Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
File: ivFfMc4WFKwlq9e48k24anSz898.mft (raw, json)
Hash identifier: pyCky65AK264Sd/4c4h0lAZdC5MzD7iOgrQFEOZ0dv8=
Subject key identifier: E9:71:19:84:65:9C:5F:54:EC:D9:D6:69:19:82:CD:B4:11:93:CF:49
Authority key identifier: 8A:F1:5F:31:CE:16:14:AC:25:AB:D7:B8:F2:4D:B8:6A:74:B3:F3:DF
Certificate issuer: /CN=8af15f31ce1614ac25abd7b8f24db86a74b3f3df
Certificate serial: 01A0E1065496DB74F8498974C561512D3FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
Manifest number: 1E
Signing time: Sun 27 Sep 2026 04:01:23 +0000
Manifest this update: Sun 27 Sep 2026 04:01:23 +0000
Manifest next update: Mon 28 Sep 2026 04:01:23 +0000
Files and hashes: 1: HVgZTOCzOmeIsVa1jFNOUlOBIuM.asa (hash: pAHXwQOyGNXX7NSjDe6sMzzzTHUuF6yV4VE2jeHCx5I=)
2: ivFfMc4WFKwlq9e48k24anSz898.crl (hash: 1ZhMLbxZvSBbNTP3mXDMe2jqBmI1QdFtUco6zxM3WZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:54:96:db:74:f8:49:89:74:c5:61:51:2d:3f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af15f31ce1614ac25abd7b8f24db86a74b3f3df
Validity
Not Before: Sep 27 04:01:23 2026 GMT
Not After : Sep 28 04:01:23 2026 GMT
Subject: CN=e9711984659c5f54ecd9d6691982cdb41193cf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:86:94:a1:40:bc:89:bc:76:af:74:79:dd:
8f:01:e8:73:c2:bd:c0:e3:ab:0c:1f:98:44:46:18:
b0:d7:6a:fe:8e:c8:78:b5:25:eb:b8:00:dc:9b:42:
81:b8:40:83:5c:0e:dd:b7:2e:e6:43:ed:cf:fb:79:
19:43:45:28:4d:53:6b:27:46:8d:92:d8:83:98:67:
0f:95:3e:c2:b3:57:5e:f3:aa:92:ad:0c:05:a3:4e:
cd:d5:8e:61:52:2c:e6:32:f7:7b:79:76:93:39:f0:
39:00:4c:8e:b0:fd:60:78:c6:f6:80:db:d3:bb:c7:
7e:04:df:7d:ab:11:56:f5:3d:91:1d:94:5e:cc:0d:
61:80:43:34:cb:48:6b:6b:53:94:c4:ff:6d:c6:46:
07:6f:84:ea:d7:5b:bf:34:cf:75:60:00:7b:1c:fd:
ac:02:4b:bd:11:11:a0:56:86:5d:24:ec:11:be:a5:
20:2a:00:bb:c9:80:37:15:c1:a6:4a:a7:42:8c:c5:
58:4e:89:61:90:05:5e:3c:ee:55:21:da:3f:76:27:
64:73:63:75:08:3c:6c:e9:2a:ba:b0:01:05:da:6c:
60:0a:e0:e4:10:e7:46:f2:e6:ff:39:05:50:29:ca:
2b:0f:f0:26:5d:23:5b:6f:d5:90:06:6b:df:1e:40:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:19:84:65:9C:5F:54:EC:D9:D6:69:19:82:CD:B4:11:93:CF:49
X509v3 Authority Key Identifier:
keyid:8A:F1:5F:31:CE:16:14:AC:25:AB:D7:B8:F2:4D:B8:6A:74:B3:F3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7d:07:64:64:f5:58:10:1a:aa:f9:7a:6a:19:2d:75:51:8c:
49:d7:8c:38:a0:c2:46:ef:65:95:ff:73:54:dc:50:d3:38:dd:
89:59:55:32:2c:b3:2d:1a:54:9e:4f:c6:0c:5b:96:fa:0e:3d:
c9:c7:77:68:c7:1e:be:25:55:b7:8d:37:4d:bf:4b:d6:3c:7a:
51:c9:fc:d5:89:a7:d2:3a:d5:5e:3d:3e:f9:1e:c5:d3:67:be:
f7:76:9d:51:30:71:e4:4c:a9:5f:7e:ee:7e:af:a2:fa:44:93:
ad:af:f7:be:7d:ef:2b:28:30:c0:19:81:01:c3:2e:10:3a:36:
7d:d8:6f:91:a3:aa:7b:a5:69:2d:86:7f:07:58:79:9e:e5:1e:
a6:80:8d:39:fe:fc:74:cb:2d:30:74:41:7b:39:09:4f:eb:23:
3f:85:70:cd:fe:34:00:07:5f:69:e2:80:b3:ea:78:54:41:ba:
f9:c4:20:62:01:dd:cb:f4:57:5e:3f:ea:ca:85:08:03:6e:44:
0c:6e:0a:bb:e0:ff:07:ff:10:cb:08:3a:19:de:4a:56:fa:d7:
51:60:e2:0e:07:75:c1:b2:8a:38:7c:2c:7d:0e:d3:3b:49:79:
61:29:68:7f:0a:f2:db:03:90:e1:3e:a8:55:cb:62:dc:8d:bd:
1b:a3:4e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:22:34 2026 by rpki-client