Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: ceCVbWnjB5G5d7QtFuena8/wStqxIY/jvQ0ous28MgQ=
Subject key identifier: 8A:E4:D1:22:CA:4C:45:69:43:E1:07:B7:0A:C7:D8:E8:41:95:14:3F
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 01A0C633253848E092658F772943020DCFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 23:00:35 +0000
Manifest this update: Mon 21 Sep 2026 23:00:35 +0000
Manifest next update: Tue 22 Sep 2026 23:00:35 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: I70PMU8b8tMQH7smsFbcKY4C6Lc+zBeqZz/2RekeJVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:25:38:48:e0:92:65:8f:77:29:43:02:0d:cf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Sep 21 23:00:35 2026 GMT
Not After : Sep 22 23:00:35 2026 GMT
Subject: CN=8ae4d122ca4c456943e107b70ac7d8e84195143f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:50:99:bb:72:d1:9f:11:be:49:6d:39:72:
eb:6d:21:7f:a1:56:d5:0b:f4:cc:5e:32:cc:a7:40:
7f:62:ac:73:be:5f:8a:28:e1:7c:e5:25:47:34:eb:
01:b5:d5:91:29:14:48:53:33:87:64:31:39:69:3c:
32:49:4a:aa:aa:32:29:5d:dc:73:30:97:ba:67:63:
de:88:25:88:02:b3:90:41:a9:a6:75:b2:67:79:f1:
73:72:9d:55:9b:5b:33:04:29:c8:3c:5f:52:76:dd:
c3:69:3e:51:3b:f0:af:3e:a7:d2:13:c3:94:75:a0:
14:c6:a2:fa:1b:1d:ff:fb:ea:c7:9f:4a:8c:71:03:
fb:64:58:2f:21:59:07:06:5b:22:46:c1:d0:13:4f:
a9:10:fa:a9:1b:ff:4a:e0:f0:90:d5:33:4d:a6:83:
db:35:d4:b4:06:ca:43:ab:22:8f:77:e2:3a:36:aa:
53:56:8c:c5:c3:5e:a9:17:a0:ed:2c:ac:bf:c6:72:
ca:e0:e7:91:d0:0b:df:f4:80:38:d9:23:66:ae:6c:
ed:ef:6e:4c:7a:3e:db:78:a0:d5:64:f4:63:08:46:
53:4b:30:07:01:23:c5:73:5e:51:7d:50:a9:39:3f:
d7:e2:f6:24:e4:32:ff:1e:26:4a:86:21:54:88:42:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:D1:22:CA:4C:45:69:43:E1:07:B7:0A:C7:D8:E8:41:95:14:3F
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1a:11:04:c4:91:0e:98:45:27:24:a4:9e:fc:f6:1d:5d:2b:
d7:79:f7:15:39:2e:d3:84:42:e6:2a:b2:84:d5:f1:d4:ff:0b:
e0:a5:51:b7:7a:74:fd:23:fd:4a:63:12:b7:bb:83:8d:f8:fc:
94:43:29:e8:29:52:51:bf:0f:f4:fe:a0:9a:d0:07:76:31:72:
ea:60:73:61:33:20:65:a7:3e:5d:a0:1a:f6:12:cd:5b:0c:8f:
38:ed:7d:2b:8f:f3:67:e4:d8:4d:c6:e9:2e:15:c8:c7:61:0a:
ed:78:e9:72:8d:76:86:34:be:b3:fe:17:da:9f:44:1d:4e:7a:
13:98:04:9d:99:8b:b2:78:71:23:f7:aa:4a:c7:27:86:32:cc:
94:59:4f:7e:36:b3:e3:3c:61:e9:5a:24:27:7e:b7:fb:00:a8:
78:24:68:0f:0d:43:9e:05:a0:07:4c:08:cf:9c:f9:f1:a0:b7:
ae:68:f1:13:ac:d4:65:5c:78:3d:75:79:8d:ec:02:3c:eb:37:
5f:4c:3f:9d:14:3e:6c:59:76:90:3d:c2:1d:17:89:2e:54:bd:
3b:47:20:fa:f3:85:d0:47:8c:6f:40:16:ec:25:ca:38:8d:79:
75:9e:56:fa:8c:61:a0:f6:a0:79:18:76:bd:f5:19:89:b2:9f:
ba:96:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:33:16 2026 by rpki-client