Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: ZJIvsbf372CTxT3A7ZOWkEH9Y5oAG5wsMbpqLc1Wk+Q=
Subject key identifier: 89:E2:8D:FA:90:9D:5B:BA:59:E8:B7:E9:8E:56:3C:AE:85:ED:19:8E
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 01A0C96B729B7A789C5054984DE040AA5BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 14:00:57 +0000
Manifest this update: Tue 22 Sep 2026 14:00:57 +0000
Manifest next update: Wed 23 Sep 2026 14:00:57 +0000
Files and hashes: 1: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: almDfu/G6ZL8PCdSH2agNHRZO0AuDMxzW+LXVh14Yas=)
2: UhcVOrWI94PD7J8NZ396e7oTXmQ.roa (hash: le2/ey5cYL9OHx+rHl459Ml2HcRFUdgLBFJPfGYggHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:72:9b:7a:78:9c:50:54:98:4d:e0:40:aa:5b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Sep 22 14:00:57 2026 GMT
Not After : Sep 23 14:00:57 2026 GMT
Subject: CN=89e28dfa909d5bba59e8b7e98e563cae85ed198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:d3:0b:31:44:68:e5:bf:32:e9:76:e0:aa:
35:59:9a:f2:ef:4c:e1:98:bb:2b:6f:8e:79:45:84:
66:13:ae:a7:c2:1a:92:14:e1:e4:f9:42:88:00:02:
a6:eb:56:ad:83:6a:df:e0:f9:e4:01:1d:9d:31:63:
36:31:63:67:ff:7f:25:f5:da:92:2f:ea:ae:d5:99:
bb:3f:12:83:94:50:0b:77:15:0e:19:8b:7a:d0:53:
27:20:f4:05:4a:80:35:1a:3e:91:08:a0:81:dc:29:
94:be:81:3b:b9:68:51:b9:62:ef:eb:3d:2d:3c:d6:
58:c2:1e:7a:48:94:62:8b:e1:3c:f4:b3:e9:2d:c7:
f1:a1:8e:36:09:3d:6c:19:63:f9:50:8f:b3:28:e7:
2e:b6:a7:6f:15:25:6b:13:f5:d2:a3:92:be:62:a1:
17:69:a6:05:79:29:a5:90:81:f3:2e:97:62:6f:57:
b5:93:b1:88:5e:b1:93:0d:7d:fb:b8:3e:27:18:b3:
0f:9a:35:45:d7:08:68:04:3f:14:ae:5a:b8:bb:29:
84:19:af:28:df:ec:7a:8e:34:b4:61:1e:44:f0:65:
89:a9:6d:c6:91:09:52:f9:21:fe:67:55:2a:04:2a:
d6:bb:3f:df:83:aa:82:b9:7b:4b:a3:c9:ea:89:01:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E2:8D:FA:90:9D:5B:BA:59:E8:B7:E9:8E:56:3C:AE:85:ED:19:8E
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d2:69:ba:bf:46:ed:71:2e:e5:3a:ef:19:a7:e0:6a:98:68:
c1:12:3e:a1:3a:5e:c4:2f:f2:2c:b2:92:81:cd:44:b6:2f:1a:
38:f7:84:d3:db:63:71:75:68:48:d0:bc:4e:76:08:4f:db:c4:
10:6e:ca:cd:f0:09:a8:7f:b4:72:f1:63:30:60:c6:7e:10:f1:
0a:2b:77:ce:39:97:d2:e1:03:0d:91:d0:aa:c3:d8:9e:0a:a2:
73:f5:26:b0:6a:05:6c:7e:57:81:66:90:47:1d:32:ca:3c:aa:
07:38:b0:b3:2e:f2:df:0e:78:ba:ea:3f:54:09:a5:5f:8c:1f:
b7:0e:da:6a:fb:a7:f0:bd:70:e9:64:e7:d4:9c:bf:70:f0:7b:
9c:ab:dd:75:15:af:39:70:60:13:60:02:11:27:44:c0:8c:04:
fb:4b:39:56:8c:b5:1b:a4:db:0d:12:6a:8a:ad:72:ea:41:53:
1d:81:c7:07:41:f7:5c:63:fd:58:5b:ae:f7:ce:47:fe:3d:05:
fa:da:9e:ad:14:29:1a:0d:5b:92:27:16:7a:65:1f:df:c4:c5:
5f:2f:e3:62:69:e2:f9:c1:4a:0c:9e:a2:0e:49:62:22:fd:20:
89:53:da:ba:8c:0d:76:1a:3e:62:16:31:c3:d1:73:c6:0e:3f:
01:3b:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:18 2026 by rpki-client