Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: FLAdPPGgyFl0/NNPBr2SU5P3AkIeCau22on687UFINQ=
Subject key identifier: 58:19:3B:93:63:45:EC:67:7B:F0:E6:0B:6B:B9:97:4D:08:7B:26:CF
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 01A1DCB95EAD0EF218C0B6D86D63A21B632F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 01:01:38 +0000
Manifest this update: Sun 15 Nov 2026 01:01:38 +0000
Manifest next update: Mon 16 Nov 2026 01:01:38 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: CAnzlKGW/QdjPruoMPscHMG4GZAzeNYLxNvL/JANkUE=)
2: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (hash: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI=)
3: tIEL4J6jSkAPZLSFtELamVkICgM.roa (hash: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:5e:ad:0e:f2:18:c0:b6:d8:6d:63:a2:1b:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Nov 15 01:01:38 2026 GMT
Not After : Nov 16 01:01:38 2026 GMT
Subject: CN=58193b936345ec677bf0e60b6bb9974d087b26cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:e2:dc:37:fd:74:3d:12:84:40:dd:68:f6:
47:61:23:35:40:d1:a4:88:a6:b5:28:25:e5:96:f0:
73:8b:03:e2:c2:b9:f4:76:be:55:10:df:0f:c1:7e:
4e:f2:7e:06:bb:31:de:8d:3d:35:87:56:8d:5f:00:
b7:7a:b5:6b:4f:db:fe:a5:47:b1:c0:0f:44:ac:ac:
bf:58:3f:b7:71:f6:96:c0:52:88:8f:ba:b9:2a:2e:
0c:e6:25:35:1e:0b:53:d9:7d:52:d0:d3:cf:8b:61:
36:f0:79:01:b2:06:c6:3c:36:3d:d4:a3:56:2f:da:
76:c9:1c:1c:03:63:aa:ad:59:c4:2b:8d:11:84:cf:
a2:e4:ee:aa:41:a1:c8:51:2b:0e:b3:ba:27:88:a3:
af:4d:5d:9a:13:9b:03:d6:42:af:2b:d0:34:70:98:
dd:ad:b5:c2:33:f3:6f:7d:81:93:e8:ac:14:c6:f2:
f9:34:fc:ae:b5:fe:89:8e:22:bf:7a:e4:fd:2c:6a:
a9:c6:89:1f:e1:ca:01:38:72:a9:a5:38:ee:81:2f:
d7:c2:bd:38:88:1a:3c:22:85:ea:61:c3:c1:05:02:
04:c8:6d:95:ef:61:e2:ff:75:80:51:8c:5f:55:1a:
2d:16:28:7b:ec:7e:3f:ee:31:52:cc:c3:d0:09:11:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:3B:93:63:45:EC:67:7B:F0:E6:0B:6B:B9:97:4D:08:7B:26:CF
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:55:29:08:8a:57:47:c9:45:ba:a9:8e:bf:da:1f:0d:5f:28:
64:0c:5d:15:ac:45:34:3f:4e:85:c2:41:f3:cb:c8:89:c1:69:
a3:dc:73:b4:a1:3f:99:75:57:d1:41:19:da:37:80:44:a8:c7:
1e:0a:d7:f5:88:55:35:33:bd:c3:12:a2:b6:92:42:cc:16:9c:
23:c5:56:f4:52:b0:dd:b2:07:3c:84:b8:ff:fa:6a:12:65:4a:
36:1c:9e:4b:4e:9d:70:eb:c1:8e:0d:24:64:4c:34:21:9e:4b:
69:8f:66:0d:da:db:96:6b:56:6b:f0:1f:f4:a8:e4:4a:27:fe:
a4:a0:e7:4b:fb:81:bd:11:1e:06:3d:a2:3a:6a:b7:13:a1:52:
de:03:6f:6e:1f:cc:2a:d8:bc:18:f0:32:72:36:79:cf:20:60:
83:33:6e:85:da:86:a0:4b:79:18:a3:eb:81:b6:51:dd:bf:ed:
d0:8a:02:12:25:3a:da:ba:07:4b:ca:f6:00:8e:3b:21:96:d8:
90:11:22:cf:0a:80:46:5b:63:d9:97:e5:a9:28:1d:02:e3:db:
2d:14:a3:0b:65:fe:2e:3f:56:98:ec:e5:97:e5:69:6e:8d:2c:
63:43:a4:58:24:fc:55:b0:e4:22:ff:ec:f2:73:5c:07:1a:6e:
5b:27:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:48:19 2026 by rpki-client