Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: Ou0g+SGf+i9LI2sPRXo/TREgB7hs2m/dw8dW/qdV/pU=
Subject key identifier: DC:9E:D9:1A:CB:07:AD:E2:05:CF:FF:19:B6:DB:E4:72:76:8B:72:05
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 01A0D2DDFB0E5157C3342FF0EC4A2587A8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 10:02:38 +0000
Manifest this update: Thu 24 Sep 2026 10:02:38 +0000
Manifest next update: Fri 25 Sep 2026 10:02:38 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: ma+8G9fDChQbo2eahYF9dk56kgyeHRJ3eV6et/ONHuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:fb:0e:51:57:c3:34:2f:f0:ec:4a:25:87:a8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Sep 24 10:02:38 2026 GMT
Not After : Sep 25 10:02:38 2026 GMT
Subject: CN=dc9ed91acb07ade205cfff19b6dbe472768b7205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:42:1a:c9:ba:d0:0e:6a:29:fb:da:95:e0:
14:76:8c:30:74:0f:f6:e4:a8:c2:d4:32:8d:f2:81:
ff:6d:e2:e2:d5:11:22:05:e5:e8:02:a1:25:b6:44:
44:da:ef:26:c1:7e:cf:d0:ca:ac:b1:90:0f:b1:13:
14:5f:f3:f2:dd:94:d4:00:50:18:28:36:3a:2c:5e:
86:96:f4:50:e5:ec:1b:70:74:90:75:d7:c4:33:db:
24:1d:f1:d6:f5:0d:1f:95:96:a8:57:e0:9a:02:02:
7a:19:e8:6a:49:d5:99:28:b6:cc:f7:2d:c5:2e:b9:
41:4a:77:b3:45:20:7f:90:be:46:46:0b:36:3b:a4:
52:3c:87:58:34:bd:23:3f:d5:19:59:e9:9a:4b:16:
c3:08:cf:bb:49:74:37:67:6e:be:b7:34:c8:8b:81:
98:bd:ab:62:20:bb:df:a6:e7:d3:c3:4c:90:0d:d0:
33:60:8e:7b:6e:68:87:84:bc:19:4e:47:f9:50:1b:
bd:cf:7e:b8:48:4b:c3:08:08:69:0c:11:a8:c6:46:
40:26:2a:de:d9:44:51:51:27:ab:77:06:62:ed:90:
32:e6:b9:07:99:5c:9e:73:f1:02:42:02:43:51:0a:
75:3e:f6:f0:77:b8:81:bd:11:f5:9b:93:c4:cc:2e:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:D9:1A:CB:07:AD:E2:05:CF:FF:19:B6:DB:E4:72:76:8B:72:05
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:45:23:a9:34:70:6d:85:a1:cd:32:89:f7:61:d7:c0:3e:1a:
87:63:eb:0a:a4:f2:1f:34:bd:d2:66:ad:4e:63:82:d0:ca:c0:
0e:af:3e:1a:7f:89:ff:51:cf:3d:24:51:2c:3a:e5:10:5b:ae:
f6:f6:b9:c7:e2:c7:73:b6:db:97:9c:e6:80:09:b2:5d:c9:99:
c8:04:41:2b:a0:b3:a4:6d:d0:32:6c:c5:ef:56:ab:3c:9e:c7:
75:9a:c2:88:76:dc:6b:19:9a:d4:14:ee:6d:15:12:ab:ec:69:
cc:50:09:16:7a:d7:57:95:7d:5f:1c:1d:85:bf:f8:58:bc:49:
0b:33:d9:d4:8e:70:d0:62:ee:f6:69:b5:70:ba:a8:9c:3f:31:
60:cb:c1:c8:e2:04:b4:5b:e8:34:18:26:db:c7:f9:2a:b3:1e:
75:d1:ec:35:bc:6b:80:d5:a7:7b:66:59:87:47:70:07:1c:f2:
af:49:b1:79:2f:19:e3:2e:70:86:70:63:b0:db:f5:48:5e:ac:
02:13:ac:5e:56:fa:79:13:99:bc:40:b9:c6:a6:02:74:ac:87:
ad:7c:ff:f0:c8:03:f2:a1:6e:dd:72:c0:7d:39:b7:2b:8d:3f:
1d:3e:d8:3f:ed:ae:e0:f3:4a:81:69:af:41:14:85:4c:64:70:
f8:89:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:18:20 2026 by rpki-client