Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: dUUvRYdjnHCRSafg85LFA46KyboswBRIrE3UHWd+NAg=
Subject key identifier: 6F:31:1A:DB:FE:BD:3A:77:F5:A9:72:AB:AD:A9:FF:BD:20:1D:2E:94
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 01A17CCE40DA4F8FA42EECA1B2B54154C681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 12A7
Signing time: Tue 27 Oct 2026 10:00:54 +0000
Manifest this update: Tue 27 Oct 2026 10:00:54 +0000
Manifest next update: Wed 28 Oct 2026 10:00:54 +0000
Files and hashes: 1: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: cYNLhSU/g63pZGecXZ4wbWC4dzn4ufSBPOmO+6kzZCY=)
2: tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa (hash: ti/VYS4hognsUWtb/PVfBo1Uhz2rYc5vy7DleprVf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:40:da:4f:8f:a4:2e:ec:a1:b2:b5:41:54:c6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Oct 27 10:00:54 2026 GMT
Not After : Oct 28 10:00:54 2026 GMT
Subject: CN=6f311adbfebd3a77f5a972abada9ffbd201d2e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:71:24:6d:49:c9:6b:0a:27:1c:37:3f:cb:
af:4b:4a:31:34:c2:2d:59:c9:5c:4d:ef:f7:a7:de:
c4:c3:19:fe:a2:9b:c7:a9:48:bb:06:b6:8a:b5:8f:
7a:a0:8c:06:7b:ae:f8:d8:30:9a:e3:bf:c0:3b:23:
9f:7a:88:4d:fe:46:36:1e:5b:35:df:55:65:80:15:
81:db:2d:84:7e:e2:0a:b7:1a:5d:40:a5:3a:46:08:
3e:39:c8:40:78:ae:e1:17:b4:07:9c:5a:0f:25:76:
2f:b5:e2:85:fb:6b:c8:90:1d:fe:9d:a4:c5:ba:04:
ed:6f:57:e8:cf:da:e7:a5:a7:e7:be:6d:90:73:de:
0b:1c:01:5b:86:78:51:20:e8:80:a4:24:4c:29:80:
82:38:ee:58:fd:42:13:28:12:63:4c:a4:ca:f2:c0:
7c:6a:36:5b:58:d6:f0:46:bd:2c:d2:ab:f0:a4:83:
0c:32:d3:d3:07:18:54:88:14:87:c2:f7:db:0b:d1:
1a:d4:d9:51:cb:2a:64:ca:62:9a:12:ac:73:db:d8:
52:72:cb:46:25:cf:c7:91:a5:ef:02:42:75:52:02:
76:bf:c3:96:e9:0c:bc:6c:fc:d4:36:80:d9:78:c2:
82:40:4c:1c:4e:09:29:ea:13:7e:eb:23:75:ac:88:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:31:1A:DB:FE:BD:3A:77:F5:A9:72:AB:AD:A9:FF:BD:20:1D:2E:94
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e9:48:4b:f2:8a:fc:6f:8b:fc:c5:38:72:fe:60:4b:0c:6b:
75:25:ee:15:5b:2c:14:62:ac:79:29:93:e2:5a:f1:ea:70:d4:
db:0b:7a:bc:5c:51:1d:89:0f:e7:1b:4f:c6:78:b3:5b:61:8f:
c9:24:8d:53:96:de:c3:19:c4:73:60:5d:cd:2e:7a:3f:99:a8:
69:95:ad:75:e8:66:c7:a1:9c:7c:77:4d:d2:f7:8e:f2:a9:3e:
fc:4d:76:b7:98:cf:05:b6:04:9b:69:6f:f7:44:6a:75:67:b8:
f0:75:60:37:dd:29:fa:53:1d:15:1e:92:ae:b8:16:bc:ad:2f:
73:ff:53:03:44:f7:26:f9:b3:27:c3:42:de:16:a3:4c:23:b7:
2f:bf:46:58:71:e3:b6:a3:07:55:43:e9:76:9f:68:50:22:1e:
d6:f5:39:cc:2c:8f:6f:e2:1e:96:c8:ad:48:97:58:04:73:b9:
21:05:d5:ac:4f:e3:d3:dd:f8:8b:8c:ee:b8:f2:09:8f:84:72:
6a:34:18:c2:d1:4c:da:43:80:0d:6d:a7:56:92:ce:87:2a:6d:
22:85:c2:00:4e:8f:c1:12:84:a0:21:a3:69:6d:07:c3:94:fe:
11:80:13:a7:1d:0d:9a:61:59:c0:bd:a1:2a:0e:d8:9f:7a:4f:
22:3f:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:30:11 2026 by rpki-client