
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier: rts7cObAv/PV0xDJ7XMKsLNtbAQzyafgFXQxOnL6+xs=
Subject key identifier: A6:1A:94:70:91:9E:05:DF:87:78:39:AE:12:68:1D:30:F3:6A:CA:8A
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial: 01A11A5092A9433FDACA5685934E034A1744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number: 02DE
Signing time: Thu 08 Oct 2026 07:00:50 +0000
Manifest this update: Thu 08 Oct 2026 07:00:50 +0000
Manifest next update: Fri 09 Oct 2026 07:00:50 +0000
Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: 265OeZle6XnvZ+aSjNXnZFSCQWFkBEhXMA+2TLhFJN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:92:a9:43:3f:da:ca:56:85:93:4e:03:4a:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Validity
Not Before: Oct 8 07:00:50 2026 GMT
Not After : Oct 9 07:00:50 2026 GMT
Subject: CN=a61a9470919e05df877839ae12681d30f36aca8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:b3:0e:b4:b6:2d:5a:17:da:ae:b1:9b:f4:
bd:47:90:2c:9b:13:dc:b4:8a:20:80:cc:50:bc:9b:
76:8d:5e:af:a6:94:49:ac:60:fd:6a:4f:00:36:1b:
42:01:71:41:cb:55:77:06:fe:3d:13:ab:e8:cd:37:
87:66:0d:5a:e9:87:c9:2e:d0:8f:eb:7c:cc:77:08:
af:15:24:51:3d:cb:b9:07:5a:67:f5:20:43:a0:4c:
9b:d2:b3:c7:33:b2:6a:7f:64:31:5a:58:7e:ef:88:
dc:d3:bd:75:12:0e:da:f8:e1:84:05:30:fa:4b:a6:
6c:e0:b2:f2:14:de:db:7d:57:bb:07:e7:98:13:cf:
48:81:d4:75:35:d1:a3:4b:6c:74:04:25:2f:57:58:
77:d7:e4:06:2b:08:96:08:8b:58:c0:53:f8:99:f1:
71:89:9d:0f:c6:4d:2e:77:04:f4:89:d6:9c:3d:66:
0d:49:d6:55:d7:1a:11:b9:20:d8:44:38:ad:84:d2:
22:5b:23:0b:3b:bd:56:ad:c1:4c:8d:f3:87:90:e3:
29:c8:3d:73:73:1c:60:92:01:c0:0b:10:96:21:f4:
0a:d0:8e:de:73:3d:c0:7b:5b:3b:61:29:c3:7c:06:
86:5d:3c:65:30:42:9b:5b:c5:6b:4a:82:1f:c3:4a:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:94:70:91:9E:05:DF:87:78:39:AE:12:68:1D:30:F3:6A:CA:8A
X509v3 Authority Key Identifier:
keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:89:ae:18:25:c1:3c:4b:ea:70:1d:8d:2c:2b:97:9f:13:9c:
0d:40:bd:1a:cd:bd:3f:3e:5c:54:eb:9b:0f:a3:b2:22:51:73:
45:bd:51:18:b7:eb:89:da:0d:f6:10:12:f1:07:50:ff:f7:43:
b0:3a:19:9b:40:40:db:1b:f5:6a:aa:30:6f:c6:4a:99:fe:69:
04:5c:0e:1c:59:4d:41:02:6d:e0:5d:75:f9:54:3e:d4:e8:67:
c8:60:03:6b:3a:2b:8f:04:35:30:76:e6:b8:fa:75:b7:0f:26:
cb:53:71:63:47:a7:f8:81:2d:45:12:14:87:e1:0c:c2:47:b6:
92:d0:87:28:74:75:41:3e:23:6e:e4:70:36:37:07:c6:20:c2:
32:07:ea:75:c9:ae:bd:61:be:1a:21:f4:62:8a:62:29:09:11:
4e:be:83:97:cc:79:9e:47:57:42:10:39:bc:a2:0f:a3:a2:98:
52:2d:b6:05:6f:f5:b1:60:73:5f:5c:58:c7:e8:38:76:e6:c5:
85:e4:0e:58:fc:fe:48:d8:65:4a:30:13:07:19:11:d5:be:e5:
f5:1f:a3:d8:f8:ca:ef:f0:ee:5a:2a:7a:2e:59:c2:2b:a0:7e:
39:9a:a7:ec:0f:54:1a:b4:9c:85:67:ca:74:7b:8c:34:12:9b:
60:29:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:06:58 2026 by rpki-client