Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: 6Z4OKsRvNrUV1a/SpeYtelqIniAEKNSKK7bv4X15WUE=
Subject key identifier: 6D:5C:87:55:A8:F4:CF:DB:E4:F9:0F:AA:4E:A1:59:91:24:18:ED:21
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 01A10A70579AD1E1D862EAF81DDC06E062AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 1A89
Signing time: Mon 05 Oct 2026 05:01:36 +0000
Manifest this update: Mon 05 Oct 2026 05:01:36 +0000
Manifest next update: Tue 06 Oct 2026 05:01:36 +0000
Files and hashes: 1: V2AzqvtsquO2cw9xiooW7SvirjM.roa (hash: h2OEkGsDBeZDRJkfmVD2RTlQU+2upNwxujp+DA8KQOg=)
2: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: kfDfnkxTrVZr0lhNM+Po+zVv1tTpCpPimtlwCl740Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:70:57:9a:d1:e1:d8:62:ea:f8:1d:dc:06:e0:62:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Oct 5 05:01:36 2026 GMT
Not After : Oct 6 05:01:36 2026 GMT
Subject: CN=6d5c8755a8f4cfdbe4f90faa4ea159912418ed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:41:33:fd:b8:62:f5:62:c8:bc:44:30:b8:
05:ee:14:d1:bd:fd:3c:24:e4:04:8b:b2:3d:a7:da:
ac:53:81:9e:8c:11:f8:cb:5a:90:f5:54:13:76:77:
2c:a6:90:2b:65:d5:ff:40:13:ba:77:67:14:36:ed:
13:32:9a:ae:aa:f4:99:37:a6:c6:10:6b:fd:18:fc:
74:28:54:28:65:00:d8:85:c0:f6:50:26:b3:e4:e8:
6e:d4:0a:7c:e6:c0:25:f4:49:b9:63:de:e4:21:6f:
d8:a5:89:56:c7:e2:ac:15:25:3d:d2:46:03:87:b4:
36:c9:34:03:7a:c2:11:0f:64:7a:f5:48:73:56:57:
f1:87:8c:32:4f:8e:02:51:86:96:4d:5a:b7:8e:2e:
1b:87:44:71:45:af:47:48:c3:f3:e5:2f:7a:ad:19:
f5:fd:64:7f:eb:a2:e1:76:64:07:66:02:1e:f0:6e:
35:b7:fd:ee:38:e8:28:2a:96:0a:c8:45:f2:ba:9a:
63:c2:6e:a2:cb:b6:f9:ba:32:ce:14:03:be:b1:e6:
05:04:30:05:ac:61:d2:f6:f7:e7:d4:a5:7a:6e:7f:
12:02:7a:e7:40:df:9f:a9:c2:aa:96:c0:32:94:46:
c8:87:db:dd:74:4c:01:8e:50:2f:ee:71:42:38:a0:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:87:55:A8:F4:CF:DB:E4:F9:0F:AA:4E:A1:59:91:24:18:ED:21
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7f:b9:61:d9:31:ab:bf:9f:a1:5d:de:2f:c3:93:70:29:d0:
20:db:20:8c:a3:29:85:44:e5:35:89:fe:d9:77:d5:19:68:76:
8a:6d:08:30:2c:4e:c7:c9:f1:40:8b:a9:d1:2b:82:4f:59:19:
4b:8a:8c:52:c2:72:5d:18:eb:62:74:72:27:a1:cb:c1:11:0a:
3e:2c:53:0c:0b:22:d0:62:b7:d7:c1:05:fe:08:d7:45:d0:b6:
67:d8:d0:21:81:32:35:0a:98:e3:de:5b:e2:ea:4f:67:20:88:
ce:1b:d4:36:d0:5c:85:b2:5f:d2:55:e9:79:a7:43:8c:39:29:
7d:5e:90:a7:3a:5c:c7:45:40:67:3a:06:0a:10:54:8a:dc:11:
c0:53:f7:79:30:97:ae:55:b7:13:77:17:4c:a3:5b:1a:87:3b:
a3:e1:3e:3b:34:a3:4b:75:1e:d1:11:c4:f3:32:fa:a7:c6:47:
1d:0c:26:d9:2a:82:d7:fb:b4:33:51:0a:08:ee:c4:04:4f:92:
c5:20:7e:d0:cb:89:df:07:85:3a:7b:4c:6e:10:a6:d5:f5:eb:
cb:35:64:fd:e9:80:18:09:dd:a3:dd:ff:3a:bf:da:71:5f:98:
0e:b1:db:56:88:d1:9f:df:bc:8b:8c:e5:32:12:49:d2:4c:d6:
c2:2f:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:33:24 2026 by rpki-client