Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
File: iHX9AcLoxTbR1lDyWXd2AFSl70E.mft (raw, json)
Hash identifier: yw8tU5YpnSA8WQUeryPfGkEDFIUPIsxnw9DU+HZ4uIs=
Subject key identifier: 98:0D:5C:AA:15:94:B2:16:1E:BD:8A:9D:89:4E:9A:B1:40:02:0F:39
Authority key identifier: 88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
Certificate issuer: /CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Certificate serial: 01A0EB537296BE1B28460CEF4EE54B634475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
Manifest number: 0128
Signing time: Tue 29 Sep 2026 04:01:49 +0000
Manifest this update: Tue 29 Sep 2026 04:01:49 +0000
Manifest next update: Wed 30 Sep 2026 04:01:49 +0000
Files and hashes: 1: bX62eycaxQqqmzCrVbRnmBhI_fQ.asa (hash: Xm5/UoBRk/jihZRblRqnYsjlOIOktCKA69PAH+25ryw=)
2: iHX9AcLoxTbR1lDyWXd2AFSl70E.crl (hash: yZux+f8LaXL2NPQuVL2tAS5XzislQX4+orFNbF0jh1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:72:96:be:1b:28:46:0c:ef:4e:e5:4b:63:44:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Validity
Not Before: Sep 29 04:01:49 2026 GMT
Not After : Sep 30 04:01:49 2026 GMT
Subject: CN=980d5caa1594b2161ebd8a9d894e9ab140020f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:13:f2:25:73:a7:15:88:66:28:26:47:28:
a3:94:a9:99:e3:95:68:a9:d8:a3:02:24:c0:a7:c6:
9a:74:b4:53:f9:6a:33:19:f3:a8:a3:c0:d7:d1:30:
24:f6:64:36:f3:06:6d:71:36:9e:0b:31:be:55:82:
33:90:77:46:27:cf:96:8f:51:86:0c:1b:64:f5:20:
36:c5:6e:6c:0e:12:3e:07:9d:ac:eb:0e:49:32:de:
1f:0a:61:1e:89:79:e0:e4:aa:d7:fb:33:16:bb:df:
86:e8:6d:31:9b:4b:23:b2:81:d3:1b:df:1d:0b:28:
30:50:96:9c:21:34:08:37:69:2a:03:a2:83:ab:ee:
a0:4e:77:fd:e6:1a:b1:bb:c3:2e:b1:fe:ea:9b:43:
02:23:3e:0f:53:34:d1:fe:5c:25:04:2b:13:7b:56:
09:d0:37:51:cb:21:89:46:86:d8:f6:32:99:87:9d:
1b:55:d6:f0:6d:a7:03:2f:8f:49:ad:ee:70:2b:38:
aa:85:b8:b7:ae:2b:23:c7:e2:81:04:6c:c6:16:67:
17:ef:c5:80:92:a2:03:ca:31:37:2f:36:39:f1:1b:
92:63:33:e8:0b:b0:26:63:6c:74:b5:7c:1e:8d:3b:
67:07:44:47:19:1a:f1:d1:20:82:37:8e:92:0e:50:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:5C:AA:15:94:B2:16:1E:BD:8A:9D:89:4E:9A:B1:40:02:0F:39
X509v3 Authority Key Identifier:
keyid:88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d6:4c:46:ec:48:0a:d5:90:24:e1:4f:c7:54:05:8f:c2:bc:
1a:ec:09:93:66:2f:5e:02:84:1b:8b:7e:ed:5e:9b:ac:85:5c:
bb:8a:27:40:83:21:df:41:38:23:68:f3:ea:1c:2d:24:09:20:
28:92:69:7f:66:95:71:1e:00:a7:38:ca:81:a6:53:38:33:ba:
ee:d5:05:e9:a5:c4:72:9d:8e:76:83:f3:25:c8:3c:8b:78:e0:
03:cd:64:e3:4a:8b:fe:70:f4:ae:de:48:fd:3b:93:e0:5f:78:
0f:0f:5d:04:a5:5e:70:02:0d:d8:70:d2:a6:3e:ad:fc:74:1b:
f9:69:62:39:e6:b2:b7:c3:e2:80:85:33:af:8a:6a:1b:ae:f5:
17:de:43:3e:11:cd:9c:3f:75:a4:60:96:9b:f8:a3:1a:bf:8a:
9b:3e:0a:c6:a3:30:45:8b:41:18:6a:60:46:5a:7e:a7:87:f8:
bf:07:69:26:f5:67:d9:49:83:68:36:7f:39:f7:84:d6:c8:42:
81:f9:d6:0e:f7:77:59:3b:6d:01:ed:e8:f1:1c:20:b1:85:43:
8e:4a:91:15:c3:eb:26:91:f1:2e:44:05:54:03:74:ff:fd:5b:
4c:49:1d:1d:6b:1c:de:52:bd:89:9c:64:89:ff:54:b3:52:7a:
20:59:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 07:04:20 2026 by rpki-client