Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
File: iG3awir3vGlEuLJjKkuqxSLJIH4.mft (raw, json)
Hash identifier: dJGQimzkeV7bXOifEvf8xjzDSGu5zFlT8cNAo2CWP4Q=
Subject key identifier: 60:DC:93:D1:55:15:51:9B:19:A6:3A:F6:02:90:E1:B6:86:31:E1:02
Authority key identifier: 88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
Certificate issuer: /CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Certificate serial: 01A0ED0B00327C5AAF87DD50AC7E62F76712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:01:56 +0000
Manifest this update: Tue 29 Sep 2026 12:01:56 +0000
Manifest next update: Wed 30 Sep 2026 12:01:56 +0000
Files and hashes: 1: 1X5LpoPkiiIfqJJshC34MniOMI4.roa (hash: UQKIVsiFeFuAnLSpr7xUCS9KnEW9kjaFk6PUq4VbMUQ=)
2: iG3awir3vGlEuLJjKkuqxSLJIH4.crl (hash: StTkqNjuOimnfVj+PxPFMtI88v5c9Vef3LehQcUT8eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:00:32:7c:5a:af:87:dd:50:ac:7e:62:f7:67:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Validity
Not Before: Sep 29 12:01:56 2026 GMT
Not After : Sep 30 12:01:56 2026 GMT
Subject: CN=60dc93d15515519b19a63af60290e1b68631e102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:0d:4f:20:6f:b8:42:61:53:20:b0:2d:0d:
42:05:ef:96:f6:0d:74:9b:d1:7e:93:d1:25:7e:e0:
e3:f2:a8:b2:e6:61:e6:64:95:5f:4f:36:31:a1:e6:
14:43:0d:1f:2f:e9:7d:82:1e:77:16:b9:11:e0:54:
4c:4e:24:e9:c0:24:dd:8c:10:c6:3b:39:fd:72:b5:
c2:1e:57:d9:b1:94:14:53:5d:b7:ad:93:10:eb:8a:
c3:c6:27:37:36:36:1b:f7:81:c5:13:e3:3f:df:77:
f5:92:1b:31:2b:1f:b4:ef:ac:1f:8a:50:01:1c:a4:
f3:20:1f:2d:bb:89:71:16:b5:73:f8:0d:5a:01:90:
c9:00:dc:97:58:3f:6b:05:a8:0a:33:08:de:a6:f0:
51:2e:2e:31:69:bc:d7:c9:9f:0b:66:39:f1:ba:5d:
a2:85:ae:2f:8d:46:2b:50:c4:7d:2b:7c:4d:bf:1c:
c7:6b:88:ec:22:c3:71:02:14:91:27:b1:c0:78:46:
54:72:92:13:09:2c:de:96:14:d0:fa:36:51:ac:b8:
61:32:8f:3a:36:4a:af:12:da:af:ae:3e:87:1c:59:
8b:de:2c:44:c6:49:4d:62:9d:07:1b:4d:da:9f:ca:
a3:0a:e2:6e:ac:ca:bb:a1:2c:f0:d7:e5:9b:e1:81:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:93:D1:55:15:51:9B:19:A6:3A:F6:02:90:E1:B6:86:31:E1:02
X509v3 Authority Key Identifier:
keyid:88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:db:85:35:42:c9:79:90:c8:06:69:d7:63:d3:67:d9:a5:0f:
92:b6:24:9e:8b:24:84:00:96:e9:68:cd:f9:fc:0d:59:35:5a:
5e:88:1e:1d:da:e4:a8:d7:e9:51:12:f6:31:be:08:32:db:87:
7f:1f:6e:ed:12:af:6b:e6:95:14:0a:db:74:3b:ff:c4:c5:6d:
8a:6a:94:df:3b:d7:b1:75:a4:f7:77:56:bd:e2:0e:08:6f:aa:
d4:ea:55:a5:64:69:55:6d:27:92:a6:b4:66:11:43:b5:a5:77:
87:89:fb:ff:9b:15:d5:fe:87:8a:46:d6:68:c7:73:20:aa:49:
c2:fe:b0:87:c5:f2:7f:c1:80:31:b2:45:38:16:8b:99:05:bf:
3d:ed:1f:85:5d:43:03:89:62:ce:62:35:19:e3:f3:38:c8:66:
4d:0c:5a:c3:35:c8:a1:72:66:89:e3:39:bb:61:63:c7:3f:b3:
d3:00:26:54:66:7b:86:06:d3:ef:25:cb:45:6d:06:ee:eb:04:
08:64:85:a8:2c:a6:0d:5f:da:0a:80:d2:7c:79:be:b6:af:75:
bc:44:d4:12:0f:85:00:ba:9f:8f:1f:98:67:bf:a2:71:70:ed:
36:67:45:13:86:64:79:62:ce:22:9d:c8:8f:ae:ee:2b:d3:90:
6e:0b:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:00:36 2026 by rpki-client