Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: seb6FMLIV77snSmk+O17HhQB5dJ9tZnpkkkVVQplMJA=
Subject key identifier: 5C:6D:43:36:84:3A:3B:F6:FE:5E:A5:28:EB:2F:8E:49:DA:82:B0:C4
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 01A100C822295DBC1AEF843855301B030B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 19DE
Signing time: Sat 03 Oct 2026 08:01:18 +0000
Manifest this update: Sat 03 Oct 2026 08:01:18 +0000
Manifest next update: Sun 04 Oct 2026 08:01:18 +0000
Files and hashes: 1: OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa (hash: tRxB0SccSN5sh50OIxV7iRImD06pzo5OWnyES6cYcyc=)
2: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
3: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: ccFhNY4gO77JNvGmjr/BdJG+xsKi6TqzshgLbuXcLvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c8:22:29:5d:bc:1a:ef:84:38:55:30:1b:03:0b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Oct 3 08:01:18 2026 GMT
Not After : Oct 4 08:01:18 2026 GMT
Subject: CN=5c6d4336843a3bf6fe5ea528eb2f8e49da82b0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:be:2b:4e:d0:49:c0:37:18:06:7a:18:5f:
83:cb:30:72:f4:34:0c:77:6f:69:41:c8:61:3f:ce:
66:32:40:57:5c:88:b1:e8:72:9e:cf:09:27:b2:28:
f8:52:45:23:16:7e:db:fb:bd:4b:20:e3:c9:a3:e7:
37:0b:26:8b:81:4f:7c:32:c7:e8:13:ed:f8:e2:14:
eb:28:00:78:33:bb:9f:89:1d:36:72:2d:7c:6e:32:
7b:63:a7:7b:47:7c:40:11:aa:d8:78:34:2e:ab:55:
5f:0e:a0:c8:6b:e7:d4:59:c1:b8:ec:3e:54:a9:30:
5c:18:4e:3c:36:68:d0:fd:21:71:4a:9d:47:d8:c0:
bc:14:b7:db:19:9d:54:04:c2:5a:22:37:5c:85:64:
20:55:aa:81:f8:fe:a8:af:00:3d:ba:0d:d7:d6:e6:
e5:99:78:4b:71:3c:62:97:59:90:dd:a7:2f:67:98:
5b:17:be:5d:d5:09:df:41:26:42:bc:4c:23:00:d1:
ff:c3:bf:19:04:9b:a6:11:ee:2a:89:56:69:a3:3d:
1f:4a:b8:2d:80:01:fc:d8:b2:db:ac:67:05:60:66:
69:d3:80:6e:cd:21:66:2c:27:46:aa:39:a3:a0:5b:
75:d1:7b:57:95:00:24:6c:a8:2a:07:a2:ae:9e:81:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:43:36:84:3A:3B:F6:FE:5E:A5:28:EB:2F:8E:49:DA:82:B0:C4
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9f:88:ca:ba:cb:fd:f4:9f:72:7d:ef:b7:fa:37:a6:4c:21:
ff:a0:2a:7c:08:ab:e8:3f:c6:15:81:31:fe:2d:93:2e:20:24:
ab:bd:90:0b:91:8c:30:1e:8b:ae:6c:8a:5b:d6:f9:73:0e:81:
4a:c7:2a:14:46:f2:84:93:06:04:96:f5:2e:88:6e:f1:e0:6c:
27:3f:a0:b1:b2:ed:f4:d5:f0:a5:48:1f:51:5c:9a:25:d5:87:
6a:f1:52:14:72:ab:c5:9b:40:f9:8a:ad:55:7c:92:b4:dd:bc:
a6:b0:5e:3f:a1:5d:d3:70:55:4d:a4:a2:1b:49:44:ce:58:da:
85:da:dd:5d:58:57:e7:f8:c2:1b:5d:c2:b7:57:a7:01:f6:8e:
69:0a:b2:6a:7e:e7:91:d9:1e:7a:cc:0c:5f:08:97:b8:47:83:
9d:ba:a4:01:fd:b1:95:af:4c:19:0a:17:eb:76:11:21:16:c0:
c0:3d:d4:ef:33:04:b3:30:0d:81:d8:45:47:7f:a8:16:2b:b6:
14:36:4f:1e:20:07:6a:18:a1:21:e8:17:b2:ce:74:72:8c:91:
43:f7:21:a9:1d:c2:c3:18:e5:0f:c4:bc:70:64:fd:53:65:8e:
e9:5c:95:56:91:99:39:1c:d9:30:74:19:2f:88:c6:95:26:27:
5d:a4:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:39:45 2026 by rpki-client