Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: /DUhBM1LiFU4jmLL6uqkfLrE0nWIP+KsrrFPUIQ6A5w=
Subject key identifier: 70:18:B4:CD:06:C0:C2:F1:CB:E1:FB:5B:E2:91:0D:7D:63:6B:E7:2D
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 01A1DF8302A8EE43AC44DB96D4605335C83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 14:01:07 +0000
Manifest this update: Sun 15 Nov 2026 14:01:07 +0000
Manifest next update: Mon 16 Nov 2026 14:01:07 +0000
Files and hashes: 1: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (hash: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: 2wIN6Wtglj5thlbbvSBMztkkae6VHvCRTwbS79iOkWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:02:a8:ee:43:ac:44:db:96:d4:60:53:35:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Nov 15 14:01:07 2026 GMT
Not After : Nov 16 14:01:07 2026 GMT
Subject: CN=7018b4cd06c0c2f1cbe1fb5be2910d7d636be72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:3b:09:19:67:ec:be:06:04:89:f5:3b:42:
b2:d8:fb:95:fb:04:ed:1a:f5:84:5f:01:ce:b7:03:
69:42:8c:0a:1a:6b:46:3c:8e:dd:10:c7:2b:e1:97:
6c:36:b9:4c:31:d6:bd:ab:eb:3c:6d:99:e5:34:f5:
60:d5:36:41:3c:c3:06:e3:bb:31:8f:34:6d:7c:5a:
a4:78:47:d2:a0:72:8a:00:7e:aa:0a:ef:96:b2:b7:
47:03:bc:bb:b7:a0:61:e2:cd:b3:c0:88:d3:ca:db:
ba:b1:c2:d2:1b:43:6e:74:ea:7e:40:e2:36:fb:52:
17:85:7c:cd:30:be:9d:03:d3:e5:db:b6:d7:b2:6d:
9c:e3:0b:af:bb:81:46:e2:31:7c:b5:8f:07:37:26:
2f:cf:48:76:24:b3:f9:49:19:6e:7f:48:1e:98:7f:
fc:b1:5c:80:c1:2d:4a:92:66:ee:c9:0d:fb:b4:bc:
93:2c:4d:b4:ef:a6:36:55:e0:c2:fb:9b:18:35:29:
2e:c5:8a:19:d2:6a:dd:77:45:40:fb:06:14:79:07:
ec:f3:4f:1e:b1:82:d6:4f:9b:19:20:d5:e3:b3:9f:
40:4f:0b:54:92:e3:53:a9:98:e6:04:b3:a8:8e:93:
ed:47:bc:20:c4:62:9f:f4:b9:e9:54:4d:e4:03:7d:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:18:B4:CD:06:C0:C2:F1:CB:E1:FB:5B:E2:91:0D:7D:63:6B:E7:2D
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2e:a3:06:95:dc:e8:a0:17:54:b2:51:43:8b:f6:82:17:2b:
2f:f5:a0:9d:45:41:81:be:78:b4:60:2a:1e:c6:23:99:2a:ba:
f6:32:80:11:24:de:52:c6:35:33:a1:bf:b0:c7:1b:66:46:df:
7c:a5:7d:49:62:08:c5:30:51:1b:d4:e2:93:9c:61:29:92:31:
04:22:e3:50:44:3a:4d:10:ab:f1:22:8f:3a:47:ef:bd:d8:b3:
36:69:eb:40:08:c7:ab:56:6f:f0:c2:54:fa:77:69:33:9f:30:
8a:92:a9:de:fa:0e:60:ab:08:bd:11:7b:e3:24:12:d7:51:82:
99:89:7d:db:e8:7f:bc:e2:09:ff:4b:fe:49:b3:bc:d4:8e:96:
bc:a4:fc:8b:9a:aa:c3:3a:1f:56:6a:33:2a:b0:b2:29:05:0f:
47:f5:a2:b6:e7:08:d9:e3:dc:5e:0f:ba:a5:60:c7:7e:2b:88:
11:0b:36:60:56:ee:ea:1b:ff:7d:46:9a:63:7a:b6:1a:b1:73:
2e:8e:68:13:bf:a7:9c:1f:9f:81:ab:9e:46:cc:95:cc:51:cd:
2e:fa:d3:7c:5f:7e:93:ae:d9:fc:76:be:81:86:ae:06:ce:ef:
a0:bc:bc:52:6a:8a:80:93:11:7d:62:98:1d:11:bf:53:b2:90:
02:ce:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:31 2026 by rpki-client