Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: UCCns+Kn6yhtxGE7O9vodBVyM8ut9vbYt5Kal7frGbY=
Subject key identifier: 9D:BA:87:81:E2:6F:63:C9:C1:8A:BC:EE:7E:AD:FF:5F:D0:D7:24:BA
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 01A0DFBCC8CFD29D9D9E4FAD9734AE1306E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 1372
Signing time: Sat 26 Sep 2026 22:01:26 +0000
Manifest this update: Sat 26 Sep 2026 22:01:26 +0000
Manifest next update: Sun 27 Sep 2026 22:01:26 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: iVt1coWSiK5gNDviZpIU3eraqhv4HVcR9k/NWjwWbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:c8:cf:d2:9d:9d:9e:4f:ad:97:34:ae:13:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Sep 26 22:01:26 2026 GMT
Not After : Sep 27 22:01:26 2026 GMT
Subject: CN=9dba8781e26f63c9c18abcee7eadff5fd0d724ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:05:06:81:85:85:bb:6c:72:5c:b6:6f:de:
09:e7:2c:d8:d0:2c:bf:17:ce:8a:79:f5:99:75:47:
f9:d9:01:10:34:f0:45:04:13:ec:ec:f8:42:94:85:
50:0a:02:51:67:53:35:24:9c:08:a4:53:df:1b:8f:
89:e6:03:ba:b1:e6:a5:b3:3a:44:93:dd:66:0e:7c:
e7:61:3d:be:e7:24:9e:c5:c6:ea:03:19:5f:1c:d6:
01:0f:b4:6f:d7:f3:c0:35:a2:55:9f:92:9c:68:d3:
dc:a2:40:5b:30:d5:7b:20:21:d9:d8:2b:57:97:42:
42:c8:bb:d7:36:7d:8a:46:f4:c8:3b:83:9f:ed:aa:
97:27:d1:7b:cd:bc:6d:ad:29:77:b6:b6:a5:94:27:
c4:f5:d2:a2:f1:ae:42:3e:19:9c:5c:35:ce:32:e4:
1b:de:b6:dc:84:6a:d4:e0:e0:e7:1b:db:33:95:16:
5c:41:f4:a1:fa:93:df:4a:2b:62:7b:d1:4a:5e:82:
71:37:70:62:7b:62:ea:70:af:47:29:b9:ba:80:a8:
34:75:ed:5c:db:2e:6d:18:50:52:01:68:5b:7f:11:
d9:5b:32:ed:8d:b2:63:c5:62:c4:5b:18:30:31:bf:
47:fa:78:3d:18:20:26:3a:22:de:ce:63:c7:77:ad:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BA:87:81:E2:6F:63:C9:C1:8A:BC:EE:7E:AD:FF:5F:D0:D7:24:BA
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:aa:d6:fa:06:f9:41:f5:03:5f:98:86:ae:9b:27:af:37:
62:bb:2c:23:1f:e1:33:f0:4e:9a:71:72:aa:10:43:5b:76:ba:
8b:19:05:90:52:97:db:fa:66:f4:69:9c:37:73:15:d3:3c:01:
c5:2c:bb:5c:0d:58:99:7b:94:8f:2a:ee:f4:04:77:f4:18:12:
2d:b4:06:ea:18:06:72:ef:cc:58:f4:5c:fa:bf:f8:9d:09:8e:
22:ee:c2:f8:ac:6d:d7:86:9e:b5:d6:94:35:7c:d1:76:3f:7f:
85:24:0f:e1:7a:76:1a:e8:fc:f2:39:be:93:4e:87:66:93:3c:
1e:69:86:42:7c:f8:05:48:11:62:2b:7a:1e:0d:41:54:b1:03:
b0:f8:22:d5:19:96:49:9f:df:15:b4:48:88:80:0e:09:14:49:
4b:b2:af:46:73:c6:e5:91:39:34:9b:c0:47:1d:97:3d:95:f3:
15:fa:cf:82:ab:67:21:90:f4:b1:e9:ae:2c:59:df:11:99:e2:
f1:64:e2:c0:1f:47:35:f6:94:bd:5d:fe:42:2f:23:4a:89:a7:
98:71:f8:d9:31:1d:ef:80:2c:cd:a0:99:d9:92:c6:86:57:2a:
14:cb:f8:0b:b2:9d:e5:b1:e1:63:69:36:57:a0:dd:eb:8f:52:
ce:3e:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:07:28 2026 by rpki-client