Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: CcT0F+8GPAildzTksZehtvARHbMbcK7DuvOXT/wyo9w=
Subject key identifier: FA:05:9D:A2:9D:E4:97:D7:28:C7:80:75:9D:F9:BC:45:39:51:8D:E2
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 01A10BB940DD618BBCCCC197C4EEF87BAB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0E83
Signing time: Mon 05 Oct 2026 11:00:52 +0000
Manifest this update: Mon 05 Oct 2026 11:00:52 +0000
Manifest next update: Tue 06 Oct 2026 11:00:52 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: GR2S8Vd4vXBD70tZ1ddZhVdpgedJ6EDZ06kDGfZSXQE=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b9:40:dd:61:8b:bc:cc:c1:97:c4:ee:f8:7b:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Oct 5 11:00:52 2026 GMT
Not After : Oct 6 11:00:52 2026 GMT
Subject: CN=fa059da29de497d728c780759df9bc4539518de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:4d:38:c9:5e:fc:b0:67:52:8c:66:f6:f1:
7e:06:ea:a2:11:bf:64:99:43:9b:31:e2:6c:19:a9:
9b:62:36:45:6e:f5:73:bf:89:0e:2f:9e:d7:cc:7a:
b6:fb:78:f6:04:60:b4:0c:ef:4d:d5:fd:4d:cd:52:
62:9a:76:0f:13:1e:00:18:55:22:09:ce:0d:c7:39:
d4:f1:4b:8d:30:1b:73:f8:b7:d9:ac:d0:60:3e:5c:
34:a3:ae:42:68:e1:0b:72:4f:c9:04:1f:90:cd:8c:
c3:51:37:70:4f:96:61:d1:a6:68:b2:3e:a3:90:62:
06:fe:70:a5:58:06:f4:7b:87:b7:45:d5:a4:07:15:
0b:55:4a:b3:eb:fc:3f:a3:66:9a:d1:f4:de:76:c8:
ac:ed:76:ac:64:28:12:de:ea:2b:91:69:2c:0d:b1:
45:80:81:4d:88:f3:ca:3e:c2:c3:28:ef:58:fb:74:
c6:4c:fd:41:11:10:d0:05:9f:6f:f7:fb:a8:fa:dd:
91:20:f2:76:c1:9b:10:d8:8f:6b:4b:7b:36:c6:98:
73:04:a1:12:74:38:1a:ab:71:ca:d1:ef:74:f3:cb:
19:96:79:b3:fe:82:db:87:be:af:cd:35:8f:f4:a2:
95:20:59:f6:fc:9c:a2:64:d7:5f:83:f1:55:26:27:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:9D:A2:9D:E4:97:D7:28:C7:80:75:9D:F9:BC:45:39:51:8D:E2
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:20:b6:37:1b:32:6e:98:3b:de:57:7b:2f:5d:81:c4:8f:6b:
e0:e4:41:c9:00:b1:41:38:98:f0:9d:d0:9f:25:fd:77:ea:04:
98:bc:15:18:14:40:d1:05:59:48:e7:2b:03:ea:d9:82:b3:e3:
68:80:a9:24:e7:84:e0:6f:bf:41:f3:d9:c8:32:c8:7e:5a:74:
e0:d7:ab:10:58:95:e3:b9:74:19:e5:c5:8b:b9:10:71:66:e6:
02:dc:43:7e:25:26:96:87:8c:09:dc:a7:83:4f:aa:c6:4d:f6:
3f:7a:1e:af:85:a6:a8:7a:a9:ab:8c:96:71:62:69:86:ce:d7:
a2:26:83:ea:4f:04:c3:41:dd:a1:ed:6b:7c:96:be:94:a3:ed:
a6:d6:1b:ed:ca:fe:d5:47:85:c7:ae:9a:82:5d:f3:e0:27:7b:
74:91:34:46:c6:45:73:ae:4c:b7:9f:cb:d5:28:69:28:ad:ab:
eb:49:7b:f6:e8:fd:df:e6:9e:69:ea:fa:1e:b2:03:dc:2c:0a:
c8:48:03:f6:94:f4:24:24:26:5f:0b:f9:b6:97:a0:32:67:14:
2c:b6:b6:71:7c:a3:e3:4c:37:60:68:b3:b2:36:03:4a:57:7f:
95:c7:75:06:00:53:34:f6:8a:55:46:90:7e:93:95:d6:ac:23:
7f:40:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:15:04 2026 by rpki-client