Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File: iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier: ikOA6sN0EgddmQ//hci9RadxygOCGmMyGIZONMx0bw8=
Subject key identifier: E6:37:09:81:80:5A:20:41:7A:44:60:40:C6:AB:9A:5E:4B:EA:AF:7C
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 01A0CBC7663D1044C6DA0A84214F6E7CAE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number: 0611
Signing time: Wed 23 Sep 2026 01:00:37 +0000
Manifest this update: Wed 23 Sep 2026 01:00:37 +0000
Manifest next update: Thu 24 Sep 2026 01:00:37 +0000
Files and hashes: 1: Bu84RhuemJnWYuQuYDWAPY6eUcM.roa (hash: HW6yRnsl3nokN3GyGFBi+j2pUsGdKkc/tn9uxXaGfzs=)
2: CJHjJvBxO_A1o29RU77bYDobb1Y.asa (hash: OiQ96AcIrfdWv9rYq7YRunMZUUkm1k1hxiflexmUSCE=)
3: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: WH8gMN1a5Hts4pEK/mhMXIdKbrjaAQxKya8k/SVmfOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:66:3d:10:44:c6:da:0a:84:21:4f:6e:7c:ae:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: Sep 23 01:00:37 2026 GMT
Not After : Sep 24 01:00:37 2026 GMT
Subject: CN=e6370981805a20417a446040c6ab9a5e4beaaf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:30:7f:c6:52:0b:2c:a3:49:a9:b6:be:71:
62:2c:ed:9d:eb:21:6b:62:87:f8:ef:5e:20:fb:a0:
c1:03:9f:76:3d:89:9d:0a:96:f5:81:6e:05:2d:b6:
39:8c:c3:2d:2e:c1:67:1a:1a:23:c7:d1:31:1d:ba:
b7:05:9c:88:a1:eb:7d:98:ba:9d:80:5c:c1:4b:ee:
cd:5c:cb:ba:16:3c:25:60:68:ee:20:7a:56:4e:0f:
9e:c7:6f:68:7f:f5:a8:b4:1c:b1:a0:0b:40:ff:1d:
31:a5:31:cd:35:b4:b5:46:f3:20:69:e3:5e:b6:7c:
d9:f0:fe:f4:f8:5e:59:90:ef:ab:2f:45:a6:db:4a:
a9:5b:9f:f9:f2:83:c9:b8:1f:b6:7a:d9:cd:58:00:
a3:d9:21:d4:0b:83:f7:ce:60:e5:b4:3e:6b:e0:31:
f6:ec:78:3f:8f:ec:54:f7:3d:b2:94:32:f2:f1:b6:
40:07:60:ee:fc:a4:5e:19:5b:50:5e:95:57:3d:d8:
67:dd:1a:f0:7d:75:b7:eb:16:0d:b0:8f:4b:0b:a8:
78:c9:88:ae:1e:19:15:fc:73:c4:90:ba:7c:d7:b0:
cb:d4:85:c6:71:75:4d:2e:55:e0:5e:58:d4:5e:5c:
63:72:16:a8:22:74:19:0d:bf:7c:58:2c:9c:f6:7b:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:37:09:81:80:5A:20:41:7A:44:60:40:C6:AB:9A:5E:4B:EA:AF:7C
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:a1:b9:fc:ed:ce:cc:03:3c:0e:73:9a:d5:ae:f2:20:46:
d9:83:28:24:e1:ea:42:e5:f2:aa:39:a8:25:c1:d0:70:25:60:
26:c9:5d:02:29:c5:99:4c:a5:f7:8d:79:e5:e1:56:e0:34:d9:
80:d3:82:c8:df:a3:4b:5d:d8:54:94:bb:a0:76:8b:95:b9:c2:
37:3d:eb:42:60:dd:2d:81:71:5a:52:84:cb:3d:12:6e:42:93:
2e:73:cf:6a:1e:b3:a8:7f:6e:a2:37:25:ba:70:3d:85:e9:77:
70:bf:0a:15:73:11:f7:8c:f4:0a:3f:2e:b6:e7:c1:c6:c9:23:
55:b6:a9:0c:ac:22:a8:4d:9c:5d:20:10:3b:d5:c6:fe:b7:4b:
65:93:88:5b:b7:64:5d:78:5b:0b:e6:ae:4b:c0:b8:91:cf:4e:
3b:30:67:66:4f:0f:1e:79:9c:1b:18:e2:c4:08:31:a7:75:21:
2e:a1:31:75:7e:33:3f:9c:8e:b5:21:5c:81:8d:6b:60:7d:d1:
6b:a0:e9:9f:9c:b8:53:8a:b7:26:97:04:cb:84:20:ec:91:cf:
8f:b9:c7:96:8a:2b:f3:f5:41:e2:d8:bb:e3:09:6f:4b:92:f4:
70:3c:6c:49:27:49:db:83:b5:5e:93:53:76:d7:03:da:bf:cc:
02:40:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:36:20 2026 by rpki-client