Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: 1RTNlOWMZce1ewcuC2ysy7ZrOg4DG5HBekq6tmK+ldc=
Subject key identifier: 8C:BB:28:BF:27:64:76:84:4B:AD:1B:09:37:A7:45:06:DC:20:75:99
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 01A0E399C19BB70758E944482DD981A8E7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 16:01:39 +0000
Manifest this update: Sun 27 Sep 2026 16:01:39 +0000
Manifest next update: Mon 28 Sep 2026 16:01:39 +0000
Files and hashes: 1: 1-VG2zZYo2Xw41U8d-T9E0vuUf_0.roa (hash: Fzs5u72SRgE/o/nqzBGPWFy7PHtNgvPIh7SZEq3fBpU=)
2: VfXPQasJj4AFxPhWN1WSOyUzOyI.asa (hash: zvfirguBB2tgFEnfYrOLxHAMXrIGb3V+ijoN5TJT8+0=)
3: WSoyFsUkPtTH5GPtVnmww05vFh0.roa (hash: xtuU58lDieJuv/Yy7w3S0c+KdkmwGfK0iLB0R2OEp6Y=)
4: hh--phRiIrQ8JTZgm27UnTphjNY.asa (hash: W1NuGQLiQb/ix/3Fe06njYJ962P4U8xR23zdUbQ59zo=)
5: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: HyzNugfH3xwp890s6T9K5aZMRMAuB6fv/LhLLzMa4Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:c1:9b:b7:07:58:e9:44:48:2d:d9:81:a8:e7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Sep 27 16:01:39 2026 GMT
Not After : Sep 28 16:01:39 2026 GMT
Subject: CN=8cbb28bf276476844bad1b0937a74506dc207599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:ea:11:ca:22:65:39:11:75:87:30:70:93:
13:e4:2b:73:6e:38:82:cf:3d:f3:11:55:27:79:12:
1b:d3:65:87:2c:ca:40:1c:3b:37:c3:6d:84:27:3a:
39:e0:5b:40:b6:95:68:d1:d7:cb:aa:f9:12:27:da:
05:5e:7f:68:d9:94:31:ff:ad:c6:3e:41:fb:5d:c8:
4d:62:02:6a:b3:a5:29:be:2b:1c:d1:70:71:a3:52:
37:06:32:d6:e4:e1:49:66:81:ec:fd:18:b0:19:40:
ef:34:d8:04:1f:70:3a:74:85:49:78:9c:a3:35:24:
32:b2:5a:58:b9:28:36:68:c4:6e:d6:ba:d9:5e:a6:
19:65:b1:19:45:14:ec:ab:8d:a8:d4:67:48:27:10:
9f:82:d3:7e:63:c8:f5:f0:59:51:2d:86:f1:af:8e:
6a:1e:cb:c9:24:bb:ab:d2:34:27:e9:e6:05:f7:19:
33:27:b0:3f:3c:a4:0e:36:f5:77:7a:0d:a1:b0:67:
54:e7:dd:7b:bb:01:bd:bc:ec:b7:85:72:e2:1b:66:
b3:63:b0:86:6a:1b:5e:b0:cf:ba:4d:94:0c:d5:d0:
78:08:cf:6b:3f:d7:61:6d:c4:03:fe:8f:76:f5:86:
d6:1c:a1:7e:a2:30:cf:1e:b5:73:77:03:de:41:ec:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:28:BF:27:64:76:84:4B:AD:1B:09:37:A7:45:06:DC:20:75:99
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:84:2d:4b:58:01:c5:be:9b:06:dd:26:11:90:3f:d5:0c:0a:
f8:9e:8a:10:a0:46:09:ce:36:0b:4f:53:3b:f0:5d:84:f0:85:
80:a9:c7:90:ec:21:8f:b5:8d:25:eb:52:c6:d3:03:be:05:ee:
e5:9a:21:c7:9a:a6:f5:9e:10:8d:b2:4c:d2:8f:a0:25:88:ed:
33:07:06:1f:22:d3:b4:7f:a1:34:69:cc:4c:ff:19:63:e8:12:
ea:3e:b7:02:d5:46:05:b1:8c:9e:e2:cc:c7:d2:fc:38:d4:d9:
43:ad:6f:a5:fb:6f:e5:5a:3d:31:b5:37:16:e5:21:4c:ab:51:
2d:5d:a3:f5:7d:20:92:a2:46:33:90:f9:a5:85:c8:b3:a0:6c:
f2:18:25:be:bb:63:f5:4d:e6:aa:99:c3:46:2b:c0:c6:e1:a7:
b9:95:9e:53:a1:5c:71:48:58:ec:2c:10:5c:8f:cf:c6:bc:3c:
ac:ea:bb:bb:50:27:f1:f0:a6:88:69:ad:3d:b7:47:a9:90:36:
b9:9b:d8:fc:7c:df:cb:0f:5e:d8:7a:e8:e8:56:3b:2a:4f:43:
06:25:93:68:da:a3:9b:5d:42:3b:95:8b:09:86:19:10:30:1e:
78:d3:74:d0:7b:64:5f:4e:1e:5b:e6:59:c5:d9:b9:1b:e3:f1:
34:e1:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:43:10 2026 by rpki-client