Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: /h5qvFdsK/qv8tzm9glGWUEyECiXpRfnl8Rap/gv39s=
Subject key identifier: 89:83:B5:8B:68:5D:44:FB:F9:27:7F:24:92:8D:FE:09:56:21:7C:C8
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01A1DA93693365F31F57C3473E897CAE6739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0C29
Signing time: Sat 14 Nov 2026 15:00:55 +0000
Manifest this update: Sat 14 Nov 2026 15:00:55 +0000
Manifest next update: Sun 15 Nov 2026 15:00:55 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: HL5c0wGWUiOTko68CPvpd+a6lCfrkGjn1AJTfuvJAj8=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:69:33:65:f3:1f:57:c3:47:3e:89:7c:ae:67:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Nov 14 15:00:55 2026 GMT
Not After : Nov 15 15:00:55 2026 GMT
Subject: CN=8983b58b685d44fbf9277f24928dfe0956217cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:11:1e:ce:14:dc:eb:86:e9:26:47:e4:42:
0b:68:de:af:d7:34:5f:ca:7c:53:92:36:7f:64:e4:
6e:63:67:75:a6:42:e8:9a:16:d2:e9:04:68:38:89:
8f:70:71:f0:b5:fa:0a:21:29:33:88:e2:c1:4e:2f:
51:da:c4:05:e5:3d:b1:51:cd:7b:ec:22:8d:0c:d5:
4e:84:19:36:2a:a9:98:4d:d5:68:cf:de:86:58:db:
d4:1b:87:7d:c2:00:a3:1f:70:e9:94:04:09:ca:91:
56:58:03:23:81:cd:5d:66:0e:5e:24:e8:22:3e:2c:
17:60:15:50:c2:aa:d6:6e:e5:4b:b4:25:2c:87:bf:
7c:68:99:c8:f5:57:6f:f0:33:d6:a2:0f:2a:a3:ba:
5a:d1:97:c8:af:6b:8d:c9:a3:64:20:0b:d5:16:8a:
9e:6e:fc:6c:53:e7:d3:97:bd:7d:1e:2a:a7:7a:40:
86:23:d5:d0:d2:58:4e:d7:40:e8:07:7b:2e:8a:d1:
b3:e0:8d:ca:72:6e:bd:d6:70:98:04:39:e1:98:7b:
a6:da:81:da:ac:b7:79:bc:f6:89:20:9d:73:ac:08:
87:11:99:8b:32:61:25:12:d9:d7:53:68:4b:05:5a:
5d:06:30:6b:af:7e:a2:2c:0c:b6:b4:e6:20:95:79:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:B5:8B:68:5D:44:FB:F9:27:7F:24:92:8D:FE:09:56:21:7C:C8
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d8:dc:29:61:6c:41:ce:5b:a8:e1:d0:b9:a5:e3:28:d6:b4:
11:e5:96:9d:cf:a1:85:79:fa:9b:5e:b6:f0:57:ce:c6:5e:ce:
2c:22:c1:49:04:11:09:2b:89:c2:46:da:fa:1c:fa:ef:f2:4a:
ed:e1:f4:36:d2:d0:6e:0f:7a:b4:fc:2f:83:09:6f:9d:1a:06:
6e:53:9e:c3:c4:ad:e6:5e:48:a1:ce:28:c5:15:8b:0e:00:92:
1e:15:2d:4d:42:a4:80:3f:b6:f6:61:78:40:75:b1:91:5f:34:
a8:fd:5c:ed:cc:f6:06:96:fc:cb:b7:f7:dc:43:88:74:42:7a:
0c:4b:cc:f9:83:f3:bd:d3:9a:2c:ca:c3:ef:a0:de:4b:2b:db:
dd:90:78:b6:2a:3b:cf:c8:34:5d:65:1a:0c:ab:23:d0:73:eb:
71:ab:c2:8c:b3:12:b1:d3:4e:37:d9:c1:41:c9:0f:f7:9a:6e:
13:5c:85:bc:23:e6:ff:2f:b6:cb:aa:12:2f:e0:5b:2f:dd:54:
a4:99:6a:25:bf:20:91:c6:10:72:de:e2:c4:f1:d7:87:fa:8f:
b1:35:be:92:46:de:e7:90:43:6e:55:c5:ee:67:07:88:b3:e7:
07:6c:1c:7e:ae:9a:3c:7b:1c:69:8d:a9:5d:a7:0d:17:1b:e6:
d2:89:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:26:56 2026 by rpki-client