Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: pY/hPtGyOwmTe0nSa5SKIovAw+jyIpzwF7rDcNyMZOc=
Subject key identifier: 04:B6:3A:8A:13:4A:70:5C:04:7F:A8:89:AE:6F:0B:51:DF:8C:D7:9A
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 01A0897A2D00A70997F3C7DD582B2268366F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 1229
Signing time: Thu 10 Sep 2026 04:01:20 +0000
Manifest this update: Thu 10 Sep 2026 04:01:20 +0000
Manifest next update: Fri 11 Sep 2026 04:01:20 +0000
Files and hashes: 1: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: iCJyRhyDc5p4UVTB9GG0dnBW+LGAG4lRWfuPL3+DVcY=)
2: tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa (hash: ti/VYS4hognsUWtb/PVfBo1Uhz2rYc5vy7DleprVf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:2d:00:a7:09:97:f3:c7:dd:58:2b:22:68:36:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Sep 10 04:01:20 2026 GMT
Not After : Sep 11 04:01:20 2026 GMT
Subject: CN=04b63a8a134a705c047fa889ae6f0b51df8cd79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:1b:2d:cc:5c:ce:4c:79:29:93:ec:e6:2c:
51:df:a5:c8:48:f3:df:47:6f:12:3d:8a:96:67:f5:
c8:a1:c6:0c:f3:95:1a:1e:a9:f3:f3:7e:c7:1a:da:
75:4e:1d:0d:32:63:17:27:54:bd:fa:eb:9d:a4:bf:
46:41:ba:47:a7:d9:c8:1f:1d:70:ee:28:09:b6:33:
0d:6a:e6:44:fe:25:6d:b8:6a:65:56:aa:a4:92:d8:
3f:a3:c4:ad:4f:0a:07:47:53:9f:1b:61:13:30:54:
db:26:9c:72:3e:7c:a3:af:5e:02:f9:a7:44:9a:e9:
23:3b:a8:f0:a4:d2:64:c1:45:bc:46:7b:50:78:d5:
3f:5f:e2:63:84:ea:4d:4f:80:5e:97:01:a6:11:f2:
b5:5a:47:48:0f:88:0c:ba:f2:80:0b:29:b4:81:74:
78:9d:b2:ee:d0:e6:e6:a8:0b:23:d5:53:24:1d:73:
56:02:92:95:92:a2:fb:b0:ff:1f:fa:8c:2b:54:55:
e9:81:c5:43:4b:3b:0d:39:6c:10:9f:00:4d:cd:dc:
da:82:0f:e7:a8:1e:c8:a2:dd:c9:e7:be:5d:ec:dd:
9f:9f:64:70:c6:87:c5:dd:1c:bc:91:be:3a:ce:c4:
d4:83:b8:36:7c:e8:a3:4d:31:e7:97:ed:6e:35:11:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B6:3A:8A:13:4A:70:5C:04:7F:A8:89:AE:6F:0B:51:DF:8C:D7:9A
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:1e:d4:dc:6f:c3:de:3a:e8:8e:5b:83:45:9e:a6:a6:8d:
c1:8d:6a:97:7f:a5:82:1a:f0:75:03:23:7c:e2:5f:24:20:64:
ad:f8:3b:39:ed:77:2e:93:ae:9f:7b:cf:ce:02:59:9b:f1:be:
cf:a8:90:59:16:03:01:ab:fb:2f:a4:9c:fa:29:29:2a:94:d1:
3f:42:15:0b:b1:90:f0:c1:7c:4a:26:b1:bd:c8:95:47:4c:80:
57:9f:27:d8:e5:3c:61:5a:e0:66:e0:df:54:f6:2c:07:47:19:
5f:1b:ed:c7:d5:21:5a:16:93:93:07:23:37:c3:be:d2:a0:bd:
7f:e6:9d:fe:e8:8c:2a:cf:01:56:a1:a2:77:a7:23:ee:c6:7a:
82:55:82:f6:dc:eb:8a:eb:c3:96:c3:65:67:28:80:4c:fa:1c:
95:97:1c:cf:66:83:f4:d8:06:e4:b9:3e:7a:60:45:f7:b7:4f:
88:f4:09:3a:d7:40:b4:06:7e:51:3b:f7:1e:ba:8d:dd:50:3c:
81:bb:f7:ca:05:f2:0b:23:43:9b:ec:9c:6f:8f:52:df:21:8e:
e6:e5:b0:00:7f:44:19:22:42:1f:c9:e1:31:33:e7:89:f2:7d:
44:28:66:0e:19:f4:17:1a:28:eb:db:67:21:af:24:3a:29:ce:
6d:75:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:09:28 2026 by rpki-client