Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: FfkhN9N+WkbvjUsBDlNJZEHguyjEIQuvFr7LhEE1tzk=
Subject key identifier: E0:EB:C7:EC:B3:9D:E4:55:C8:C6:8F:F8:D7:1F:EF:D0:C2:40:09:09
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 01A0D0ED8185ECFD53EBDD2132652311CEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 01:00:21 +0000
Manifest this update: Thu 24 Sep 2026 01:00:21 +0000
Manifest next update: Fri 25 Sep 2026 01:00:21 +0000
Files and hashes: 1: FzaSctWTm436xTaHu7cLIoR3zuI.roa (hash: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: r0TjLbaRT4ZtPV4FMUrpbLuT7er4qDmawua3ttXHJe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:81:85:ec:fd:53:eb:dd:21:32:65:23:11:ce:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Sep 24 01:00:21 2026 GMT
Not After : Sep 25 01:00:21 2026 GMT
Subject: CN=e0ebc7ecb39de455c8c68ff8d71fefd0c2400909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:11:7b:74:f3:38:7f:97:98:79:01:f6:b5:
2e:82:f5:30:9e:2b:d6:67:42:84:be:6a:6f:9c:99:
82:93:00:7e:09:c2:f7:6d:1b:74:dd:c0:f9:0a:d8:
27:8d:61:60:39:c0:ce:24:f2:06:48:1f:14:ac:50:
ba:b2:0f:c6:71:04:5e:8c:75:c4:94:2d:9e:06:29:
ca:78:9a:0c:ac:65:98:14:cd:f9:71:85:a1:50:79:
6a:db:2a:11:c6:8f:7c:22:ea:1a:54:60:c6:9f:7e:
b5:1f:e2:e7:18:c4:13:f1:61:ee:7f:15:22:da:02:
f8:72:76:ca:1d:7d:57:cd:23:84:91:71:54:f5:41:
71:6b:da:32:25:aa:d3:e5:85:1d:e9:da:b0:af:1f:
f4:85:a8:58:71:95:d8:ea:ae:a0:f6:4d:c2:b2:fb:
48:eb:61:fb:e4:de:87:ba:09:5e:8c:75:da:79:98:
7b:a4:ce:61:b4:4c:17:ac:15:1d:eb:3d:13:5b:d4:
1a:f7:a3:0b:01:6a:f0:14:d2:98:71:7b:cd:4f:98:
4f:f7:79:ac:cd:5d:25:fd:48:93:39:99:78:8d:8b:
6a:4d:31:e8:78:02:db:7e:da:47:a5:d6:7c:99:0a:
eb:c4:e9:20:34:37:41:8b:9b:67:61:19:92:3e:9e:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EB:C7:EC:B3:9D:E4:55:C8:C6:8F:F8:D7:1F:EF:D0:C2:40:09:09
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:49:5f:93:bb:61:9e:77:4e:8d:d3:f6:1d:4c:d6:48:7d:02:
fd:b8:56:ed:49:29:e3:fe:ea:de:5f:43:e7:6b:08:87:64:be:
d1:01:03:df:6f:57:3a:7f:67:4c:40:35:0f:58:54:57:6a:7f:
b0:fe:f1:11:13:23:a2:83:70:3e:1f:6f:c2:14:33:c6:71:3d:
c6:9e:26:88:1d:b1:36:89:c7:b3:d8:f7:20:0e:d8:d6:17:0b:
94:05:76:e6:d3:23:d8:e9:16:17:9c:c9:a3:5f:97:5e:7b:29:
ea:b2:dc:b7:9c:0e:1f:ec:cf:18:7e:e4:d0:21:e8:9e:fa:c3:
25:d8:a3:1a:b8:89:f5:c2:3d:e4:14:fa:62:07:51:8e:c5:2d:
e3:90:56:13:c2:f2:d3:93:a2:92:6e:36:67:a8:51:22:c6:b9:
91:04:55:90:ed:4f:97:22:83:00:5c:f8:d3:73:1c:03:7c:c1:
ec:84:0a:23:eb:7a:7c:43:a0:4f:28:d1:14:a6:49:9a:89:80:
26:9d:01:04:44:4d:48:d0:3a:b7:18:dc:c8:26:04:de:02:e5:
e9:3a:24:1a:d6:2e:93:ab:f9:ec:a5:ec:69:aa:eb:d4:fc:f9:
27:28:bb:bb:15:74:67:d8:a2:b4:3c:ec:76:59:21:b3:94:92:
8d:f0:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:44 2026 by rpki-client