Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
File: mIb0shUIFe2ng-fzz7m35Tzn2X8.mft (raw, json)
Hash identifier: IkfxdtkHH8JUnae0wCSOfRFfwEqgwx0vbhMhlVmzloA=
Subject key identifier: C9:DB:C6:91:89:3D:BA:CF:00:9C:94:32:08:BD:75:EC:03:AF:F4:43
Authority key identifier: 98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
Certificate issuer: /CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Certificate serial: 01A1114E585C31A1D57187CF9CB9038A0452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
Manifest number: 0168
Signing time: Tue 06 Oct 2026 13:01:49 +0000
Manifest this update: Tue 06 Oct 2026 13:01:49 +0000
Manifest next update: Wed 07 Oct 2026 13:01:49 +0000
Files and hashes: 1: E6Emgi8OOcxRYIN6dlPoick6xdc.roa (hash: b17vqDW+cXgHkIk7rlMgxV1W0X2t1+N9MIRFO/oaFGs=)
2: cJhwzvA4MmD9szzdzlqYrmM_RIk.roa (hash: 0CQ7EyVMolzZdZkEGpCpBtQGO5aHXkTTya7T0UCv1hY=)
3: mIb0shUIFe2ng-fzz7m35Tzn2X8.crl (hash: Yc7WyZS7bh26MOp9eJkvJC4zBio0bwjE1LkagpChqgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4e:58:5c:31:a1:d5:71:87:cf:9c:b9:03:8a:04:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Validity
Not Before: Oct 6 13:01:49 2026 GMT
Not After : Oct 7 13:01:49 2026 GMT
Subject: CN=c9dbc691893dbacf009c943208bd75ec03aff443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:7b:eb:ef:d3:f0:ae:06:59:04:fa:c8:32:
cf:4f:9c:4a:41:2c:08:06:d1:3f:aa:54:e7:60:d4:
86:d3:31:d8:a5:78:49:2a:60:13:34:fd:de:ec:d9:
4e:38:61:6e:45:2a:37:b3:97:9a:bd:76:8a:93:5a:
69:c6:41:af:b7:e7:d8:ba:4e:44:76:59:8d:3b:a9:
13:d4:b3:3c:d2:10:5c:f2:da:36:1d:57:6f:63:31:
ef:c1:e7:5e:5c:58:cb:89:c5:b9:7c:c2:13:be:58:
00:5a:d8:92:e2:aa:c5:b3:85:4b:37:51:50:5a:20:
f7:ed:73:91:4b:2c:ce:88:12:49:27:f9:be:9b:a6:
2f:0c:e7:94:4c:3b:9a:9c:00:62:47:1d:69:b2:d9:
86:03:2e:b9:ac:6a:83:e0:c2:b2:06:e9:b4:bd:c0:
12:02:68:ec:bf:91:3f:7b:48:4a:49:87:03:81:3a:
84:65:4e:06:92:bd:87:c1:f4:d9:9e:06:d3:3f:0b:
dd:0d:e0:5d:c8:24:0d:09:e9:51:8d:23:9c:91:49:
03:93:5d:7d:9f:9d:3f:bb:99:a7:66:94:c7:d5:bd:
f1:a5:26:6e:a3:3d:71:12:a9:99:27:ba:f0:47:9c:
3b:d4:77:a1:6e:0a:bb:ec:d8:2a:e5:50:88:91:88:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DB:C6:91:89:3D:BA:CF:00:9C:94:32:08:BD:75:EC:03:AF:F4:43
X509v3 Authority Key Identifier:
keyid:98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:42:cf:4b:cf:9d:4d:5b:52:60:8d:0b:f5:ce:8d:a2:81:e1:
36:d1:9c:9b:f2:34:f7:5a:2f:5e:cd:e2:08:0d:69:a9:15:5b:
73:34:b4:9f:a1:45:62:c0:92:32:fe:10:b4:f2:ff:a9:31:de:
43:78:99:70:e3:22:94:f2:15:68:1b:05:49:f9:d1:a5:99:d4:
18:89:63:f2:4c:1c:e6:13:c1:28:25:d1:3f:b4:e5:98:69:bc:
c8:57:75:fb:16:95:0f:c9:e6:66:60:2b:6f:77:4b:6c:3d:2b:
52:35:24:fe:08:c9:d7:77:7e:89:e0:9a:5a:bf:0c:9e:87:e3:
85:b3:66:52:7d:4e:d6:40:3d:d4:7e:34:62:61:6e:ca:30:1a:
50:89:34:09:72:50:5a:bf:57:d7:25:48:52:42:77:c7:14:5f:
c8:51:be:c0:e6:33:45:b0:0f:ed:a2:c1:dd:1b:04:2e:81:74:
30:51:2f:91:19:c5:33:e3:4d:df:89:4f:bf:4b:15:bc:1c:e7:
e9:87:e7:b4:4f:f2:4e:33:05:d5:41:14:cc:e9:19:ec:d4:7b:
18:2a:50:70:e5:3e:07:5e:90:b2:7a:a5:e9:40:e2:75:fd:bc:
2b:39:b8:3a:44:c5:49:01:f9:4b:46:e3:ae:38:e0:04:1c:12:
6a:ef:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:19:22 2026 by rpki-client