Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: Rxu+mGhk0Biv4MmYl5QQlew57Hqv+ZNZB8sdwGZZzWU=
Subject key identifier: A0:66:6A:04:54:66:04:48:CC:9D:C0:45:E7:E7:BE:F6:EF:91:7E:C9
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 01A0E85365B892AC5DE4EA20AE522A86D193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 1A7E
Signing time: Mon 28 Sep 2026 14:02:54 +0000
Manifest this update: Mon 28 Sep 2026 14:02:54 +0000
Manifest next update: Tue 29 Sep 2026 14:02:54 +0000
Files and hashes: 1: AMtRKXkFFUuu-FBFySOQZFh0CVc.asa (hash: m8zsToffrsGJPD49WuP8tnJc1KNywcrURjmTcAwvTds=)
2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=)
3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=)
4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: kFMATU6KMqgh4q0qrnGJreglSSYZ1+j4iQfCRS5OWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:65:b8:92:ac:5d:e4:ea:20:ae:52:2a:86:d1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Sep 28 14:02:54 2026 GMT
Not After : Sep 29 14:02:54 2026 GMT
Subject: CN=a0666a0454660448cc9dc045e7e7bef6ef917ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:79:41:40:49:d2:82:77:8b:38:f0:14:43:
04:6e:09:f2:20:b7:90:d9:bb:bb:29:84:38:4f:b5:
36:a1:26:7c:ad:fc:fe:36:0d:99:b6:ac:9e:1d:f5:
4d:fe:f2:2a:4d:4a:50:70:2f:65:8e:5f:00:c5:d6:
88:bb:7c:1c:6e:f5:50:e2:07:1a:81:2d:ab:cf:14:
c3:f2:7c:28:89:39:b9:9a:c2:e1:37:97:e2:d7:b9:
67:fe:5d:68:1b:ac:56:66:97:f1:87:f0:83:71:8f:
a4:f6:59:34:b7:6a:2e:79:a2:1e:09:45:b1:63:ba:
90:39:32:84:04:ec:ea:4a:bf:48:f5:8d:b1:9c:4f:
6d:37:8c:c6:a6:de:fd:7f:54:12:09:1f:3a:9e:fc:
9f:a4:f2:d2:72:0f:49:82:06:ba:e8:57:97:f7:93:
1d:68:7a:3d:e9:c9:fa:3e:80:ec:4d:b4:af:86:a2:
5e:eb:6a:e3:15:d3:bc:9a:97:30:e9:c3:e4:23:c5:
8d:15:7e:bb:94:bd:64:3d:b2:cc:c8:01:2f:60:fe:
96:b9:2e:22:a7:6c:f7:94:bc:f3:a1:7a:8b:5d:62:
37:71:89:3d:84:be:66:ce:05:cd:fa:83:e5:21:a3:
1f:f1:5c:84:d1:34:c0:23:14:d7:0e:96:a9:62:72:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:6A:04:54:66:04:48:CC:9D:C0:45:E7:E7:BE:F6:EF:91:7E:C9
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:5d:fb:fb:c7:50:02:fe:da:46:97:d3:15:70:71:82:28:
62:c4:ff:51:40:74:2b:c5:e8:30:9c:36:e3:b3:c2:f4:eb:5a:
4d:2a:68:61:74:8e:7d:df:26:85:1f:d9:db:14:23:60:10:35:
e7:74:62:cb:5b:9a:d0:29:80:2e:12:cf:74:39:55:e3:5d:5a:
dd:d0:c5:99:ec:ce:1d:97:9a:4e:71:22:62:71:e1:8a:9c:31:
53:2a:cb:da:4f:93:e7:e9:e5:2e:c2:87:ea:7d:6c:d9:00:10:
37:33:2d:61:61:5b:48:9a:17:7f:2d:b9:48:55:3a:07:2a:e8:
9e:4c:a5:28:b8:46:d4:08:cc:49:d2:71:2f:17:79:32:b0:a4:
c1:b6:9c:09:e8:c1:e1:5b:d9:46:c2:24:1e:e6:b9:50:06:b6:
a4:5d:ba:b8:50:ea:59:72:b6:e6:12:54:8d:45:d8:0a:10:ab:
35:a7:e8:2e:07:7b:02:7e:76:53:9f:d1:bf:a0:ba:3b:44:bf:
4e:ba:50:6a:1f:20:ff:9a:d0:4d:1e:33:ea:d1:f2:52:55:f8:
d3:e1:04:27:6f:8f:48:95:81:2f:88:98:62:6a:09:a7:5b:2d:
5b:60:b9:07:e5:69:6c:53:43:9b:7d:91:f7:45:86:83:33:53:
b3:2d:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:14:44 2026 by rpki-client