Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: XPYaJyZ6ctC0d2A4o3DApOt5nWnBD2hIqqu04d8Afbs=
Subject key identifier: 37:86:23:95:89:D8:DA:AB:BD:55:D1:A0:5E:2B:29:77:CA:5D:A6:0A
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 01A0D1FFF1F15D7BA1DC275FB9E0F154B6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 06:00:06 +0000
Manifest this update: Thu 24 Sep 2026 06:00:06 +0000
Manifest next update: Fri 25 Sep 2026 06:00:06 +0000
Files and hashes: 1: b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa (hash: hHkV6ifNNgCnzjffMB2ARiro7sl9sU2WuipxUNM/huo=)
2: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: tvC4kdZGQfuvWVsod0cQRYiNLdIu5sYbimXL3HRbl84=)
3: jAnHcvp-J3jJ73LmJIPdJciy_zM.roa (hash: APG1rihSnkESicy3QFJODSTSwbqRn6HF/XNwWPvWKwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:ff:f1:f1:5d:7b:a1:dc:27:5f:b9:e0:f1:54:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Sep 24 06:00:06 2026 GMT
Not After : Sep 25 06:00:06 2026 GMT
Subject: CN=3786239589d8daabbd55d1a05e2b2977ca5da60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:01:53:f9:73:f5:04:9d:5e:df:f7:96:e5:
fb:f2:ac:f2:5e:54:b5:47:5a:a8:53:64:54:37:ee:
69:be:20:1f:c7:9c:40:62:26:86:bb:f6:f6:cb:e9:
13:4a:dd:2e:f7:73:01:71:b9:dd:50:15:c1:15:2a:
d4:b4:16:db:2e:50:59:8c:9e:47:ef:cc:f0:21:c7:
4e:5a:45:4f:fa:20:01:f2:44:ad:f8:6a:2b:af:9f:
90:9a:36:e3:f0:8d:e1:73:ce:5b:ee:cf:4c:7a:cc:
0e:18:c1:ff:13:cb:9e:75:dc:dc:fe:c9:b9:bb:8c:
2b:f2:0e:d1:22:c4:9c:b1:5d:b2:a8:24:9b:ab:1c:
17:95:9f:d5:0b:59:34:40:07:4a:83:0a:1f:3c:ab:
0f:c3:1f:2b:02:3e:b6:1c:74:36:47:75:36:9b:29:
5c:28:e4:63:46:4b:ef:d4:09:45:5a:60:a7:70:3d:
59:62:21:da:59:7d:7b:05:c6:12:7a:f1:ef:cd:9a:
fe:40:05:e9:90:a0:fe:ce:09:7c:6f:30:36:41:a0:
03:8b:42:c3:64:28:2f:77:4a:57:96:06:18:67:7e:
98:51:96:e5:9c:39:de:8e:3f:2c:85:ca:bb:7c:1b:
66:a4:16:3a:63:68:fb:4a:aa:53:30:29:bf:82:a7:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:23:95:89:D8:DA:AB:BD:55:D1:A0:5E:2B:29:77:CA:5D:A6:0A
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a8:ba:0b:d0:39:72:b6:08:64:68:e8:d0:46:d7:63:31:62:
dc:6b:7f:93:78:af:c8:d2:4b:36:69:20:bb:6a:87:c2:4a:90:
04:d7:04:51:4b:82:96:4a:dc:bd:9d:e6:04:97:a6:03:dc:3a:
cc:ff:58:87:2e:00:44:09:12:5d:3f:d0:f2:cb:27:d8:59:89:
a2:cd:a4:bb:f7:e6:35:fa:c8:4a:a6:ba:22:39:d5:62:cc:31:
3d:90:b3:fe:26:02:dc:b0:f7:e1:b7:e2:1e:9d:da:a1:b2:89:
4a:fe:71:d5:97:71:e8:e6:c0:57:65:0c:36:94:7c:7a:b3:4d:
da:0d:0a:a7:72:5a:a1:bc:a3:d2:d1:f5:27:b5:50:89:6b:30:
8e:3d:5b:62:e6:41:9f:74:70:14:ea:7d:21:45:11:51:12:77:
bc:73:36:e5:19:4c:0c:fd:41:e1:ef:7e:9d:af:96:f1:c1:a0:
ce:10:a5:08:7d:f9:bb:f3:2b:5f:ad:6e:2b:27:04:da:76:6f:
a7:d0:8a:e7:0e:15:0b:cf:62:a8:77:54:26:fa:2d:8c:cd:8c:
64:03:50:c4:b4:aa:c9:64:66:d0:41:65:19:83:72:45:22:c0:
18:be:72:e9:b6:c5:70:b9:df:21:1b:79:9c:ba:17:0f:13:df:
a1:ac:7d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:11:06 2026 by rpki-client