Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: 9YpHv+5WE6bxX1+uUIBVV71iPGuIEIl/J6Byi5VXh8I=
Subject key identifier: F8:23:E3:38:E4:D7:5D:55:6E:55:68:FA:54:C9:F4:9E:6A:C1:AE:96
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01A0D01275262CFEFB28992357D707707DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0B9F
Signing time: Wed 23 Sep 2026 21:01:05 +0000
Manifest this update: Wed 23 Sep 2026 21:01:05 +0000
Manifest next update: Thu 24 Sep 2026 21:01:05 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: y6oCisI73fXoa1Rzl0OEiPCeG8Fyc52cHcgwxaCRR10=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:75:26:2c:fe:fb:28:99:23:57:d7:07:70:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Sep 23 21:01:05 2026 GMT
Not After : Sep 24 21:01:05 2026 GMT
Subject: CN=f823e338e4d75d556e5568fa54c9f49e6ac1ae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:f4:45:5e:f6:6a:11:ce:ab:de:a4:43:33:
e1:95:bd:b4:23:22:e6:8d:93:5d:0c:47:50:fb:e9:
6d:af:3c:3f:1d:98:54:0f:4f:61:80:29:91:ce:f8:
bf:37:e7:5b:ab:51:14:d9:3b:3f:3a:2d:5b:4b:18:
a1:21:6d:17:78:31:f7:75:6b:aa:9e:2c:bd:40:d1:
36:f5:4e:a7:bb:ea:68:dd:d1:37:01:a1:c0:59:66:
66:9e:31:b7:ba:22:b2:1a:8e:2a:88:93:9d:b3:5b:
e4:9e:89:37:a8:68:8e:b4:39:dc:aa:e9:8f:3e:6e:
6c:c1:29:87:03:80:46:50:bb:b1:2b:7f:39:0a:34:
82:bc:6d:8b:71:4d:97:dc:e3:95:94:71:a9:e3:f2:
2d:76:52:9a:d2:33:39:bd:80:b5:88:a7:aa:b3:51:
25:d3:f0:b5:1a:41:d8:53:d9:8d:84:fd:26:e3:c7:
08:f3:88:b5:bf:f5:b0:d0:de:38:f4:b5:b3:3b:be:
e6:b9:97:fb:21:32:b4:a5:6a:c9:31:5c:f4:a0:bb:
86:8b:ac:df:2b:99:ef:4c:56:3d:67:fa:b6:1f:51:
6c:8e:d9:06:e3:1b:58:a7:fc:2e:2a:72:8e:55:a8:
60:05:8a:53:b7:31:de:da:a2:e5:f8:72:d3:bd:ef:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:E3:38:E4:D7:5D:55:6E:55:68:FA:54:C9:F4:9E:6A:C1:AE:96
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a3:fb:21:d3:0b:b8:e4:ba:5e:a4:f1:0a:cf:93:93:34:c8:
7a:db:46:c5:fe:a0:3c:43:77:95:03:24:46:1f:aa:49:03:f4:
32:e6:d3:01:a3:f6:bf:5e:de:e6:ca:71:7e:8c:de:b0:17:51:
22:7b:88:41:1c:97:d8:c9:68:91:1b:e3:48:ff:e5:da:6c:ac:
e8:d0:bb:a3:85:ce:60:21:bb:bf:0a:99:48:3e:59:65:98:13:
a5:ef:75:29:99:8d:89:23:54:d7:32:02:77:aa:7f:26:6b:29:
5c:56:fd:b7:f4:da:ef:92:53:23:de:4b:1a:ad:26:fd:fb:ba:
ea:70:e7:77:ea:26:47:12:30:59:e9:29:e1:ad:af:f6:e3:10:
36:9a:68:09:5d:03:5f:69:29:e7:16:44:c7:03:16:54:db:ec:
28:f2:16:94:ef:2f:a5:34:a8:a4:a4:81:5d:6d:eb:ea:f2:60:
52:2c:c4:91:3d:f1:ac:fa:ec:94:f0:8e:56:6e:92:37:dd:81:
96:a5:63:5f:4a:20:d3:77:b5:87:38:b6:20:be:1f:67:b3:ce:
fa:e2:43:be:aa:0e:8a:91:94:81:38:cc:71:b6:dc:a5:b7:c3:
8b:b1:cb:3e:fc:33:f5:20:63:78:cc:27:9c:32:53:29:f0:16:
96:85:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:57:46 2026 by rpki-client