Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: jxJXcQHY3vCPOLdsQClg3Fo3jHsufpufGy6FF0x4nUA=
Subject key identifier: 87:13:B3:81:C8:32:63:B7:EC:BE:0D:EA:C1:3F:48:90:6B:BE:79:4E
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01A1DEDE4A9FDEED5C21A1DF86E07FF1B0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 11:01:12 +0000
Manifest this update: Sun 15 Nov 2026 11:01:12 +0000
Manifest next update: Mon 16 Nov 2026 11:01:12 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: XxyA/aGLsGs5QoEGN6pHmymGnMx1DXGdq0P2JPWfRwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:4a:9f:de:ed:5c:21:a1:df:86:e0:7f:f1:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Nov 15 11:01:12 2026 GMT
Not After : Nov 16 11:01:12 2026 GMT
Subject: CN=8713b381c83263b7ecbe0deac13f48906bbe794e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:9c:01:b7:a4:82:91:64:7c:f4:66:bf:e5:
6f:77:75:8e:e8:8f:1c:4a:8f:04:b9:56:ca:40:56:
ee:cb:46:22:b6:de:e0:b4:b3:36:58:4a:44:69:ac:
e4:81:a5:66:94:c9:f9:99:6f:43:98:6d:8b:06:fa:
1c:38:08:82:f6:68:0d:64:26:54:21:ed:f4:09:52:
d9:82:b3:c6:85:0d:5b:db:05:61:fe:88:14:fd:86:
77:a6:11:c7:3c:45:70:86:1d:a5:01:92:b5:e4:a4:
12:24:11:1e:19:f1:68:55:7d:df:52:7d:c8:01:a7:
52:0e:08:0b:51:0d:e0:5f:c0:67:ee:cb:f5:bb:51:
b4:99:50:f6:a9:f2:d3:41:4c:b1:12:9d:c0:8a:bf:
b9:1e:a6:99:15:5c:c5:40:0b:3b:56:8a:fa:3e:d9:
da:a5:bc:96:fa:b8:50:9b:15:b7:77:97:a3:c4:ba:
fa:c6:10:14:13:49:c5:ba:e5:0a:ee:ae:9d:d5:be:
a0:bf:3b:ee:1b:97:a9:37:55:0f:95:73:c9:ac:b9:
b4:4f:00:9a:b1:d1:fb:d1:3b:02:d9:6c:c1:05:bb:
7d:91:5e:32:06:8c:53:13:58:58:f1:28:7f:50:78:
d3:ef:bb:d4:b0:2f:dc:75:f1:6f:62:90:d1:d4:e3:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:B3:81:C8:32:63:B7:EC:BE:0D:EA:C1:3F:48:90:6B:BE:79:4E
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:03:f8:60:2c:cc:e7:ac:5c:66:b6:6e:93:6b:17:49:4a:e3:
96:86:e7:e2:f1:8c:a3:90:46:29:db:11:34:b4:33:f6:3a:8c:
53:30:68:df:76:a4:a2:c0:17:01:16:c3:4b:4b:c7:7f:99:60:
c2:6d:77:38:07:05:65:9f:5a:73:8f:1e:82:27:62:15:63:c0:
4a:45:ff:82:ca:bc:82:2e:88:16:ff:20:4b:f3:e3:e9:22:3a:
af:c8:67:56:8c:5c:8c:38:bd:a1:d1:f6:dd:70:70:82:29:f8:
4d:f3:d1:17:14:3a:5b:a0:d2:c4:3c:00:e4:36:ea:ea:d3:37:
55:38:59:4d:c4:3f:be:e8:f3:ea:d3:39:0e:a6:9e:3c:fe:76:
1b:c3:5b:36:62:05:b2:38:79:32:31:5e:6d:58:b6:a7:8b:4a:
e5:b2:8d:3f:75:44:1c:41:ce:c7:66:31:58:38:71:5a:34:ab:
9b:1d:a3:ec:c6:60:19:72:80:3d:64:b3:3a:5e:75:74:7d:df:
c4:52:5f:b4:36:c8:6f:3a:f3:5d:f8:42:33:58:a0:96:ba:c9:
7c:88:cf:2b:80:33:17:6e:a5:0a:03:15:5a:2e:73:0b:7b:7a:
93:58:3b:41:c6:52:05:df:d8:91:fa:d8:ab:6e:62:5d:1c:d5:
80:ac:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:24:06 2026 by rpki-client