Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: WWXzqJeSLVCpxfFIKA4JEGT5aFo3O0UsmdDiyDKtvQ8=
Subject key identifier: AB:D9:03:DB:D2:36:EA:E1:C6:C6:7D:F6:C8:1B:4D:51:F7:D6:4A:68
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 01A0CA47061A55CA6439256D6BB1FD52C9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 1125
Signing time: Tue 22 Sep 2026 18:00:47 +0000
Manifest this update: Tue 22 Sep 2026 18:00:47 +0000
Manifest next update: Wed 23 Sep 2026 18:00:47 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: HlQFFCc2J9EgJDhQbMoiObfN2k5GPQ2xYYGXwLaZH8Q=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:06:1a:55:ca:64:39:25:6d:6b:b1:fd:52:c9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Sep 22 18:00:47 2026 GMT
Not After : Sep 23 18:00:47 2026 GMT
Subject: CN=abd903dbd236eae1c6c67df6c81b4d51f7d64a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d0:bb:7e:bd:fd:0c:07:6b:ce:0e:5e:f7:c0:
ed:f5:4f:46:d6:59:75:99:bd:c1:14:5a:f4:df:ad:
af:2b:58:42:8d:43:24:1b:14:05:4f:21:4f:5b:3a:
8a:38:d4:eb:0b:c1:71:91:77:cf:64:7a:24:e5:b3:
46:de:f1:3b:63:bf:fa:ee:c4:05:f6:cc:f4:e3:cf:
ce:35:65:5c:80:3a:e4:8a:1f:95:74:77:83:46:6e:
a5:05:08:b6:02:49:f6:a2:91:a9:4c:18:e3:e5:e9:
98:30:9c:b9:ce:1b:ca:f3:a8:7d:23:72:c7:b2:13:
16:9b:99:31:4b:36:6c:b2:04:5d:98:24:9c:2c:07:
6e:f6:81:53:54:16:18:ce:db:1a:23:3e:6e:7e:94:
27:1e:18:27:39:f7:56:60:23:5f:22:af:b1:bc:9e:
36:1c:9c:1a:49:8e:0c:cf:62:31:86:5f:5b:66:c0:
2f:37:98:7a:f2:4c:9e:06:b8:3c:72:cd:b7:aa:63:
b1:c4:5a:c0:5d:1b:f4:c3:9b:c6:9c:41:d7:d5:f4:
69:1a:6f:fa:2b:7b:03:cb:8d:d7:50:13:aa:26:aa:
5b:67:65:de:10:a9:a9:1c:18:9c:6b:37:59:7b:d1:
f0:b9:f4:98:41:ff:97:7f:a1:a5:7a:c5:19:54:13:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D9:03:DB:D2:36:EA:E1:C6:C6:7D:F6:C8:1B:4D:51:F7:D6:4A:68
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:43:e8:20:a7:8c:19:07:69:c1:ed:9e:b9:48:d8:54:ef:ec:
4c:0c:9e:44:04:7f:6b:9e:33:89:da:87:28:24:62:24:8d:96:
19:d5:40:07:ec:9f:c9:87:ac:4d:58:1e:35:75:d7:0f:63:d6:
1b:c3:30:4a:a8:0b:af:21:b2:4b:82:5c:4b:5d:c7:ea:a8:f7:
e8:34:f0:07:ff:51:84:ff:45:df:79:08:cc:61:50:fc:fa:ae:
10:92:06:e0:99:aa:4b:0a:03:ab:88:67:5d:9f:02:f8:64:db:
64:6e:d7:10:48:e1:bc:47:41:3b:49:64:7f:bb:1d:de:b7:2b:
fc:0f:ee:33:77:e7:d6:ac:39:85:04:25:30:18:a0:1c:66:67:
25:78:ca:64:b7:14:a5:50:09:4d:dd:c4:fa:2b:13:60:4d:f9:
b7:03:14:67:82:62:00:1f:94:16:65:ec:42:ce:16:8c:0b:25:
74:f3:ed:89:4e:75:44:08:6b:e6:ad:cc:11:d3:3d:4d:c3:83:
c2:ce:93:fe:94:fd:5d:5a:32:2b:a3:7d:a6:55:80:ba:86:71:
12:26:6c:12:92:66:5d:b2:86:52:7e:5d:4d:52:9b:70:cf:39:
1f:52:5d:ce:b8:30:8b:3e:eb:a9:ea:24:77:2e:7b:05:b8:9f:
6e:f3:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:03:30 2026 by rpki-client