Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: quHNH7VQK1flbPW+0SYGoeWkkaFZ/1MBbxmBkOs/rkg=
Subject key identifier: 92:E0:10:9E:DA:2E:72:7E:96:55:57:B5:B2:B9:7A:21:BA:AD:D2:A8
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 01A0DCF2ADCD829C14E4DAD726624D54ADB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0EEA
Signing time: Sat 26 Sep 2026 09:01:26 +0000
Manifest this update: Sat 26 Sep 2026 09:01:26 +0000
Manifest next update: Sun 27 Sep 2026 09:01:26 +0000
Files and hashes: 1: dvkk0AF8tQcZnUPQCg9wGxPygAk.roa (hash: rFoeKgkf83K3sPDF/5ELGk/RlwiuIW6RTOiVohUUKGA=)
2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: 8cSgYSgkVe3l+wKVxGouRB6a7kz5r6RcHJWO/a002YY=)
3: xoWvafIMJ6TLt2ZntxrZctfmhMc.roa (hash: Rhaku6Y4Ce9/CA5bX0DFke+wrnSAKtC/WyFWuc4Uj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:ad:cd:82:9c:14:e4:da:d7:26:62:4d:54:ad:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Sep 26 09:01:26 2026 GMT
Not After : Sep 27 09:01:26 2026 GMT
Subject: CN=92e0109eda2e727e965557b5b2b97a21baadd2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:9f:28:c8:c8:61:76:6f:ea:48:02:81:25:
ec:cf:d0:81:e5:c7:52:ad:95:b6:0e:21:b1:f1:b7:
e7:6a:36:55:c2:c8:c5:80:c1:b2:1b:a0:10:43:1b:
0d:cf:b4:c7:fc:b3:81:66:20:dc:4a:e5:f7:c9:42:
19:de:d7:41:8b:73:a3:0e:1c:46:8d:df:19:21:9c:
74:c4:ee:16:15:04:dd:10:1b:b5:11:5c:c0:1e:05:
ab:d7:f3:3d:12:03:52:0a:66:e9:f4:a0:4c:f8:11:
bb:5b:f6:ec:b9:0f:d7:ae:bb:94:ae:6d:9e:e5:06:
86:26:f7:f9:06:35:21:de:b8:cb:c8:a7:58:2d:5b:
f7:a3:47:25:f0:74:f6:89:75:4e:1b:f3:8c:77:0d:
64:e5:a2:f8:10:db:d4:f0:3f:90:37:fe:b0:33:22:
49:45:8d:68:87:37:70:6f:97:67:02:88:2e:97:77:
9a:58:5b:e4:53:78:94:33:63:15:05:e1:ef:df:88:
3e:1e:12:5b:b9:e4:60:ba:e8:e4:67:9e:f2:4a:5b:
07:52:91:1b:e6:27:99:b0:12:8e:10:08:c0:e7:54:
78:10:0d:fc:b3:35:60:5c:26:5c:6b:9f:51:1c:36:
21:31:5e:af:22:11:22:0d:68:44:8a:74:b7:7c:9e:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:10:9E:DA:2E:72:7E:96:55:57:B5:B2:B9:7A:21:BA:AD:D2:A8
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c9:40:6d:56:28:f4:c4:84:16:49:d8:7c:6f:d8:d3:40:d7:
96:60:16:7d:c1:ac:53:d1:60:cb:cc:52:74:3c:c4:93:3e:fb:
a4:70:9d:2d:29:2a:91:cf:12:fa:86:93:73:3b:cb:a9:17:b6:
35:eb:26:ca:f5:db:e0:52:bc:a4:ca:30:24:0d:23:cc:5e:4f:
8c:03:f4:5d:79:c8:4e:01:c1:47:96:59:a5:84:f6:c5:1c:fa:
a5:0d:b9:a6:fb:f5:2e:f8:26:3d:c3:69:11:a9:67:64:92:46:
28:05:7a:f9:c2:c7:eb:f9:0a:f1:6d:62:14:85:37:d9:0e:6f:
d5:d9:a6:c1:98:53:43:45:3b:2c:1e:4d:90:c6:bc:f9:1f:a5:
58:23:10:fa:32:22:0b:00:e8:41:e4:c3:12:9d:ca:c3:eb:52:
49:2b:3d:54:19:3e:dc:b2:38:32:2a:9d:d8:31:c3:28:2e:36:
f9:a4:5f:8a:57:81:29:bd:af:63:5e:0b:c8:88:63:7a:fb:35:
da:27:18:eb:43:a6:85:bb:86:e1:39:50:15:8c:7f:17:22:99:
40:f3:d2:6c:81:b9:5b:66:f4:6e:af:5b:6a:c8:b5:b2:40:ab:
0f:94:ee:fd:c0:fd:f1:bf:88:3f:a1:69:e4:c2:95:de:ca:ee:
bc:88:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:52 2026 by rpki-client