Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: Lwmry5XcBTyKbvWdu2KRU+8Vxu+t971R34meBigpWHg=
Subject key identifier: 45:2F:20:20:5B:D6:DA:63:6A:BE:16:1D:31:61:22:42:42:E1:EA:63
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 01A0F11E935057F553523954C065517DF3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 1A37
Signing time: Wed 30 Sep 2026 07:01:47 +0000
Manifest this update: Wed 30 Sep 2026 07:01:47 +0000
Manifest next update: Thu 01 Oct 2026 07:01:47 +0000
Files and hashes: 1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: aa9MD0nQD4SyFMiA9pPsFAEk9u0kxlhOslGQBixeVbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:93:50:57:f5:53:52:39:54:c0:65:51:7d:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Sep 30 07:01:47 2026 GMT
Not After : Oct 1 07:01:47 2026 GMT
Subject: CN=452f20205bd6da636abe161d3161224242e1ea63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:75:c2:79:88:be:ef:0f:30:a9:e1:60:f1:
af:d7:f7:2d:c0:0d:2a:8d:8f:aa:05:17:32:9f:7d:
a9:b6:db:92:2e:ed:51:6a:d0:de:13:62:e5:55:16:
4e:a8:24:8b:f2:00:f7:3d:a4:2b:f6:22:cd:c0:0c:
75:c5:fd:cf:eb:88:72:5d:bf:97:36:d5:bf:39:60:
7e:ae:3c:27:ba:52:a1:7d:0e:4c:53:9f:66:5d:d7:
eb:ca:0c:d7:33:0a:79:97:aa:41:2d:ba:a7:c6:c8:
03:f3:1c:84:ac:67:80:62:dd:5e:d0:d1:6a:4c:b2:
40:a0:42:ef:a7:43:38:32:79:5e:e9:f1:b3:e1:47:
76:77:81:84:e8:32:87:80:f5:f2:f4:a9:9d:fd:0c:
c7:08:a6:cb:2f:77:dd:1e:ba:23:1c:fb:18:b2:7d:
ea:c1:6f:3d:d2:8b:02:e0:77:4c:e3:78:c6:fa:7d:
84:aa:ea:1c:8c:b4:6a:71:cc:d6:58:46:4e:cb:70:
aa:a6:50:ef:b9:d9:51:7a:c6:0a:6c:8e:94:e4:2d:
20:f4:07:e2:0b:07:ce:42:b8:33:79:a4:f1:b8:50:
13:b4:94:07:52:9e:c1:2b:67:43:df:38:23:50:17:
f9:7d:0a:d7:89:10:11:80:15:0d:8b:ea:ba:60:6d:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2F:20:20:5B:D6:DA:63:6A:BE:16:1D:31:61:22:42:42:E1:EA:63
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cd:68:77:ce:13:09:b7:07:71:cd:94:07:be:b4:10:9c:7e:
33:bf:08:37:45:ab:15:ec:af:0b:b9:22:ab:73:c6:8f:6c:57:
6b:9e:34:92:16:bd:fa:9d:6b:bd:93:b5:f9:6e:35:cc:33:c3:
6e:84:0e:85:3b:f6:e9:8b:8b:2c:ad:63:58:76:18:03:1d:02:
68:1d:84:bc:31:97:f7:a5:0f:85:eb:8f:51:3f:32:ce:b9:32:
4b:45:06:14:25:d4:8e:c3:9f:ae:e6:67:cd:00:99:1c:88:df:
b5:d0:d7:2e:48:2a:52:ba:e8:3a:8c:c9:53:71:87:d0:f0:d3:
f9:06:58:5e:a9:2b:27:4a:0c:a0:d6:b1:33:f4:2e:32:a4:2d:
2c:57:c4:25:8d:16:be:e5:06:a7:43:86:d5:79:27:a8:cf:f6:
f4:dd:ef:e5:29:d5:77:55:f2:3f:5b:5f:b8:c4:b3:9e:f6:68:
93:04:9d:94:43:75:7e:06:c1:61:44:6a:6b:9d:59:cf:c7:f4:
fb:39:13:04:cc:f0:a6:ec:6c:9f:d3:b2:4d:d0:41:fd:59:e7:
71:75:f8:a8:2a:02:8b:37:5e:91:11:2a:05:2c:74:1f:3d:44:
89:70:c4:58:d8:c9:11:95:df:d9:8b:73:e1:08:a6:82:c3:23:
a8:2f:75:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxHpNQV/VTUjlUwGVRffP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWVkMmNmZjhjZTMxYjMzNGY4M2EwYjMwNWZlZWYwMWQ3
MWRhNzUwHhcNMjYwOTMwMDcwMTQ3WhcNMjYxMDAxMDcwMTQ3WjAzMTEwLwYDVQQD
Eyg0NTJmMjAyMDViZDZkYTYzNmFiZTE2MWQzMTYxMjI0MjQyZTFlYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseN1wnmIvu8PMKnhYPGv1/ctwA0q
jY+qBRcyn32pttuSLu1RatDeE2LlVRZOqCSL8gD3PaQr9iLNwAx1xf3P64hyXb+X
NtW/OWB+rjwnulKhfQ5MU59mXdfrygzXMwp5l6pBLbqnxsgD8xyErGeAYt1e0NFq
TLJAoELvp0M4Mnle6fGz4Ud2d4GE6DKHgPXy9Kmd/QzHCKbLL3fdHrojHPsYsn3q
wW890osC4HdM43jG+n2EquocjLRqcczWWEZOy3CqplDvudlResYKbI6U5C0g9Afi
CwfOQrgzeaTxuFATtJQHUp7BK2dD3zgjUBf5fQrXiRARgBUNi+q6YG07zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUvICBb1tpjar4WHTFhIkJC4epjMB8GA1UdIwQY
MBaAFImu0s/4zjGzNPg6CzBf7vAdcdp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYt
ZmJlOGJjNWEyOWZhLzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYtZmJlOGJjNWEyOWZh
LzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAM1od84T
CbcHcc2UB760EJx+M78IN0WrFeyvC7kiq3PGj2xXa540kha9+p1rvZO1+W41zDPD
boQOhTv26YuLLK1jWHYYAx0CaB2EvDGX96UPheuPUT8yzrkyS0UGFCXUjsOfruZn
zQCZHIjftdDXLkgqUrroOozJU3GH0PDT+QZYXqkrJ0oMoNaxM/QuMqQtLFfEJY0W
vuUGp0OG1XknqM/29N3v5SnVd1XyP1tfuMSznvZokwSdlEN1fgbBYURqa51Zz8f0
+zkTBMzwpuxsn9OyTdBB/VnncXX4qCoCizdekREqBSx0Hz1EiXDEWNjJEZXf2Ytz
4QimgsMjqC917A==
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:53:49 2026 by rpki-client