Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
File: iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft (raw, json)
Hash identifier: M1pgkhPivR2hkkt1psDQ5nyUWKHk9s+VAw0r9QMqqGE=
Subject key identifier: 5A:64:2C:2A:D0:73:B0:F8:84:5B:63:D0:5F:E3:B2:4A:A4:60:F4:69
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Certificate issuer: /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial: 01A128E8E62ACBEEB9FD03808B4F156BF664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
Manifest number: 054D
Signing time: Sun 11 Oct 2026 03:01:54 +0000
Manifest this update: Sun 11 Oct 2026 03:01:54 +0000
Manifest next update: Mon 12 Oct 2026 03:01:54 +0000
Files and hashes: 1: 3IMviFqKeTkgcM4hJ3DCovEJPT4.roa (hash: PJ8bbhBGDwD8QZsH/L9/+WbI+Jn53tual+W0DILWDvw=)
2: iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl (hash: gdKtfVRzq/owrPS8lQvqReK1C0LeInoBskIWDjnLUDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:e6:2a:cb:ee:b9:fd:03:80:8b:4f:15:6b:f6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Validity
Not Before: Oct 11 03:01:54 2026 GMT
Not After : Oct 12 03:01:54 2026 GMT
Subject: CN=5a642c2ad073b0f8845b63d05fe3b24aa460f469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:dd:8d:0d:f6:bd:88:f5:ad:8f:28:5a:e0:
48:52:8c:4d:6d:3c:ca:84:93:fa:22:42:d3:93:18:
5e:2c:97:5a:d0:d4:68:34:07:ca:11:c8:89:58:e7:
fe:a7:2e:5d:4f:2c:3b:c4:33:3f:37:d2:a1:ad:a6:
8b:0a:03:af:60:e8:8d:77:8e:f4:f8:71:8d:db:d0:
65:ec:ac:52:b5:3e:b2:a6:34:18:b9:8e:97:6c:38:
17:91:73:cc:ab:59:84:7d:05:5f:ce:f1:29:b3:7a:
6a:64:59:67:93:a6:a1:f1:80:e6:35:85:cd:66:9e:
90:d5:ab:c3:f5:80:64:d3:89:26:62:7c:10:48:ac:
5f:ef:e3:ca:1c:1d:7b:0c:4f:2b:ff:58:90:06:13:
38:7e:3d:a7:cf:a2:ab:fc:c1:4e:d2:f9:c9:9d:db:
a3:7e:08:5e:59:96:a1:3a:d8:0d:ca:16:d7:1a:a3:
90:b6:da:cd:2b:95:3a:b5:a9:16:00:f0:ca:5b:16:
9c:de:08:05:63:a2:79:58:f8:01:4e:e2:07:64:23:
f8:42:37:97:24:4f:86:5d:67:68:db:fa:f7:4a:4d:
4b:3c:00:4d:5e:d3:be:f5:40:c7:62:c5:25:2e:5c:
04:a3:f7:60:01:53:42:a7:e7:2d:b8:46:1b:19:5e:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:64:2C:2A:D0:73:B0:F8:84:5B:63:D0:5F:E3:B2:4A:A4:60:F4:69
X509v3 Authority Key Identifier:
keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:21:0b:5e:91:ef:46:40:25:c0:59:6a:c2:25:63:0e:7b:15:
54:3f:21:ee:31:48:72:27:7d:c0:9c:c0:f2:0c:70:ab:8b:95:
75:72:32:b4:94:02:aa:31:13:90:cd:f3:c0:dc:b7:eb:2e:94:
4e:69:33:05:76:70:63:5e:fd:f5:ee:84:12:b1:40:2f:b8:79:
b7:b7:29:d5:9c:ba:1b:fa:d0:c1:c3:2c:d4:68:77:55:63:b3:
30:92:cc:68:6e:cf:5e:15:6b:0b:27:2e:a2:43:b8:2c:fe:10:
19:29:6b:5f:9c:9d:ff:cd:07:21:4c:de:24:24:d2:67:14:9d:
bd:e5:2b:5f:0e:99:f8:d9:00:1d:d5:59:6f:39:8d:93:d2:26:
f6:9f:64:8e:6a:17:fc:2a:6b:d1:36:45:ef:ec:64:88:ca:b7:
fd:ff:fd:36:88:1c:2e:5d:f2:ca:d5:72:3d:16:f8:bb:d9:80:
f6:d5:8f:69:2c:a9:b3:0e:d6:b2:87:16:90:3a:2b:52:73:04:
43:0e:54:ce:61:58:84:4e:73:7c:dc:75:14:4d:b3:6a:a4:2c:
0f:6a:12:cd:32:6f:db:43:bd:a6:54:19:86:a6:0b:80:14:cd:
9c:c4:19:fd:ec:20:f1:0d:d1:42:58:8c:15:95:d7:81:8b:76:
d1:88:ff:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:24:58 2026 by rpki-client