Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: 0Ngu1AXn1BydPIby4X+JgQZIzEpW7//UdgfXr5m/7Vc=
Subject key identifier: 0F:01:B2:E6:F1:7C:F0:B5:29:99:7E:FF:FB:BB:FB:76:11:8B:10:C2
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 01A17EBCA6CD4ABFC2ADC70D4E3484044DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 12A8
Signing time: Tue 27 Oct 2026 19:00:54 +0000
Manifest this update: Tue 27 Oct 2026 19:00:54 +0000
Manifest next update: Wed 28 Oct 2026 19:00:54 +0000
Files and hashes: 1: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: CcDsxwTQ2EIkp2kTM6xP5DclpnNjhUdOwUt0SAOqnTY=)
2: tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa (hash: ti/VYS4hognsUWtb/PVfBo1Uhz2rYc5vy7DleprVf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:a6:cd:4a:bf:c2:ad:c7:0d:4e:34:84:04:4d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Oct 27 19:00:54 2026 GMT
Not After : Oct 28 19:00:54 2026 GMT
Subject: CN=0f01b2e6f17cf0b529997efffbbbfb76118b10c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:8f:d0:dd:36:57:82:36:fe:a2:c9:26:91:
c1:00:d9:2a:5f:38:a4:5c:76:46:e9:07:61:b3:7c:
25:2e:34:ce:10:6c:34:22:cf:85:eb:52:4d:97:09:
f2:aa:ff:35:67:c8:3c:eb:27:25:20:ab:5d:e1:f2:
19:d0:b7:c3:13:8d:d8:cb:af:fc:54:22:b0:d4:3d:
c0:33:0c:5f:74:bd:9e:19:01:65:b7:f5:e2:41:25:
fd:67:50:cb:c9:8c:d5:7d:cb:93:de:f9:17:e5:91:
ca:a3:72:f5:2a:2c:1c:e3:7d:6f:20:78:a1:88:63:
b0:15:1a:3b:d4:8b:fa:8c:a4:48:83:5e:dd:1a:a7:
b0:fb:dd:17:20:55:41:fc:64:51:26:94:f4:b5:95:
43:d0:99:78:46:aa:c3:d7:7a:cc:7a:25:cc:d2:f2:
5c:f4:6c:98:08:a2:2a:32:18:87:06:15:c3:9e:e2:
67:1c:63:b2:49:b3:c4:bd:a9:7b:86:0f:ab:15:b6:
c0:68:c6:ca:46:74:a0:46:84:f2:a5:cb:39:86:c1:
5d:6f:a4:a6:b0:12:bd:d7:f6:71:9a:0b:1f:52:d4:
f2:ff:ff:d0:09:19:ff:a2:6d:69:46:c9:c5:1f:7a:
75:73:9b:03:90:9c:9c:ca:50:66:b0:96:7a:ce:d9:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:B2:E6:F1:7C:F0:B5:29:99:7E:FF:FB:BB:FB:76:11:8B:10:C2
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:08:43:12:93:88:82:c0:45:da:6d:1f:b2:3b:9c:83:a7:7a:
45:2c:7e:b2:54:02:88:35:6e:95:02:38:70:43:c6:48:18:9e:
b6:5b:b9:50:ef:50:10:e5:ab:1c:2b:0c:21:47:31:47:de:58:
83:27:c1:25:45:b5:0e:cb:94:95:3e:89:20:a0:6d:88:7e:ea:
82:1f:61:d7:8b:91:56:a4:ce:4f:30:6a:0a:8f:f0:f3:d4:c4:
34:64:a5:9d:f7:fc:bd:85:c0:d9:dd:05:a0:ef:46:d6:8f:f4:
69:7f:77:c5:f6:4b:4e:c0:e3:4f:de:23:7c:c1:4b:f0:04:a0:
58:7d:2c:ac:f4:c8:01:bb:c9:de:c5:a7:ca:6e:28:8c:92:3e:
75:7f:f9:e6:ef:9a:26:b4:80:40:d5:c7:92:f4:a4:5b:cb:8d:
19:7d:5f:60:e8:f0:57:55:c0:23:23:bf:59:ef:b8:08:4e:29:
84:8e:33:7f:d6:81:83:4b:3b:a3:2a:07:04:d1:c8:98:52:3e:
95:10:67:21:3a:e3:da:1c:2f:ff:60:29:3e:bc:5c:33:06:38:
59:04:fd:54:66:cc:05:1b:a3:60:c0:e8:10:3c:a6:89:3b:09:
d9:5d:2d:19:9f:08:64:7a:92:6b:44:97:29:a6:e6:f9:42:25:
19:99:85:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:14 2026 by rpki-client