Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
File: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft (raw, json)
Hash identifier: brq5p+BNCuzemygRLKO0BoH9vVtKUDqsBOQVCIG3HFQ=
Subject key identifier: 8C:17:79:38:74:58:24:BE:C7:12:71:D0:93:E9:66:60:09:C0:F5:44
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 01A1287A6F0C73094CBD92164D19DA6912F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
Manifest number: 0113
Signing time: Sun 11 Oct 2026 01:01:14 +0000
Manifest this update: Sun 11 Oct 2026 01:01:14 +0000
Manifest next update: Mon 12 Oct 2026 01:01:14 +0000
Files and hashes: 1: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (hash: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=)
2: 2LF9uim0YdDpGegCa61UauWuWfA.roa (hash: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=)
3: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl (hash: 9Gv3wYzR7sOHgsLjI9tdSTL3BmMGm8kfN/G+12FVbAI=)
4: LsSQmC_-rCiQYaygyKvWlRY8mCY.roa (hash: oBqqVFOWNVmG9s/k9r52SWz1AmcmC9z1tPLhK+7cnj8=)
5: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (hash: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=)
6: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (hash: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=)
7: d9UMor1VyAKI95wbo0VML8JqXA0.roa (hash: Ue762QdnWxcT+gtVI8j0lIqvVnpOu+dK95cax6FcHFw=)
8: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (hash: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:6f:0c:73:09:4c:bd:92:16:4d:19:da:69:12:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Oct 11 01:01:14 2026 GMT
Not After : Oct 12 01:01:14 2026 GMT
Subject: CN=8c177938745824bec71271d093e9666009c0f544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:29:ef:b0:cd:f2:1d:55:8a:82:00:ba:b9:
a6:bb:c0:d2:e1:66:45:29:dc:48:11:87:3c:8d:69:
44:b1:ff:1b:76:db:a7:14:49:3d:73:a5:9c:7c:35:
cc:26:b1:ba:c6:3c:19:f5:6b:1d:f5:6a:ad:09:91:
60:c8:9e:8e:56:51:34:e4:59:c3:df:a1:3e:6b:4c:
d0:99:b8:f8:74:f8:73:d4:19:ae:cd:56:02:4b:c0:
dd:ca:4a:e5:45:a0:4b:b3:75:4c:6b:5a:08:be:9d:
8b:3c:65:91:13:16:75:bf:ae:b6:66:09:6b:45:76:
c5:d9:56:8e:a0:90:d0:b8:21:eb:29:83:17:3c:4b:
f7:e4:66:07:ef:bc:b1:6a:96:75:5d:00:b4:78:87:
89:53:1d:8d:be:7f:c3:5f:9c:7e:6f:b0:11:33:35:
97:7d:a4:62:36:7c:61:78:be:6d:79:66:74:15:fb:
bb:c2:d6:e7:f1:8a:7c:d1:25:36:b0:08:f2:08:d9:
ed:ea:5c:60:ca:82:d3:42:9b:eb:51:11:18:35:52:
e2:d8:d5:02:5f:87:7f:64:9d:b7:84:10:0f:17:69:
14:d0:21:91:97:4b:6a:b1:b0:eb:e9:fd:42:77:d0:
3e:39:38:e7:d1:81:8c:35:59:c2:ba:95:c2:11:14:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:79:38:74:58:24:BE:C7:12:71:D0:93:E9:66:60:09:C0:F5:44
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d8:44:dd:a2:a7:fa:24:52:42:8d:03:2b:fa:e6:3d:1e:e1:
c5:78:8d:30:f6:e5:38:ec:99:62:4b:00:6f:d7:f3:76:f0:cd:
42:8e:ba:a8:db:ea:7a:48:ab:94:f5:84:8e:80:68:b2:c4:fc:
3b:98:3d:2e:8a:59:5f:39:f2:10:b5:3e:be:88:d5:f5:0f:dc:
de:34:f8:45:9a:fa:8a:1a:87:4b:c9:2b:bc:70:7c:f4:c6:89:
8b:2b:f5:27:ef:32:48:c6:47:a9:b3:02:24:da:80:d7:10:29:
df:1f:fc:e3:ae:20:2f:8c:8b:4d:37:cc:7c:1c:c3:4f:77:17:
bc:ad:64:43:06:1d:34:35:87:df:a5:a6:24:9e:f6:05:c6:dc:
76:44:6d:ac:f8:64:cd:ca:71:6f:15:56:f6:14:f8:8c:70:66:
2b:83:e7:ee:0e:7f:91:68:66:9e:b4:32:d3:02:16:70:68:46:
24:48:58:ff:7c:d9:8f:aa:cb:bb:27:c2:dc:28:6d:35:ca:11:
08:0f:dc:18:35:43:85:68:af:dc:5a:d0:51:79:48:ee:cb:2e:
d6:b1:f6:77:95:d9:8f:b2:1e:67:4e:22:32:d5:34:97:15:02:
fe:23:49:22:fd:b4:ee:5c:0b:66:c4:c4:b4:09:05:12:fa:e6:
0d:7f:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:55:40 2026 by rpki-client