Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
File: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft (raw, json)
Hash identifier: C9JkMe/si/LgphtxiamFPQJ2xXLMeFXaxIMWrNCR7Oo=
Subject key identifier: FB:20:57:44:ED:28:22:B5:A5:A5:96:6F:86:EF:26:1C:73:7E:89:E1
Authority key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Certificate issuer: /CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Certificate serial: 01A0C2FB8334341B4C90AC4E41BEA708A701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
Manifest number: 0208
Signing time: Mon 21 Sep 2026 08:00:58 +0000
Manifest this update: Mon 21 Sep 2026 08:00:58 +0000
Manifest next update: Tue 22 Sep 2026 08:00:58 +0000
Files and hashes: 1: AsgCbpxXAfVEl8fMySxEMEBj3v0.roa (hash: 3DUclWrbvVnjRe22xwXjCYPITDFNxuR0Ynpweo6931E=)
2: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl (hash: 6ed7n4YKbX9NZqDBSLlisNlM9YAqvbqtlWzl4TbIf9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:83:34:34:1b:4c:90:ac:4e:41:be:a7:08:a7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Validity
Not Before: Sep 21 08:00:58 2026 GMT
Not After : Sep 22 08:00:58 2026 GMT
Subject: CN=fb205744ed2822b5a5a5966f86ef261c737e89e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:31:07:70:09:23:bb:31:bd:70:28:41:b9:60:
76:58:22:2c:33:4f:57:2b:ff:83:75:d7:54:86:0d:
ee:af:a8:0a:c4:22:0c:40:30:3d:ca:c5:f0:af:9f:
37:26:eb:cc:1f:b3:e1:75:3b:88:77:72:f6:8e:c1:
7c:a2:a1:a1:6b:f3:4f:83:c6:7d:29:14:2f:8b:bb:
a9:e9:a4:23:fc:d5:83:3d:d6:a7:9c:8e:c3:4b:c2:
b7:c6:91:3a:b8:a3:c8:ad:25:68:3a:21:37:64:1b:
2d:b1:8b:89:1b:ee:15:28:ac:05:b2:59:ac:d4:04:
8d:4b:79:b8:ed:cd:0e:dd:ea:f5:01:d6:4b:07:f0:
f3:ac:71:c6:76:68:ec:c4:c8:b8:62:b2:60:48:ec:
4a:b4:17:bf:66:f7:56:71:40:cb:11:02:f3:c2:3e:
47:6e:a9:a4:d5:da:c5:20:2b:92:4e:93:8a:18:68:
4a:b4:64:bd:25:ab:b4:d8:a4:54:51:63:1d:73:7f:
b3:19:e3:81:e0:fc:82:6b:00:ab:2a:1d:17:8c:7a:
b2:6e:2d:c4:05:ca:61:1c:3a:1f:75:76:c7:53:ba:
a6:b7:3b:94:6d:1b:d7:30:ab:63:0d:ae:69:df:d2:
24:b6:29:e3:87:2f:0b:63:0b:41:5c:ab:59:b0:8d:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:57:44:ED:28:22:B5:A5:A5:96:6F:86:EF:26:1C:73:7E:89:E1
X509v3 Authority Key Identifier:
keyid:AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:dc:52:c7:88:e3:7b:af:25:b2:d8:f9:57:e2:61:5a:67:dc:
90:e4:04:f3:ca:b6:51:b3:f5:8d:e4:ab:88:fe:62:dc:b5:ae:
36:ee:77:5d:2b:83:48:ef:ab:fb:e3:03:ae:c7:90:fe:34:9b:
9a:25:b8:1e:16:a5:00:e5:8a:a2:01:82:bd:18:0d:6c:39:bb:
dc:1d:bb:5d:e6:ca:a5:5b:08:04:dc:bc:74:9c:53:c5:d8:b2:
a0:29:26:0e:6b:68:f8:0f:01:96:80:29:b6:03:59:b3:c1:92:
ad:7c:71:38:b5:f6:35:82:29:58:ac:f3:1c:21:46:81:18:9c:
14:67:ad:fa:f4:55:87:5e:f6:d7:77:02:86:fe:58:93:47:4d:
93:ec:dc:66:fd:e7:35:ed:5e:c1:aa:34:54:45:e1:0f:84:e8:
d3:4a:d6:88:06:55:7d:93:e1:e3:0b:29:18:21:24:5d:dc:02:
e3:a0:29:2e:0c:f5:ac:de:b6:a8:18:c4:c7:1c:61:90:99:d8:
62:f7:96:78:e7:e7:df:ed:72:f7:e6:5b:52:38:38:7e:da:82:
1f:58:2f:53:df:a1:db:1d:12:2d:29:03:86:d6:e6:f6:ea:37:
7c:9c:aa:c5:4e:04:bc:e5:4a:b6:f5:d6:b7:ba:af:04:c3:0c:
77:3b:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:42:42 2026 by rpki-client