Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
File: iMzUohaNl27yVSiXv8cZINYzvFU.mft (raw, json)
Hash identifier: U2Cd6x8cYTF2dbbIhxXErACP6hyg7J6HMBnChaEAQTc=
Subject key identifier: FB:88:25:FC:87:82:0D:C4:E8:78:B1:6E:57:20:CF:0A:47:E8:DD:23
Authority key identifier: 88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
Certificate issuer: /CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Certificate serial: 01A0DF4E78966FAFCA8EAC819EA3864CF363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
Manifest number: 7B
Signing time: Sat 26 Sep 2026 20:00:56 +0000
Manifest this update: Sat 26 Sep 2026 20:00:56 +0000
Manifest next update: Sun 27 Sep 2026 20:00:56 +0000
Files and hashes: 1: Sebdq3Z-zI97Q_QmObG2yD2EvOo.roa (hash: 6XBHsle9CbbB6Dp19ZfuZYsFS8Vr9CEB/OKP2y66uY8=)
2: iMzUohaNl27yVSiXv8cZINYzvFU.crl (hash: 87nlnDC3iE4vk8SIFKf7Djwe5Pp6v32uSgPK8lfD9BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:78:96:6f:af:ca:8e:ac:81:9e:a3:86:4c:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Validity
Not Before: Sep 26 20:00:56 2026 GMT
Not After : Sep 27 20:00:56 2026 GMT
Subject: CN=fb8825fc87820dc4e878b16e5720cf0a47e8dd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:be:35:bc:4d:b7:1f:fd:e7:6e:c9:be:4b:
65:63:e5:f5:4b:f6:49:8a:4d:cd:46:45:18:66:7d:
bb:6d:6d:69:49:51:d3:10:38:b7:fc:9a:9f:32:61:
1d:13:3a:bf:2b:e2:fd:60:1f:2f:11:2d:6b:94:e7:
a0:ec:3d:a9:6f:c9:13:d7:75:89:65:c2:cf:3f:50:
d4:ee:80:8d:ba:4c:5f:8f:68:64:72:74:bd:26:a8:
9a:a4:72:03:e0:09:6b:9d:e6:26:83:46:a1:7a:03:
c2:ad:85:89:e3:42:97:5a:f4:60:1f:f9:b0:0e:68:
60:cf:0e:9d:74:a6:3e:17:01:18:39:1a:c8:53:a3:
70:70:e2:34:88:35:e1:e0:bc:50:28:48:85:2f:24:
6a:49:21:11:70:f3:3e:d5:69:68:9c:28:18:fa:f2:
a7:da:03:cf:93:8f:f9:f2:7a:71:04:bf:7d:e7:55:
30:2c:22:36:45:7b:4f:12:df:30:43:35:da:65:b9:
ed:8a:fd:c3:99:50:16:08:7e:1d:fc:28:89:8c:5b:
ed:67:31:b5:a0:70:8f:e3:fa:93:44:70:72:b1:38:
db:e4:56:f8:15:17:fc:c9:51:7e:00:63:94:b0:61:
bb:d2:78:45:bd:31:74:64:21:c4:f1:18:f4:2c:46:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:25:FC:87:82:0D:C4:E8:78:B1:6E:57:20:CF:0A:47:E8:DD:23
X509v3 Authority Key Identifier:
keyid:88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5f:24:40:01:b2:29:28:1d:90:b3:be:ee:74:e5:2f:09:ec:
da:4d:21:89:a0:00:d0:7c:d5:02:b2:ff:38:71:31:4f:38:cc:
55:e8:a2:ef:e0:14:4f:a7:3e:62:88:5d:3b:ec:3e:60:f5:7b:
3d:5a:c1:b8:af:d6:25:78:d1:8b:cc:d7:70:c1:66:d7:33:07:
94:a6:98:36:20:28:f1:1c:73:58:03:24:3f:82:5e:59:49:ba:
42:c8:24:fc:ce:e0:9b:71:67:4a:17:b0:c3:14:5d:7f:1e:9c:
a9:02:9f:50:0f:aa:58:4e:2f:4a:c3:02:2b:b3:28:0f:a8:81:
35:0b:1b:82:ba:5a:50:6b:c4:ea:ef:78:02:29:28:50:22:31:
c4:49:b5:f1:9f:d7:4f:68:fc:c5:39:26:b7:bc:c0:43:81:2d:
a2:92:82:ca:f9:87:20:a0:47:b5:cf:58:4a:4d:15:68:b9:58:
cd:ba:40:09:cc:d8:54:e4:0a:68:1c:8b:e0:83:b4:59:52:99:
83:ff:9e:ac:1a:c9:0c:bb:76:24:ab:d5:4e:cd:a0:da:fb:c5:
e1:17:6d:12:77:0b:09:5f:94:1b:27:95:58:78:7d:50:47:43:
ce:89:36:ff:77:4b:96:54:8e:fd:c9:e5:c4:18:cd:df:3c:a9:
6e:fb:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:37:32 2026 by rpki-client