Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: yez9KseVD6AZGndGrFP3YL56dujBOQwgBF9MG6BGKMU=
Subject key identifier: 21:54:F2:EC:21:3F:9F:D0:F8:4F:37:95:CB:E9:88:BE:22:2D:37:11
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 01A0E3D0ADF9528E337ECFB4D38E44A3FAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 1A0A
Signing time: Sun 27 Sep 2026 17:01:39 +0000
Manifest this update: Sun 27 Sep 2026 17:01:39 +0000
Manifest next update: Mon 28 Sep 2026 17:01:39 +0000
Files and hashes: 1: Qd96EibuUMUl47bpcNIQg2lzdXM.roa (hash: bfpu3e5a3SbtwnPEBP2TMhw1nW2Ik4salWdsyYywAxI=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: zphy0DQEftMJxgRQmnf05EF8KU55Xfm++EnK5LeNg1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:ad:f9:52:8e:33:7e:cf:b4:d3:8e:44:a3:fa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Sep 27 17:01:39 2026 GMT
Not After : Sep 28 17:01:39 2026 GMT
Subject: CN=2154f2ec213f9fd0f84f3795cbe988be222d3711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:c7:88:5e:f8:50:34:a8:a6:13:0e:01:87:
3e:e0:f8:01:31:af:29:7c:6e:58:e0:d3:6a:f0:c8:
89:37:a4:9a:3f:4b:ed:87:12:dc:c5:b6:5c:59:9a:
3a:6b:49:1e:c4:83:de:08:58:0f:00:46:ab:a2:96:
75:92:2b:f9:cc:5b:28:8a:8b:08:9f:82:4c:06:bc:
a8:46:51:dd:2c:7b:67:d3:92:a1:4c:7c:9c:96:11:
f6:1e:7f:48:b1:45:e6:d8:2f:ad:19:8a:7c:f1:49:
5f:6b:be:90:2e:65:8a:5a:ef:55:cf:f1:61:ea:bc:
f0:72:51:b4:2b:f4:e3:30:df:69:02:0b:ba:fa:4c:
e3:15:ee:bc:93:9b:08:52:5c:c9:6a:4c:57:99:bf:
6b:b1:95:d0:a3:b5:2a:ca:45:84:e7:4f:3f:36:6f:
16:7c:0e:c9:d9:8d:9f:60:6f:99:e3:25:76:51:ac:
10:8b:c0:c5:ed:4c:a1:24:60:4b:9f:63:cb:34:19:
e7:a5:fa:4e:b8:e9:5e:21:ac:ae:1d:bb:d5:de:a5:
13:35:48:03:37:35:c4:d0:16:b4:1a:5f:b6:33:66:
9a:09:77:25:bd:73:87:a7:4f:c6:ad:40:db:b0:4a:
b4:7d:27:cb:b0:b6:e1:87:70:d1:52:00:19:86:74:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:54:F2:EC:21:3F:9F:D0:F8:4F:37:95:CB:E9:88:BE:22:2D:37:11
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0e:9f:70:63:1f:f9:85:23:64:5a:00:99:29:8f:71:0f:76:
91:ec:0b:f8:6c:76:d7:8a:42:10:53:66:b3:fe:df:e4:63:0b:
82:ed:cf:01:f2:e3:b6:f7:3b:fa:97:d4:dd:83:f5:23:2b:a3:
73:74:a9:63:a3:4f:eb:47:2a:59:c9:76:2d:4c:db:a6:77:f5:
4c:8b:77:96:43:74:51:f2:ed:7a:dc:8d:a7:5e:19:76:d1:21:
e3:5a:5d:95:49:9a:8a:86:eb:c9:a3:a0:a7:a7:8d:04:2c:d5:
a7:00:39:9a:1c:19:68:1c:04:cf:37:c8:3f:c4:47:a8:91:e4:
95:4f:44:00:09:88:3f:1c:cf:f3:83:64:76:16:43:ef:74:28:
80:53:37:a6:94:27:6e:08:f2:94:b5:b6:b7:44:96:eb:e4:70:
76:5e:59:0b:a0:d2:4d:83:5e:aa:f8:4d:aa:aa:89:c7:9c:fb:
2a:55:91:8a:e6:98:17:2b:fe:56:7c:14:b3:c0:ee:85:b0:44:
23:16:af:59:3d:b2:ba:ea:f1:4f:af:60:86:00:53:84:d7:e7:
37:0b:57:28:08:22:79:8b:1e:54:b0:a2:dd:06:d4:4e:68:c5:
99:f3:bf:70:61:35:78:07:30:bc:e8:7f:62:52:75:a3:a9:38:
ea:1d:50:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDj0K35Uo4zfs+0045Eo/r5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGRhMjFkYTgwMzhhODIwNTQyYjNhZmFmYmVhYWFhNjY2
YjdiMjcwHhcNMjYwOTI3MTcwMTM5WhcNMjYwOTI4MTcwMTM5WjAzMTEwLwYDVQQD
EygyMTU0ZjJlYzIxM2Y5ZmQwZjg0ZjM3OTVjYmU5ODhiZTIyMmQzNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1jHiF74UDSophMOAYc+4PgBMa8p
fG5Y4NNq8MiJN6SaP0vthxLcxbZcWZo6a0kexIPeCFgPAEaropZ1kiv5zFsoiosI
n4JMBryoRlHdLHtn05KhTHyclhH2Hn9IsUXm2C+tGYp88Ulfa76QLmWKWu9Vz/Fh
6rzwclG0K/TjMN9pAgu6+kzjFe68k5sIUlzJakxXmb9rsZXQo7UqykWE508/Nm8W
fA7J2Y2fYG+Z4yV2UawQi8DF7UyhJGBLn2PLNBnnpfpOuOleIayuHbvV3qUTNUgD
NzXE0Ba0Gl+2M2aaCXclvXOHp0/GrUDbsEq0fSfLsLbhh3DRUgAZhnRvewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFU8uwhP5/Q+E83lcvpiL4iLTcRMB8GA1UdIwQY
MBaAFMdNoh2oA4qCBUKzr6++qqpma3snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgt
ODAxZDg5ZDczNjZkLzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgtODAxZDg5ZDczNjZk
LzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQ6fcGMf
+YUjZFoAmSmPcQ92kewL+Gx214pCEFNms/7f5GMLgu3PAfLjtvc7+pfU3YP1Iyuj
c3SpY6NP60cqWcl2LUzbpnf1TIt3lkN0UfLtetyNp14ZdtEh41pdlUmaiobryaOg
p6eNBCzVpwA5mhwZaBwEzzfIP8RHqJHklU9EAAmIPxzP84NkdhZD73QogFM3ppQn
bgjylLW2t0SW6+Rwdl5ZC6DSTYNeqvhNqqqJx5z7KlWRiuaYFyv+VnwUs8DuhbBE
IxavWT2yuurxT69ghgBThNfnNwtXKAgieYseVLCi3QbUTmjFmfO/cGE1eAcwvOh/
YlJ1o6k46h1Q+A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:12:56 2026 by rpki-client