Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier: Ktgpg3D31aMpgE8joSfWtUr2UIOY7ygR0mexZg6fE48=
Subject key identifier: D8:CD:D7:4E:0B:E1:3D:C0:B0:AB:E3:FD:D7:6F:78:25:40:02:FE:09
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 01A0C7EAEA0499890895BFBD629BD9C26118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 07:00:56 +0000
Manifest this update: Tue 22 Sep 2026 07:00:56 +0000
Manifest next update: Wed 23 Sep 2026 07:00:56 +0000
Files and hashes: 1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: YV0nOW84RHHrkSmwDwsjyg2qVLfofgCvNSW/9sED088=)
2: dIQUiyCohK8UIKP3Wc_vpehQ9jQ.roa (hash: 4z4Cff5T7C1kMcuabXqlqC9vzDBKDpLEEFDPaDQ1Shs=)
3: lU-M6Rbwn_sYPtT01bjpJTpzM_c.roa (hash: aE61BcYLJ+s8wneEHCKlvN2g4ojZACwiHGtJ3iEG3YI=)
4: qgZQRIByCSALcE73ENt-q4UPqdY.roa (hash: GR9g1THKzvFcNqQhXU+wmTdELTKbBSkjvvOetVfO1p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:ea:04:99:89:08:95:bf:bd:62:9b:d9:c2:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Sep 22 07:00:56 2026 GMT
Not After : Sep 23 07:00:56 2026 GMT
Subject: CN=d8cdd74e0be13dc0b0abe3fdd76f78254002fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e1:6e:13:78:8a:56:c6:e7:f6:81:56:f7:97:
ea:e9:bd:47:0f:ab:f7:cb:13:96:e1:5e:e0:21:4e:
81:f1:1d:14:d4:24:be:1b:85:55:74:15:d0:c8:26:
77:0b:73:0e:14:42:3b:8f:b2:2b:3a:2a:14:dd:13:
89:c1:29:cf:85:bf:48:1a:68:3e:ef:8b:a4:58:44:
e9:4f:87:fb:8f:7f:5e:61:bd:bf:b6:43:4d:a9:8a:
f0:ec:c0:9e:69:22:f9:2b:bc:ed:ab:ee:9a:76:c4:
10:79:68:93:1c:ad:6f:e2:54:cf:bf:32:ea:80:39:
ce:c1:e6:8f:ac:43:cd:46:2c:b0:37:ae:c1:43:af:
2c:29:ab:01:e6:69:41:85:da:eb:6c:d6:fe:bc:39:
00:8c:92:7a:07:b7:6e:2d:40:54:3f:a1:36:e3:5f:
aa:be:3a:c8:0e:06:c1:75:46:e4:1e:ff:ea:df:be:
d2:9f:6f:54:1d:94:59:aa:77:3b:8a:a6:b9:25:49:
73:21:84:db:3a:40:df:1c:56:bb:49:46:c3:d1:4b:
d2:5d:7e:b8:b2:7b:1b:af:60:54:a3:95:18:1d:0b:
b0:bc:e4:cb:61:f7:71:1b:95:42:d7:53:17:81:a5:
32:3f:d1:6b:d0:a8:89:c7:a3:95:af:89:66:ec:15:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CD:D7:4E:0B:E1:3D:C0:B0:AB:E3:FD:D7:6F:78:25:40:02:FE:09
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:40:73:b8:e7:51:fd:fc:c6:ec:d8:6b:3f:3a:5f:2e:df:d0:
36:d1:46:36:1b:3d:71:81:52:a3:3a:8c:5d:d3:f5:b0:7f:08:
05:b2:e3:18:08:cf:27:df:b9:52:d2:f4:fa:60:a3:e6:15:e1:
cc:36:72:45:c3:60:1f:f8:03:07:77:f9:b8:b4:6d:bf:42:5c:
44:22:11:5a:01:8b:0b:78:dd:e7:36:a3:db:ff:4c:fe:04:d7:
8e:77:10:56:92:25:10:9b:5c:37:09:ec:cb:90:37:d2:a3:db:
6f:84:4c:d6:73:81:64:26:db:54:e9:6d:f9:e2:9f:7d:fa:f2:
bc:b1:aa:dc:bc:08:30:92:9d:c4:83:6d:09:2b:a0:56:f2:b9:
b8:24:1c:0b:af:dd:f9:4e:cc:1f:c0:19:a1:fd:0d:18:2e:41:
1d:1c:0a:78:55:a3:ad:5f:ea:4e:b3:96:57:1a:08:fd:e6:ac:
70:42:14:83:0a:05:80:7e:9d:35:48:0d:94:84:f3:7c:72:80:
1c:65:38:4b:49:49:95:39:fe:5a:5f:0e:bd:af:56:bc:49:a9:
31:47:3f:9d:df:17:82:d7:ff:68:89:98:c5:1c:bd:68:ad:47:
de:64:f8:bc:59:34:f1:08:34:eb:4f:52:dd:b5:bd:b2:e7:dc:
e5:fc:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:07:47 2026 by rpki-client