Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: qsFq9n2KSYWGJmxSyTYGx3J7hKsPnxjYDobU7TFHGgo=
Subject key identifier: AF:1D:CE:8B:6C:11:0A:EE:DD:9C:28:CF:B0:23:23:89:EF:F6:D8:63
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 01A1355A12037EDE881360D41F410D008245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 1282
Signing time: Tue 13 Oct 2026 13:00:57 +0000
Manifest this update: Tue 13 Oct 2026 13:00:57 +0000
Manifest next update: Wed 14 Oct 2026 13:00:57 +0000
Files and hashes: 1: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: PUw1A5+OFIA8YSzGII+8mtlkufrhx7A/nliCzpe9z88=)
2: tl9JmYqZuc8rnWm5B3tF-CPUxEg.roa (hash: ti/VYS4hognsUWtb/PVfBo1Uhz2rYc5vy7DleprVf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:12:03:7e:de:88:13:60:d4:1f:41:0d:00:82:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Oct 13 13:00:57 2026 GMT
Not After : Oct 14 13:00:57 2026 GMT
Subject: CN=af1dce8b6c110aeedd9c28cfb0232389eff6d863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:be:22:21:35:d8:60:f1:7e:0b:1f:2c:c9:
4a:05:67:35:28:fc:79:b7:b3:e4:17:3d:99:43:cb:
19:4b:18:c5:45:75:33:df:ad:4e:7a:14:9e:15:7d:
c6:f2:64:8a:a5:55:df:23:90:0f:92:3b:31:7f:57:
c4:d7:e5:fc:cc:85:98:8c:a0:02:ea:7f:7d:8b:d9:
b1:dc:f3:14:04:07:b0:36:b5:a6:0f:27:d1:d6:d5:
ab:54:e0:29:a8:21:c0:7c:d7:14:22:64:13:05:da:
de:3a:e0:a6:9e:df:01:16:b7:59:05:0a:ae:1d:c9:
73:13:a1:98:07:f7:39:ab:14:86:70:0d:2f:fc:b1:
09:f6:12:f8:78:7c:f6:96:cf:37:ce:4c:06:de:15:
81:a7:58:c6:bb:78:b0:a2:57:3c:b7:d2:39:8e:d0:
2a:8c:08:20:f7:3d:f0:37:e8:37:5b:a4:e0:be:75:
23:b5:55:96:cc:14:22:84:8c:86:69:dd:4c:d3:1e:
fb:37:de:c0:fb:49:60:07:76:80:26:38:bf:b9:2b:
bf:f3:0c:cf:08:72:68:2f:80:0c:4c:1d:64:58:78:
9c:fb:9e:c3:a1:6c:a1:1d:52:cb:06:54:f5:33:83:
d3:48:fe:72:77:70:78:ac:5f:b0:e8:c4:bf:11:97:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1D:CE:8B:6C:11:0A:EE:DD:9C:28:CF:B0:23:23:89:EF:F6:D8:63
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:22:aa:d9:52:23:8e:88:60:71:87:81:43:cc:4a:28:15:0f:
07:e5:e7:19:05:76:82:fe:8a:8c:d7:33:10:03:95:a9:bd:61:
be:1b:ae:73:9b:09:10:59:4f:6a:d5:12:41:f5:33:9d:25:ad:
f8:ee:f1:f3:82:d7:30:a9:86:69:0f:8a:a3:52:cd:65:73:18:
dd:ce:f6:28:b7:ec:a3:1d:30:43:9e:61:37:a1:01:f5:26:9d:
39:4d:ef:ee:1d:8c:3b:16:f1:65:be:f2:36:9e:c7:f9:64:8b:
06:89:0a:a8:05:9b:70:b3:8b:93:8a:f9:3d:2f:8f:e1:1d:aa:
a9:99:56:3a:e1:01:ca:45:4d:45:1f:dd:dc:fa:32:76:e3:0f:
42:66:ed:d9:da:d1:3c:c0:34:b6:29:92:d4:45:be:ea:fd:ce:
ed:e1:3b:92:29:5d:39:2a:7a:26:24:fc:a3:0e:f2:30:28:f9:
8e:32:39:0a:6b:82:4a:90:34:b9:2a:9b:5b:93:f2:01:6b:31:
76:4d:1e:b5:c5:33:b6:37:e2:08:2e:8a:0e:cb:50:f3:95:19:
a0:ee:e7:e5:74:2b:f3:7f:3a:b5:8d:85:1d:f3:4e:a0:87:c4:
fa:00:9f:1f:b0:31:15:08:a1:23:46:a7:d5:14:42:19:b8:6d:
07:c1:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:56:55 2026 by rpki-client