:94:2a:05:ec:0e:07:db:63:b1:b5:dc:f9:e9:
5d:2f:d7:d5:61:c9:06:2f:50:7d:34:7f:36:12:56:87:4c:39:
7e:98:ad:dc:6b:61:af:38:94:c8:09:df:7a:14:dc:fc:64:cd:
79:36:12:20:52:a3:f3:70:37:99:b7:ed:03:ac:1e:2d:63:0c:
46:49:d2:1c:92:8c:44:a0:33:2c:3e:e9:ff:1a:45:2f:31:3f:
a3:34:1e:9a:fc:71:f5:3b:cb:4d:4c:f4:25:fc:87:01:c8:5b:
d0:bf:6b:b7:35:02:db:9d:bb:37:2d:3a:87:89:89:bc:cf:8a:
b9:07:ec:20:a6:57:d3:50:71:25:7b:d5:1c:c5:83:4b:02:c2:
0e:84:f7:58:97:45:74:ec:fe:01:53:22:e4:99:f1:5b:fe:4f:
c4:42:bb:f4:59:7e:83:01:ff:cf:aa:8f:5d:21:e3:fa:7f:b6:
26:13:5b:25:3b:48:f6:e4:2e:23:09:c1:65:2e:d5:aa:ea:0b:
b2:bc:c3:b0:f7:05:42:03:1e:02:db:47:ab:92:d4:b8:53:0e:
f0:86:5a:f2:f8:c7:d6:3f:dc:f9:ed:c5:9e:8e:b0:f0:ba:2e:
78:20:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:11 2026 by rpki-client