Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: 0f/pio1cE7uQl2fwMtE8ls7VWIkq7UqfKZvHGuqpWfY=
Subject key identifier: 89:69:DC:1B:A2:CE:59:8F:4B:E0:4C:BB:D0:0A:DA:53:05:5D:45:20
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 01A0DC850D87CFB721FBAE445D1D558C8E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 07:01:42 +0000
Manifest this update: Sat 26 Sep 2026 07:01:42 +0000
Manifest next update: Sun 27 Sep 2026 07:01:42 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: xJfE+PxXOpZp3P/7jphwRCUBHznXrXeXs0zu51Ld/So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:0d:87:cf:b7:21:fb:ae:44:5d:1d:55:8c:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Sep 26 07:01:42 2026 GMT
Not After : Sep 27 07:01:42 2026 GMT
Subject: CN=8969dc1ba2ce598f4be04cbbd00ada53055d4520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:c1:a1:92:4a:77:75:a0:74:59:22:ce:ec:
de:de:99:22:a4:19:7d:15:d6:70:c2:52:4a:47:94:
78:b3:cc:32:43:66:a3:d9:be:42:a4:d5:5a:e4:90:
24:fb:52:15:92:4c:77:38:3d:58:b3:6e:03:26:56:
b8:9d:43:8b:4d:36:6d:cf:a6:d9:0f:f5:40:1f:f6:
cc:e4:f3:ac:6a:f2:91:3d:53:b8:2c:65:73:47:ba:
7a:11:7d:18:ce:80:d9:36:fa:07:7a:69:54:6c:45:
49:91:0f:e6:0a:4d:48:c7:b5:2d:74:1d:de:83:7a:
00:54:52:46:d1:1f:60:92:08:46:59:24:e9:02:e3:
e1:9c:ef:9d:2d:19:5c:a8:b6:4c:fb:82:e9:1e:dc:
0c:70:03:ab:52:b5:c3:23:5b:2f:7a:f5:72:c9:49:
27:63:b1:e1:f3:ee:7a:2b:43:5e:0e:5f:b5:75:18:
99:be:c5:89:a7:ac:fb:af:41:3a:4b:f0:e3:d4:4a:
13:58:74:7c:a9:4b:5c:f3:68:7c:57:ee:cd:d1:95:
eb:92:dd:32:af:17:72:e1:c8:f2:56:64:4e:fd:72:
d6:e2:eb:70:f8:a3:0f:e1:f0:46:f7:ab:4b:82:ca:
32:32:6d:1a:c9:8b:5a:87:be:04:dc:83:f7:e2:d6:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:DC:1B:A2:CE:59:8F:4B:E0:4C:BB:D0:0A:DA:53:05:5D:45:20
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:22:4f:de:70:38:e7:8e:af:c0:24:ee:be:0f:38:b6:b6:73:
57:fe:3b:ad:a7:ef:f9:18:1d:f5:23:02:74:f1:7a:1d:69:18:
e9:44:1c:13:ac:f4:40:8e:43:23:f4:b5:d4:01:c5:f9:dc:02:
5c:85:de:62:96:8a:e3:30:c2:92:ea:17:4a:f9:21:d1:a0:34:
08:65:d6:75:0c:60:02:e8:2d:7d:1b:77:4f:cf:4b:c3:15:b7:
28:1a:8b:d0:bc:d5:b8:26:c4:7e:93:ff:94:46:8c:9d:49:83:
ec:83:83:03:01:80:6d:7b:1a:a7:a4:a4:63:3e:f0:9f:2d:3d:
2e:82:ac:1b:01:a6:ff:52:ae:c6:a7:35:c2:e4:ea:6c:f8:2e:
37:ff:41:4c:a3:c0:1e:fb:80:42:5a:eb:41:2f:0a:13:c2:17:
b2:09:56:74:97:1e:69:65:93:57:30:53:39:55:e5:a5:4e:c5:
d6:14:31:6c:b8:50:1f:03:95:45:66:ff:f0:df:63:0f:44:46:
bd:0a:51:05:6c:e7:98:39:ad:1d:99:05:3c:af:83:c9:9f:44:
a4:2e:de:63:6e:f3:4b:6d:3b:2e:69:65:bd:1b:fa:01:f9:62:
61:7b:64:5e:be:5e:bd:07:ef:e3:41:36:44:33:9e:a3:03:45:
de:2b:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:49:52 2026 by rpki-client