Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: FFK8wKW7nft70jyCozfkGzxLVxMQYOlFTfMozg9eKLQ=
Subject key identifier: CE:7B:AE:F6:28:4E:8F:01:52:9C:B9:A3:DC:D5:9B:53:9F:CB:FA:A6
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 01A0E1AAD8DDC19B90106C09A4A8C611EB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 07:01:05 +0000
Manifest this update: Sun 27 Sep 2026 07:01:05 +0000
Manifest next update: Mon 28 Sep 2026 07:01:05 +0000
Files and hashes: 1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: W6HGFkkbiRRK867sa7S2TC/CsTF4WE/ft+q3gsu5It8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:aa:d8:dd:c1:9b:90:10:6c:09:a4:a8:c6:11:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Sep 27 07:01:05 2026 GMT
Not After : Sep 28 07:01:05 2026 GMT
Subject: CN=ce7baef6284e8f01529cb9a3dcd59b539fcbfaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:58:c3:6b:b3:54:d2:fd:1e:17:8e:d5:c4:
ef:30:0e:f6:45:94:af:6d:0e:3c:4a:8c:80:a3:e5:
1a:0b:a7:f6:a0:6e:c0:19:06:f7:da:14:88:29:b2:
1f:68:01:c4:dd:46:a5:dc:1c:4a:f7:d3:2c:84:08:
49:ef:43:de:0f:93:af:36:0c:14:42:dc:dd:c6:86:
73:35:74:38:98:37:7b:d6:be:5b:f7:b5:33:2c:62:
1d:69:6c:a6:1f:e1:63:cd:49:14:2f:9c:08:bf:0d:
f7:29:f4:1b:01:e5:de:8f:39:b2:4f:c6:64:af:57:
95:d3:31:71:d9:58:ed:40:23:80:c1:34:31:6a:33:
33:4a:b1:50:71:6f:0c:3b:87:e4:8d:dc:43:9c:e6:
8a:91:94:9c:c1:01:a6:9d:72:5b:7e:fa:a3:5b:75:
30:27:22:93:cc:5d:94:31:55:e2:0c:a8:ae:9b:31:
a9:b0:8e:dd:31:a1:0a:fc:b1:23:48:11:66:ec:f1:
17:b1:8e:f4:5b:18:27:8b:14:c2:74:76:b2:85:f9:
fd:85:fb:66:d8:d8:eb:39:b3:b5:f6:21:e0:9a:18:
8f:60:64:cd:cd:6d:0e:12:23:4a:2a:e3:d8:1e:fe:
ee:c0:92:19:ac:46:0b:ba:26:77:89:ba:7c:e6:34:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7B:AE:F6:28:4E:8F:01:52:9C:B9:A3:DC:D5:9B:53:9F:CB:FA:A6
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5c:03:9c:89:c0:f2:ae:83:5e:25:71:24:90:b1:dd:a2:a6:
c2:42:1f:ec:4d:15:82:9b:eb:1e:55:43:7d:ca:f2:f2:56:d2:
04:24:70:30:a2:6d:03:ee:d5:b3:0c:e6:83:2a:a6:07:a5:c5:
e3:b9:ea:5f:78:e6:49:06:87:43:da:5a:b3:f3:48:bf:85:41:
3b:b6:7f:e9:d6:da:35:c1:96:2a:1f:56:7b:bf:e1:ee:28:b2:
d5:e9:0d:33:f3:17:dc:47:8c:9b:9f:5f:c4:27:50:5d:d9:c0:
8f:50:db:0e:4f:6d:8d:83:95:56:24:3e:1e:c0:ea:bd:26:6d:
c2:2d:5b:a4:d2:cb:1e:54:18:d7:91:eb:8d:6f:17:6e:a5:1d:
39:f2:d7:d1:56:8e:f0:98:bf:c5:86:cc:45:fc:c3:e8:d1:77:
76:1a:55:38:9a:b2:e9:b9:cf:43:27:35:a0:11:85:ab:38:00:
92:8f:8f:73:17:ca:35:47:a0:fe:c4:51:75:9b:26:22:75:d9:
a4:9c:b4:7c:a6:d4:ef:7c:35:ab:ba:22:a0:ae:bf:f1:ef:35:
41:ee:5c:27:79:1e:48:aa:f1:e6:b4:6a:b1:29:8e:8e:a7:7b:
5d:a1:26:3d:ce:0e:ee:10:af:e3:b2:58:7b:a6:9a:96:a9:1e:
c8:50:b7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhqtjdwZuQEGwJpKjGEet/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MTZhYWE1ZDI1MmZkOTAxNDVmZWRhYzY4Mzc2MmQ2ZTIw
NzQxNTUwHhcNMjYwOTI3MDcwMTA1WhcNMjYwOTI4MDcwMTA1WjAzMTEwLwYDVQQD
EyhjZTdiYWVmNjI4NGU4ZjAxNTI5Y2I5YTNkY2Q1OWI1MzlmY2JmYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA101Yw2uzVNL9HheO1cTvMA72RZSv
bQ48SoyAo+UaC6f2oG7AGQb32hSIKbIfaAHE3Ual3BxK99MshAhJ70PeD5OvNgwU
QtzdxoZzNXQ4mDd71r5b97UzLGIdaWymH+FjzUkUL5wIvw33KfQbAeXejzmyT8Zk
r1eV0zFx2VjtQCOAwTQxajMzSrFQcW8MO4fkjdxDnOaKkZScwQGmnXJbfvqjW3Uw
JyKTzF2UMVXiDKiumzGpsI7dMaEK/LEjSBFm7PEXsY70WxgnixTCdHayhfn9hftm
2NjrObO19iHgmhiPYGTNzW0OEiNKKuPYHv7uwJIZrEYLuiZ3ibp85jTgIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM57rvYoTo8BUpy5o9zVm1Ofy/qmMB8GA1UdIwQY
MBaAFIkWqqXSUv2QFF/trGg3YtbiB0FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYt
ZDY5ZWE5M2NiYWZiLzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYtZDY5ZWE5M2NiYWZi
LzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlwDnInA
8q6DXiVxJJCx3aKmwkIf7E0VgpvrHlVDfcry8lbSBCRwMKJtA+7VswzmgyqmB6XF
47nqX3jmSQaHQ9pas/NIv4VBO7Z/6dbaNcGWKh9We7/h7iiy1ekNM/MX3EeMm59f
xCdQXdnAj1DbDk9tjYOVViQ+HsDqvSZtwi1bpNLLHlQY15HrjW8XbqUdOfLX0VaO
8Ji/xYbMRfzD6NF3dhpVOJqy6bnPQyc1oBGFqzgAko+PcxfKNUeg/sRRdZsmInXZ
pJy0fKbU73w1q7oioK6/8e81Qe5cJ3keSKrx5rRqsSmOjqd7XaEmPc4O7hCv47JY
e6aalqkeyFC3+Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 18:54:51 2026 by rpki-client