Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: fol2tmFjuEKyfjkt7n9mJjWKlSnCzHPTOQLDvRg/eMg=
Subject key identifier: 39:16:B1:FE:F8:C8:2C:EE:6D:DA:44:B2:79:11:B3:37:64:E7:0B:59
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 01A0FF47B74935A5BF82615E8D128CDF44F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 01:01:24 +0000
Manifest this update: Sat 03 Oct 2026 01:01:24 +0000
Manifest next update: Sun 04 Oct 2026 01:01:24 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: LDyDJK/d9lXSrhkdtrJ9mXNYLy0m0RWPFZK3uifwf3Q=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:b7:49:35:a5:bf:82:61:5e:8d:12:8c:df:44:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Oct 3 01:01:24 2026 GMT
Not After : Oct 4 01:01:24 2026 GMT
Subject: CN=3916b1fef8c82cee6dda44b27911b33764e70b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:e5:84:91:89:5e:b5:c1:ab:fc:6e:3a:b7:
a7:7a:7b:52:47:01:5d:a5:8b:ae:95:a6:0d:cb:54:
7a:73:f3:18:d2:29:60:a9:69:58:ef:83:f7:0e:c5:
10:ce:27:36:5d:03:69:96:d4:72:53:8a:c5:cd:63:
dc:fd:22:85:11:31:d7:a2:ca:e4:5c:d9:dd:0a:d6:
f3:d0:38:cf:f4:be:20:46:c9:0a:3b:d8:35:63:0f:
c7:b5:11:e3:e5:62:6b:e9:11:51:22:87:93:63:4e:
bb:5a:05:17:6e:7e:2f:ed:0f:b2:b9:3c:97:63:ad:
21:b3:b9:c9:d1:ae:1a:53:92:1b:9d:8b:9f:18:03:
5c:ce:63:41:cf:41:3b:ca:9c:42:b8:2a:25:1b:ed:
67:8c:74:6c:1e:7f:6b:42:0c:c7:07:50:2e:06:0a:
9e:ea:99:ea:f2:0d:3b:5b:ed:23:63:f3:9e:2e:9a:
3b:54:41:b0:a8:90:ad:07:d0:3d:af:29:6b:7d:33:
d1:9e:fa:b8:c4:08:01:58:75:95:37:15:d4:ed:81:
0b:02:9f:12:bb:c0:a2:6d:d1:b4:95:db:6e:a2:f4:
22:1c:21:8d:2d:fd:4b:b2:78:2a:b1:01:e6:62:33:
6f:7a:4c:52:6c:da:99:41:d3:4f:80:77:01:34:b6:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:16:B1:FE:F8:C8:2C:EE:6D:DA:44:B2:79:11:B3:37:64:E7:0B:59
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:47:b7:eb:3d:ff:f9:99:e7:ea:cf:68:1a:ac:47:da:da:c1:
12:59:ea:3f:21:63:7a:8f:9d:fb:53:56:64:09:d0:73:6d:ab:
8b:bb:2b:61:a7:4b:a6:1f:b0:b5:24:0f:53:80:aa:60:29:6d:
74:06:e5:d9:2e:09:f1:58:54:10:0c:02:f0:7e:6e:a8:bc:94:
70:b8:d2:ae:43:44:94:ad:df:d6:27:9d:54:fb:76:c7:01:05:
e7:ab:53:e4:c0:17:0d:26:63:d3:27:d8:49:1c:21:bb:16:58:
d2:24:96:20:d5:db:e7:c5:25:51:6c:df:72:65:ef:cc:c5:32:
ba:8c:59:89:35:de:fe:7f:7a:df:2e:f6:a0:49:37:48:d2:66:
80:3a:04:62:5c:79:f3:4d:f2:03:af:5a:67:6d:e9:b0:6b:1e:
e2:40:89:e2:c4:5c:b5:cf:52:c8:47:1e:6c:35:87:76:4a:1b:
22:d2:6a:51:ec:60:1e:f4:84:d7:a8:d6:e1:94:6e:67:a6:b7:
5d:bd:7c:32:17:df:81:cf:5f:a6:31:fd:2c:78:ef:5f:6a:4c:
a7:03:dc:3b:7a:59:61:05:1c:c7:8f:ed:19:05:26:7a:d1:19:
79:ff:80:72:4b:24:f4:3b:c3:ed:97:74:da:16:ee:e6:e7:ee:
d7:ce:d1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD/R7dJNaW/gmFejRKM30T3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj
ODg0ZTgwHhcNMjYxMDAzMDEwMTI0WhcNMjYxMDA0MDEwMTI0WjAzMTEwLwYDVQQD
EygzOTE2YjFmZWY4YzgyY2VlNmRkYTQ0YjI3OTExYjMzNzY0ZTcwYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjDlhJGJXrXBq/xuOrenentSRwFd
pYuulaYNy1R6c/MY0ilgqWlY74P3DsUQzic2XQNpltRyU4rFzWPc/SKFETHXosrk
XNndCtbz0DjP9L4gRskKO9g1Yw/HtRHj5WJr6RFRIoeTY067WgUXbn4v7Q+yuTyX
Y60hs7nJ0a4aU5IbnYufGANczmNBz0E7ypxCuColG+1njHRsHn9rQgzHB1AuBgqe
6pnq8g07W+0jY/OeLpo7VEGwqJCtB9A9rylrfTPRnvq4xAgBWHWVNxXU7YELAp8S
u8CibdG0ldtuovQiHCGNLf1LsngqsQHmYjNvekxSbNqZQdNPgHcBNLYF4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkWsf74yCzubdpEsnkRszdk5wtZMB8GA1UdIwQY
MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt
OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex
LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnke36z3/
+Znn6s9oGqxH2trBElnqPyFjeo+d+1NWZAnQc22ri7srYadLph+wtSQPU4CqYClt
dAbl2S4J8VhUEAwC8H5uqLyUcLjSrkNElK3f1iedVPt2xwEF56tT5MAXDSZj0yfY
SRwhuxZY0iSWINXb58UlUWzfcmXvzMUyuoxZiTXe/n963y72oEk3SNJmgDoEYlx5
803yA69aZ23psGse4kCJ4sRctc9SyEcebDWHdkobItJqUexgHvSE16jW4ZRuZ6a3
Xb18Mhffgc9fpjH9LHjvX2pMpwPcO3pZYQUcx4/tGQUmetEZef+Acksk9DvD7Zd0
2hbu5ufu187REw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:11:51 2026 by rpki-client