Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File: IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier: NbXt4CvOzP+UXhO314W2KPC57uais0ezyMH028W+cKU=
Subject key identifier: F5:DA:75:D2:BE:D1:2E:B1:B8:03:C2:D9:26:96:64:3B:A7:AA:1E:5F
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer: /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial: 01A12578E2E766137EB0E6E2480C29C603FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 11:00:41 +0000
Manifest this update: Sat 10 Oct 2026 11:00:41 +0000
Manifest next update: Sun 11 Oct 2026 11:00:41 +0000
Files and hashes: 1: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: XwU+Ga0C8mgeA+FiCoWxaVcfsi7IhgY86d+etz31Ko8=)
2: ToOm_DRG8L881LK0bTvQrJEi9zE.roa (hash: DCNqoXRqfdwODxjtc8J2/AVxGOKRF24UDLD2fHtc4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:78:e2:e7:66:13:7e:b0:e6:e2:48:0c:29:c6:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Validity
Not Before: Oct 10 11:00:41 2026 GMT
Not After : Oct 11 11:00:41 2026 GMT
Subject: CN=f5da75d2bed12eb1b803c2d92696643ba7aa1e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:17:e1:93:8d:7c:c1:e2:e5:4b:93:42:c9:
95:e1:27:5a:95:42:d0:a6:dd:57:23:28:05:8d:81:
77:cb:7d:d4:87:31:26:77:e6:27:a6:0d:f0:ec:bf:
9b:d5:83:3b:0b:c4:9f:2e:b3:59:d1:05:55:b8:df:
a1:ae:a4:5f:5b:6d:34:b6:31:53:f8:ec:c8:c5:df:
f5:67:7f:02:1f:3b:5d:6d:e6:2c:08:5d:d1:44:1b:
ea:1b:ac:7c:81:2b:f8:95:7d:e2:89:f0:3f:74:54:
39:95:f7:05:28:b2:86:87:e4:f5:f8:64:92:bf:1f:
de:62:1a:c4:19:3a:61:17:62:2e:60:d8:fe:22:a3:
be:10:80:86:47:3c:fa:26:12:c6:16:0c:d5:70:7f:
b9:38:2a:67:2e:96:4e:a3:1a:57:5d:3f:12:10:0f:
9c:3d:d5:7c:74:6b:94:2d:5d:43:8b:64:62:f4:da:
61:fd:4e:6b:54:bf:9e:ec:6d:c4:10:cf:92:5e:47:
92:83:12:01:6e:3c:4b:cb:41:61:10:41:91:99:05:
f0:5a:47:de:cd:c0:34:10:3c:9e:a3:5f:58:65:c7:
77:9b:75:e2:a3:a6:e7:99:42:16:5b:76:3a:17:72:
e4:16:62:59:b8:cb:5e:c6:bf:86:d7:86:98:5f:05:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:75:D2:BE:D1:2E:B1:B8:03:C2:D9:26:96:64:3B:A7:AA:1E:5F
X509v3 Authority Key Identifier:
keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:de:bb:19:17:d0:41:b9:4a:f9:ab:64:78:f9:c3:a5:cc:1e:
1d:c8:e8:9f:b0:9e:d0:23:94:b9:cb:a8:91:5c:50:b7:e4:04:
cb:54:c2:80:1b:a4:81:5f:b8:da:72:d3:b4:68:33:12:20:c7:
39:41:27:13:3b:98:d2:59:64:03:5f:e8:9e:47:0f:03:ed:cd:
25:47:03:d3:06:3a:94:15:ac:71:9b:d4:59:48:ca:1e:60:62:
44:bb:a6:e4:7c:61:68:d0:5c:bd:8e:57:f3:ec:a7:cf:00:78:
51:e0:57:54:26:12:02:ca:30:82:2f:4a:bc:47:ee:e3:e0:2c:
5d:18:cd:7a:ce:18:43:42:0b:ec:7e:26:f2:71:35:e0:53:f4:
a9:78:df:aa:1e:49:8e:ef:c2:e6:79:dd:6a:cb:f5:c9:f4:d0:
92:5e:69:08:4e:16:02:dd:3f:c0:a9:1f:7d:2a:80:28:e3:c3:
14:8f:38:7e:ba:1f:ac:ea:e5:b2:ff:61:ce:9c:7b:10:d3:56:
2b:22:95:bc:29:fb:6f:e5:05:15:7c:12:ce:8a:87:4d:aa:1a:
dc:59:08:fa:6c:25:bf:d2:8d:7d:94:c2:2f:80:11:01:28:89:
6c:ab:b7:dd:e8:68:40:a3:51:c8:0e:54:d9:90:a1:47:4c:b8:
f9:7e:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:59:56 2026 by rpki-client