Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
File: ivFfMc4WFKwlq9e48k24anSz898.mft (raw, json)
Hash identifier: A8lnkrLMXrDq/ijXVYyfjD7GLaqUdQ7FkixR8Eqm63A=
Subject key identifier: 30:F0:BC:DA:D1:BC:7A:A6:D1:EA:F2:4A:E9:39:D5:E6:CE:28:17:3F
Authority key identifier: 8A:F1:5F:31:CE:16:14:AC:25:AB:D7:B8:F2:4D:B8:6A:74:B3:F3:DF
Certificate issuer: /CN=8af15f31ce1614ac25abd7b8f24db86a74b3f3df
Certificate serial: 01A0C40D92ED8CC616AD73C7C49B191932EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
Manifest number: 0F
Signing time: Mon 21 Sep 2026 13:00:18 +0000
Manifest this update: Mon 21 Sep 2026 13:00:18 +0000
Manifest next update: Tue 22 Sep 2026 13:00:18 +0000
Files and hashes: 1: HVgZTOCzOmeIsVa1jFNOUlOBIuM.asa (hash: pAHXwQOyGNXX7NSjDe6sMzzzTHUuF6yV4VE2jeHCx5I=)
2: ivFfMc4WFKwlq9e48k24anSz898.crl (hash: Urz8yj7HeTRU+e8E4/acxyktAJ2q16UexRdQ7wNJQoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:92:ed:8c:c6:16:ad:73:c7:c4:9b:19:19:32:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af15f31ce1614ac25abd7b8f24db86a74b3f3df
Validity
Not Before: Sep 21 13:00:18 2026 GMT
Not After : Sep 22 13:00:18 2026 GMT
Subject: CN=30f0bcdad1bc7aa6d1eaf24ae939d5e6ce28173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:60:ba:a0:73:f9:b0:d9:8d:1a:cc:79:3b:
9a:95:2b:cb:4e:05:72:21:a3:4f:b5:08:c5:cb:4e:
75:0f:6e:65:aa:f0:8f:fb:b4:9f:5a:26:7b:6d:59:
86:71:4c:f5:b6:29:0c:59:7a:fc:98:24:a5:09:0c:
d3:01:d0:ee:97:8b:39:ca:ea:22:d4:80:dd:af:17:
b6:58:22:97:61:42:c2:e5:cf:73:6a:07:a8:94:60:
f3:0c:e6:a2:a4:fe:dc:bc:91:52:8e:09:3e:54:ac:
81:1d:aa:6f:44:06:97:39:a9:d3:9b:5b:52:c9:46:
95:31:c3:63:03:89:c9:8f:f5:68:fe:54:0f:75:14:
63:bd:d0:99:9c:bd:e8:1e:72:e8:0e:e5:d1:3c:de:
05:6f:ad:10:6d:9c:96:11:18:76:18:90:3c:42:af:
de:44:3a:51:f4:4d:fb:d3:70:67:d0:cf:32:b9:f2:
83:e0:2e:a7:2d:27:b6:96:ba:85:94:d2:71:ad:56:
c9:04:14:6b:bc:13:b1:da:10:c8:46:66:d4:42:72:
7f:71:b7:d8:6f:e3:34:ff:3f:dc:6c:a9:e8:dc:17:
d8:e9:c3:62:97:92:58:06:1b:a7:cd:4a:1c:d8:ea:
7c:68:d2:85:78:a1:fe:aa:1f:a9:09:f4:d2:75:1e:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F0:BC:DA:D1:BC:7A:A6:D1:EA:F2:4A:E9:39:D5:E6:CE:28:17:3F
X509v3 Authority Key Identifier:
keyid:8A:F1:5F:31:CE:16:14:AC:25:AB:D7:B8:F2:4D:B8:6A:74:B3:F3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c8:71:fe:56:09:a5:29:df:4e:0f:3b:a5:58:44:11:f2:2b:
57:1d:63:fe:db:56:62:3d:6b:0f:82:65:90:1a:91:2f:53:25:
04:27:54:6e:b6:4a:7f:0b:ca:8a:2e:cf:81:c1:b2:21:95:78:
2c:7b:8d:78:31:8e:06:cd:b2:16:d7:23:c3:96:1b:72:07:95:
b5:a2:9e:52:16:1e:c4:7e:a2:0e:cd:f0:38:3d:4b:94:8e:04:
fe:1b:4e:b1:92:6a:c0:d7:ac:94:d0:02:bf:81:ea:bc:3e:20:
e4:d9:22:cb:56:7d:11:15:fe:ec:a2:96:02:66:cb:a0:d0:70:
e8:7a:9e:92:22:84:bf:fa:bb:ac:30:1f:f9:80:2a:6c:c4:56:
97:ac:00:4e:2c:70:12:7d:2f:5b:65:b4:69:c2:29:54:62:d8:
01:43:d0:b7:be:cb:40:1a:d1:02:29:65:58:9c:90:03:91:9e:
76:44:65:16:39:24:e5:8e:12:e6:39:b2:ab:42:24:58:a8:b3:
c5:a8:bd:0a:ca:ba:e5:a7:7b:ff:b1:bc:8b:b1:f6:71:a3:00:
96:c9:cb:c0:97:ed:e2:ed:89:51:3d:2b:fc:d4:d2:51:76:18:
44:27:87:a8:2f:fe:be:d1:3d:39:9e:a2:4b:43:dd:4c:94:34:
06:2e:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:14 2026 by rpki-client