Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: T/VJRQT4gp9+roRI41ggLDUGi7pU0jdv7yFSGqkbpE4=
Subject key identifier: 3A:65:C8:41:AE:85:58:CA:EF:6A:B4:85:CD:44:D2:80:F0:57:9E:E9
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 01A0D5A72514C08A46923331F9E37CD8255A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 120E
Signing time: Thu 24 Sep 2026 23:01:36 +0000
Manifest this update: Thu 24 Sep 2026 23:01:36 +0000
Manifest next update: Fri 25 Sep 2026 23:01:36 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: VmphZzb3ORelwaDr+JLSdieiFSXOJHRfjJ+2gg7X2K0=)
3: v6M5ib-nqVd93in2ll5RNT1MfYM.asa (hash: qr60aoODIC+z5g67bZbeuAziczqZFFdUc4K7PrAUEj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:25:14:c0:8a:46:92:33:31:f9:e3:7c:d8:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Sep 24 23:01:36 2026 GMT
Not After : Sep 25 23:01:36 2026 GMT
Subject: CN=3a65c841ae8558caef6ab485cd44d280f0579ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:87:1f:04:d8:af:d1:7a:7f:5f:19:33:e8:
5f:85:28:38:dc:8a:7a:a2:f1:37:65:e1:72:67:0c:
61:76:63:1a:a2:56:21:76:ba:80:19:6f:08:33:51:
8a:6f:bf:98:67:2d:41:5e:7b:c1:c3:8f:11:7d:ea:
2e:a5:e2:8d:de:68:d9:e8:ad:5c:55:13:b1:0d:00:
86:b5:21:2b:10:ca:e5:56:30:ad:52:70:8e:f1:97:
c7:11:c4:66:3c:6d:e6:43:20:63:c5:9f:52:44:6b:
11:fd:58:a0:f8:6d:fa:a0:b8:e1:90:06:dd:3a:5f:
af:02:df:87:38:e5:8a:2c:00:12:bb:b1:c1:3a:d6:
dc:2b:bc:99:b0:97:44:d6:e7:b3:1d:00:19:53:04:
31:aa:da:62:0a:2f:00:67:7e:44:f9:e4:72:37:40:
b8:ca:ca:40:28:72:9e:53:91:65:46:44:20:17:5f:
98:df:9a:63:c3:79:76:e7:e8:1a:14:4b:35:1c:3e:
13:76:48:41:4c:4e:94:38:12:ce:eb:96:c3:f8:77:
07:b0:17:2f:3f:3a:91:08:86:3d:26:8a:81:86:c5:
5d:3e:39:27:4b:0d:13:bb:65:29:17:d1:59:ed:96:
bf:0b:1d:37:af:35:50:4a:9a:8b:a2:c4:1f:1b:42:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:C8:41:AE:85:58:CA:EF:6A:B4:85:CD:44:D2:80:F0:57:9E:E9
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:da:05:f1:47:8b:f1:2e:cd:d9:ea:cb:93:9d:43:2a:9a:bd:
8a:35:3a:0b:b1:bd:6b:5a:63:63:71:26:07:09:4d:84:5c:6c:
ff:cf:c0:5d:53:b2:65:3f:19:7d:39:4f:41:a5:64:e2:02:d4:
d6:03:a4:cc:d9:2c:a3:8e:1e:62:27:e4:95:5c:3d:25:ce:2e:
22:51:d1:98:d2:74:2b:f4:8f:c0:b7:93:cc:b7:27:17:89:a1:
d7:ad:09:0e:1d:30:28:15:c6:0f:bb:d6:fb:d1:03:64:55:86:
e1:4d:8f:ab:46:eb:0c:e5:2d:72:a7:db:07:51:b1:bc:a1:26:
ee:17:f7:31:2e:ee:37:43:a7:4e:70:07:68:66:7a:e7:71:3a:
b6:6c:cb:1e:81:16:da:5f:d4:ac:d3:f0:73:ab:54:9d:7d:e7:
fd:38:99:48:c3:f3:f9:5c:b3:97:be:18:bb:61:00:ef:c6:e5:
e3:a9:90:83:2c:d7:6b:b2:98:04:bc:c5:e2:75:71:97:c8:16:
74:a1:f5:91:e6:9b:12:89:c1:43:78:62:68:ab:3f:7f:97:bc:
30:4d:ac:25:5b:38:77:d8:9a:74:c6:1f:e4:20:b7:58:cf:44:
6a:eb:d1:16:86:17:80:80:84:fb:70:9a:94:c3:18:84:4d:a7:
57:e4:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:57:46 2026 by rpki-client