Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: /oEmowwA51nk/67oZshVpgGZ5wnUhEHJBdo36SXzFmk=
Subject key identifier: C6:DC:72:38:7F:9B:C3:88:C3:DD:A4:4C:94:F4:AF:01:C7:4F:98:53
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 01A1DA93DFC9A2A522D169C15F1DBA2D33FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0C27
Signing time: Sat 14 Nov 2026 15:01:26 +0000
Manifest this update: Sat 14 Nov 2026 15:01:26 +0000
Manifest next update: Sun 15 Nov 2026 15:01:26 +0000
Files and hashes: 1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: IB4uNibr/gKjmC+EROVLdR9prMdsrBC+QXO70xPmM9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:df:c9:a2:a5:22:d1:69:c1:5f:1d:ba:2d:33:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Nov 14 15:01:26 2026 GMT
Not After : Nov 15 15:01:26 2026 GMT
Subject: CN=c6dc72387f9bc388c3dda44c94f4af01c74f9853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:d9:ce:f2:01:52:ec:ad:d7:f0:b5:28:b4:
6a:6d:07:c1:5d:ed:a0:61:16:ad:8b:56:d8:58:dd:
54:1e:d1:5e:a4:fc:96:61:53:86:e1:b2:4d:60:79:
b5:e6:64:01:ab:6c:af:3e:7a:eb:9a:1b:f8:ac:ec:
59:90:fd:4f:f3:c0:ef:02:6e:15:32:56:e7:64:1e:
63:07:49:d4:93:2a:7b:7f:32:3e:09:53:d6:0c:11:
46:87:e9:12:ac:a2:87:3c:92:99:4c:de:ce:90:99:
02:42:f3:ae:dd:d4:d4:64:8e:00:34:0c:a5:7c:ad:
7f:36:09:29:4e:38:bf:60:57:e8:e2:5a:3e:69:9e:
c6:d2:6f:53:d6:be:aa:ea:6b:14:70:2c:86:d7:ad:
6b:7f:c0:98:76:5a:ca:d3:5f:3f:d2:fa:86:81:ae:
b8:61:50:83:ce:8b:4c:75:b3:f7:b7:e0:62:a4:22:
c5:b8:ae:a3:34:ad:a8:23:bf:8a:b5:23:7a:13:70:
77:1c:27:34:96:aa:ea:60:3d:2f:a0:17:e4:ff:4e:
ba:5f:32:50:2f:e5:64:3f:15:3d:87:73:f1:8a:30:
d1:7e:0b:99:47:b2:fa:88:e5:b2:f1:07:a9:80:c8:
83:06:d6:0b:ef:e3:11:06:a8:0a:18:a8:29:84:ac:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DC:72:38:7F:9B:C3:88:C3:DD:A4:4C:94:F4:AF:01:C7:4F:98:53
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:c1:a9:a8:0f:f6:18:3a:17:ef:9c:39:94:9f:11:98:e4:
57:92:95:4f:a2:61:fb:2a:10:96:11:86:4a:8d:4e:4c:64:b8:
35:6c:21:99:00:e3:81:59:5d:c8:99:07:be:1e:17:7c:3a:d1:
90:1e:36:59:95:1b:72:61:69:79:09:9a:56:84:45:e6:67:68:
e3:30:18:18:15:ce:0e:a1:d7:19:01:e8:bd:2f:c0:82:65:02:
bd:9e:65:03:98:2f:c7:6f:a2:b8:85:17:be:38:c4:36:32:d0:
9d:f7:b0:2d:e1:12:1c:4a:e6:36:81:cf:7e:65:eb:73:98:62:
08:1f:80:e4:c1:9a:7b:aa:99:ca:cd:29:02:1d:5c:6b:f7:09:
94:5b:ff:ea:04:cf:96:8b:08:6b:ea:18:42:b5:79:f7:4e:c0:
c5:bf:89:f6:2b:b4:09:fe:29:af:10:2e:50:58:bf:a7:53:b2:
4a:f9:ea:f4:64:ea:81:a5:03:6b:a2:cb:07:0a:de:96:ee:d7:
9f:22:92:c7:13:8b:99:0a:b7:9b:29:0e:d4:41:d1:c9:87:f3:
46:ef:e0:0d:b3:00:c6:95:16:15:bc:61:f2:d2:43:2f:61:03:
54:3e:f8:19:81:1e:1e:a2:5f:b1:5c:a8:51:b5:d2:78:0e:8f:
1a:fa:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:15:24 2026 by rpki-client