Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: sIHhSwB1hf1GjO1/UuXF2czlGT0p2ldoXbpQfJeJ49g=
Subject key identifier: 3F:30:C3:42:96:46:B7:AA:3D:9C:21:AE:48:8A:3C:2D:48:68:2C:0E
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 01A0C6D81D4C37576A04E93BFA600B981828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0E01
Signing time: Tue 22 Sep 2026 02:00:47 +0000
Manifest this update: Tue 22 Sep 2026 02:00:47 +0000
Manifest next update: Wed 23 Sep 2026 02:00:47 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: q+Al6EdXaR/M4vc/R1wAkPfqw6+SnL4ZmSd21r5yV8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:1d:4c:37:57:6a:04:e9:3b:fa:60:0b:98:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Sep 22 02:00:47 2026 GMT
Not After : Sep 23 02:00:47 2026 GMT
Subject: CN=3f30c3429646b7aa3d9c21ae488a3c2d48682c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:b4:6b:c7:1d:ee:ff:6e:95:cd:12:b2:84:
4d:88:2c:82:49:2f:67:e4:d6:c5:5a:9b:1b:12:7b:
8f:d1:21:14:84:f4:73:d1:04:63:46:19:47:97:8f:
e9:bc:69:77:4f:1a:84:22:fe:3f:37:e5:f7:04:21:
08:e5:27:5f:eb:fe:c0:65:85:7c:0b:7c:2c:f8:36:
43:a8:0c:52:11:d8:93:38:00:33:2f:bc:91:f9:11:
6f:38:df:5a:28:3b:47:02:41:6f:ae:8a:99:d9:b3:
99:6f:60:5f:7e:30:f7:ca:09:d8:3c:39:f0:00:b2:
7d:f3:2f:1e:fc:03:93:6f:ad:1a:5b:3b:30:d3:b5:
c6:31:41:c0:cb:0a:21:43:2b:cf:34:88:ba:8e:aa:
2f:f3:c8:e5:9d:16:27:88:44:71:d1:02:fd:68:a7:
76:8f:79:51:f4:21:b5:00:57:99:6e:a0:a5:21:ff:
ce:d8:c0:a0:aa:3e:5a:c6:39:2f:92:eb:49:fd:ea:
fe:fc:2d:39:fb:bb:79:2d:fe:15:96:e7:b0:69:74:
2b:6b:60:03:ec:19:d6:9e:09:bb:3d:3e:5f:df:0b:
6f:f9:f4:94:40:87:32:45:57:f3:ef:b2:4a:92:00:
17:de:85:bc:d8:82:11:d5:34:b7:81:ef:b5:7a:1e:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:C3:42:96:46:B7:AA:3D:9C:21:AE:48:8A:3C:2D:48:68:2C:0E
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:14:6f:d2:e0:6d:a9:e0:9c:d2:8d:6a:92:2d:75:85:c6:
72:23:10:d8:49:3d:f1:13:44:de:a5:3f:21:11:a4:88:57:1e:
42:ce:53:f6:ec:3e:b9:af:cd:a4:64:5d:33:86:19:70:b1:19:
61:b1:3b:13:22:e3:fe:b1:a1:68:f8:bc:d4:d9:ef:51:5d:5c:
97:db:27:c0:91:e8:05:18:72:eb:ec:9c:b9:ac:3e:91:af:50:
26:dd:76:d1:ff:44:87:83:8b:26:08:ff:f2:65:82:7f:76:b3:
c9:2c:c4:10:61:39:69:7e:9f:e1:c4:75:4d:ac:a3:e1:af:99:
3e:85:4e:9b:6f:5d:dd:b6:07:b3:a2:3b:21:0d:33:e2:82:5d:
8b:74:d8:d4:68:e9:24:aa:9e:09:c6:8c:08:a7:e8:32:12:08:
25:05:44:69:0e:4c:97:b6:dd:42:d6:7f:41:85:f8:bc:ed:71:
5c:60:f1:23:19:8e:09:9a:49:0b:03:23:72:74:cc:b3:43:27:
f1:91:77:e3:8a:80:fb:30:a3:3f:9b:f9:88:3b:4e:25:1d:db:
d1:97:d2:6f:42:49:96:0d:4f:30:18:0c:37:b1:a6:2f:a6:02:
f0:3a:57:a2:90:e6:9d:63:80:e9:d6:ed:15:fc:91:ff:95:7f:
ad:80:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:44:11 2026 by rpki-client