Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: OLa+dBhBf4XkKQU5HDOShk+vDop5P2Fy7+RYkBaBRGs=
Subject key identifier: 33:00:6B:88:5D:7D:2F:3F:E5:61:85:5D:E0:72:54:17:42:B8:56:45
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 01A0E32B4E212BD7DA9A79A342BE9809E07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 14:01:01 +0000
Manifest this update: Sun 27 Sep 2026 14:01:01 +0000
Manifest next update: Mon 28 Sep 2026 14:01:01 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: Bpg4Fi6r64ygcfcxwISKXv7qGHNcgbu0MQF6H89alm0=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:4e:21:2b:d7:da:9a:79:a3:42:be:98:09:e0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Sep 27 14:01:01 2026 GMT
Not After : Sep 28 14:01:01 2026 GMT
Subject: CN=33006b885d7d2f3fe561855de072541742b85645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:05:4f:fb:98:21:68:6a:a8:7a:c5:39:06:
83:4b:9a:77:54:a2:a6:5f:3b:e9:ab:db:a0:2b:0a:
56:8b:a8:19:d0:dd:0e:aa:04:1e:b6:dd:e5:24:ea:
04:e1:f2:af:aa:29:61:36:65:00:1f:3e:d8:69:ea:
94:17:2d:a5:2c:2d:38:a1:3a:76:d3:db:97:00:db:
fe:8c:b0:32:95:62:77:c1:c1:52:b8:92:fe:14:6c:
99:10:bd:13:7c:e0:15:49:93:cd:ab:4b:2e:a7:2c:
c0:f1:c9:ae:05:c9:6c:6f:15:43:92:99:df:54:00:
97:8c:e2:79:70:c1:3b:50:47:be:c9:e3:f2:b2:06:
3f:82:dc:3e:d3:e1:19:cc:69:4b:71:57:4b:84:43:
0c:d6:21:77:42:34:cc:27:22:6c:6b:74:f1:52:51:
d8:ce:aa:77:9b:c2:63:07:f1:2b:38:13:01:f1:6d:
24:48:e5:d6:5d:2d:2c:36:8b:ff:00:15:c2:c8:0e:
dc:2c:36:9b:c6:4a:a9:7f:24:09:77:56:e5:b7:2e:
25:48:84:03:5c:98:8f:8f:d8:cb:f7:69:3e:32:14:
6f:82:c5:23:70:e2:59:02:e4:a4:3f:dd:d2:51:ae:
6c:fc:ad:cb:be:94:1f:12:90:57:d3:b9:6e:d6:fc:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:6B:88:5D:7D:2F:3F:E5:61:85:5D:E0:72:54:17:42:B8:56:45
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:73:fc:76:fd:cc:89:9b:5e:4c:ee:64:0c:b6:be:26:cb:13:
36:f0:3e:f7:bf:6d:2b:eb:f6:d8:97:de:c8:cb:06:7c:bc:a5:
6b:91:38:86:bf:20:8d:fe:28:84:23:f3:3e:f4:00:f6:89:97:
69:db:ca:1c:ea:54:db:ae:bc:55:df:2d:c1:31:1d:bb:4e:af:
af:9f:7e:7f:be:2c:78:32:f0:96:63:f9:26:29:84:7b:16:83:
02:be:b5:42:30:fc:b3:b5:3f:12:b3:e8:9a:f7:15:ce:6f:ca:
5e:2c:ef:34:78:c1:2a:9b:a1:22:87:75:0d:7c:52:1d:50:8a:
29:fd:a4:48:79:2e:fc:03:f4:af:cb:79:8b:c6:90:bc:20:50:
cf:38:e9:66:66:1b:06:ab:52:d1:ef:45:ae:55:97:2d:5a:9b:
dc:12:40:b0:e3:bb:d2:59:a0:2d:41:ff:9a:8a:76:d3:c3:fb:
4a:73:4d:ba:c9:62:66:a1:d4:b0:b7:30:31:4a:c8:8e:11:22:
12:fd:8c:8b:4e:22:aa:09:f0:e2:06:1c:bc:e3:0c:a1:df:b6:
a4:e3:35:ce:a3:41:9b:b6:3f:bd:ce:ed:df:5b:e6:e2:77:f5:
a3:d4:28:2f:97:36:62:44:12:ca:17:cb:49:3b:b9:86:90:49:
ba:11:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:43:39 2026 by rpki-client