Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: nFsi35503Kh3t74HcobKZZsC5Gr0OFZaH0WTlFb6SqA=
Subject key identifier: A0:A2:C2:5D:36:CC:B6:C8:7F:1C:67:32:55:39:A1:6E:82:F0:B5:A6
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 01A0EEF9F3ADFB20C2D638EB81A6C63CBEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 1555
Signing time: Tue 29 Sep 2026 21:02:33 +0000
Manifest this update: Tue 29 Sep 2026 21:02:33 +0000
Manifest next update: Wed 30 Sep 2026 21:02:33 +0000
Files and hashes: 1: 19kTeJepP8HkpIg63hHdZMuI5pU.roa (hash: rYKL3pXSi0W4E3AFcHleDUG0Z3vGSYXA5D+E17BmR8U=)
2: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: bB+Sg5MIj1lkH5Ep29SLwb4yBA3bebTMArIyyEshzbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:f3:ad:fb:20:c2:d6:38:eb:81:a6:c6:3c:be:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Sep 29 21:02:33 2026 GMT
Not After : Sep 30 21:02:33 2026 GMT
Subject: CN=a0a2c25d36ccb6c87f1c67325539a16e82f0b5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:08:f0:8f:c8:91:39:7d:3b:8e:00:83:47:
79:2e:53:a9:37:21:df:b0:92:25:b3:fa:6c:b9:bf:
30:ba:34:b3:db:52:1c:ae:e2:ba:4d:c3:10:55:fc:
fc:e9:7d:00:45:a4:ab:db:c7:b2:f2:c5:53:6d:90:
ad:9d:0b:89:19:1f:fd:e3:40:e9:71:e5:dc:1f:45:
13:7b:92:df:f8:96:fa:bb:41:1e:88:b1:c0:b2:59:
0f:79:43:ba:10:65:64:c7:a3:f1:b0:fc:0b:29:eb:
6a:e4:5f:d7:64:20:1e:09:66:e5:7a:55:d4:44:46:
5a:54:ff:4d:b0:b8:0f:40:bc:b9:c8:42:0b:54:78:
54:9a:22:64:9d:19:2c:93:f5:02:4a:46:8d:f4:50:
b2:77:54:90:32:ec:15:06:e6:c8:cf:2c:f0:f8:d0:
2a:ed:ef:40:db:99:f3:fd:56:ae:47:5c:51:c9:59:
f0:11:b8:b5:6d:8a:d2:c3:ce:65:d0:02:e6:b3:7c:
b0:bf:b9:99:d7:0e:bd:eb:8e:1a:b1:74:74:f3:99:
bf:bf:9c:ca:37:5a:05:ed:16:1e:31:a2:f0:a5:ae:
e8:dc:96:04:a4:3c:43:61:81:e5:d9:ab:fb:4c:57:
8f:ce:2d:b4:71:ba:96:be:c9:cf:15:fe:35:56:d3:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A2:C2:5D:36:CC:B6:C8:7F:1C:67:32:55:39:A1:6E:82:F0:B5:A6
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ca:a4:64:a9:8d:07:88:29:c1:bc:eb:5f:bc:af:a4:5c:d2:
d2:4c:4e:aa:97:98:1f:f7:d0:d6:e9:82:ca:83:8b:86:7f:ea:
ce:ac:51:0a:23:71:68:8d:81:fd:65:09:3d:36:7c:b1:8e:60:
61:5e:43:29:3a:3f:18:7a:d9:2d:ea:f4:cc:28:26:a4:13:93:
64:f5:5f:a1:60:63:fb:9c:df:e6:fc:51:1c:69:e6:fd:8a:85:
74:77:77:b5:4a:c2:a4:e1:8a:75:06:e3:4a:18:b6:ab:bf:91:
b3:b4:ab:bf:b0:cb:dc:e4:bc:47:1c:79:57:68:f6:ed:3b:08:
57:a4:2c:a2:3d:29:18:31:e5:af:51:32:31:65:25:0e:08:e8:
bb:4f:84:91:b1:fe:3d:3f:55:01:b6:ef:f0:5c:4f:2b:98:b2:
df:d9:68:6a:de:18:c1:ea:e5:04:e4:5b:c1:06:4e:d5:14:75:
2a:f6:75:ef:c2:cb:c3:61:7b:7e:cb:92:4f:09:b9:fd:84:7f:
87:34:3f:a9:da:ec:c4:71:70:18:67:7c:69:4c:bc:ec:f8:d1:
bc:bc:7e:9a:4b:03:a8:11:52:0e:29:bb:cf:9b:1c:a0:8b:3e:
87:7d:c5:c3:10:c6:5b:78:14:4a:2c:3d:d3:5c:80:5b:5e:2f:
c2:f5:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:59:36 2026 by rpki-client