Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: bM7Oj2pKrOtBudZHTVSsMWHmcRe8ruTHyh5SkO6r4DM=
Subject key identifier: C8:09:B1:41:51:0C:4A:E9:B5:3C:79:08:49:05:47:12:B7:EE:31:04
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 01A1DDCC5520CF5E29E488DFFA579A26330B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 1ACE
Signing time: Sun 15 Nov 2026 06:01:58 +0000
Manifest this update: Sun 15 Nov 2026 06:01:58 +0000
Manifest next update: Mon 16 Nov 2026 06:01:58 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: UlEURUsZyMAJRirCLdl+5tcwVuDt/FTrwVX0h8HGpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:55:20:cf:5e:29:e4:88:df:fa:57:9a:26:33:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Nov 15 06:01:58 2026 GMT
Not After : Nov 16 06:01:58 2026 GMT
Subject: CN=c809b141510c4ae9b53c790849054712b7ee3104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:91:5f:b7:34:80:aa:b8:fa:79:5c:93:a1:5a:
1f:27:98:81:d0:d0:1f:f0:b1:8c:ca:26:c4:db:30:
69:4d:c5:4e:90:19:a7:e4:8a:c2:96:dd:9c:ca:9e:
bf:80:66:cb:63:f3:52:2a:51:9e:a6:bb:ca:42:59:
81:15:9c:0d:7f:f5:50:37:80:2b:6d:e7:c2:0c:0f:
52:9b:d0:8f:9d:59:c9:17:a7:16:0a:5c:05:24:31:
7f:f4:5b:0a:18:eb:f3:71:3a:48:b2:d6:66:95:10:
2c:33:9d:81:cc:4c:f4:2b:31:44:fa:f6:a2:8d:08:
da:0e:fd:a1:4a:33:cc:ad:e6:53:fa:14:a7:79:e1:
88:4a:20:d1:f7:4f:4c:2d:a0:f5:21:3a:cb:46:19:
d1:75:b8:c1:df:da:e5:a0:56:5e:84:52:06:2b:38:
86:33:52:8d:d4:32:0e:3a:76:b8:cd:c6:cb:72:91:
9f:b7:cf:6e:d8:ee:06:ae:c6:96:a4:2d:6a:06:fb:
f4:b7:9f:65:91:8b:8b:2f:51:54:32:eb:45:5b:ad:
1a:16:db:23:40:66:b1:90:36:a6:f9:5e:4c:47:0f:
15:4f:42:ac:0b:59:ca:73:5d:1b:ff:83:b3:45:a2:
00:3d:43:eb:62:6b:6b:4c:4a:8b:5c:e3:30:03:17:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:09:B1:41:51:0C:4A:E9:B5:3C:79:08:49:05:47:12:B7:EE:31:04
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:16:8c:7d:ea:b6:62:cb:b7:61:36:4a:1f:9b:1a:9a:aa:
19:56:54:ec:9f:d1:26:49:e8:d0:18:a7:13:3d:09:a5:6c:59:
17:dc:3d:f1:ad:55:23:45:3f:fb:be:15:f7:6a:64:4a:dd:b0:
14:87:2f:3d:70:26:f4:60:33:45:ae:a8:7c:5b:b2:96:06:c5:
91:ed:d3:cb:f2:bd:08:b0:5b:a7:ca:35:81:c4:ff:18:bf:6e:
c6:f4:b2:23:3b:2e:d3:fb:5a:46:ac:04:48:15:c8:2b:a9:ba:
27:8a:3b:6d:be:e7:53:ba:9f:60:cb:76:3e:7c:00:41:0b:b2:
42:5e:69:cc:e0:1b:c8:51:a0:55:30:41:25:81:00:60:8f:58:
65:50:85:4f:25:30:f0:3d:c6:aa:44:10:19:de:57:a0:71:a9:
90:18:21:e0:7d:41:35:ac:ab:dc:09:c6:8c:fc:21:5d:8b:46:
e9:ef:f2:fa:9c:a0:c2:53:77:02:62:b9:6a:97:a0:b5:e9:4c:
cc:da:fa:6d:cb:01:e4:36:15:b3:5e:0b:f6:a0:23:52:79:f3:
ee:7e:47:68:4f:ae:59:77:2b:81:42:5b:54:9f:19:03:c6:cd:
8b:70:40:88:a3:a0:85:ec:0b:3d:db:ef:60:be:1b:5f:71:4d:
50:e8:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:23:32 2026 by rpki-client