Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: U7g/mYK4ouj6xiW0eGFUHQr3aEdiPVmCdayTkykoTVo=
Subject key identifier: EA:46:6B:25:32:AD:EC:4A:43:43:F2:98:E4:60:B0:18:73:91:6C:BA
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 01A0E1E1BD227228E31A0ED4C3BA25E6A82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0F9E
Signing time: Sun 27 Sep 2026 08:01:02 +0000
Manifest this update: Sun 27 Sep 2026 08:01:02 +0000
Manifest next update: Mon 28 Sep 2026 08:01:02 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: E2r144GGj4H1pHJcj90MvHOFEq6R9Cp1awWTrCDrRbg=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:bd:22:72:28:e3:1a:0e:d4:c3:ba:25:e6:a8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Sep 27 08:01:02 2026 GMT
Not After : Sep 28 08:01:02 2026 GMT
Subject: CN=ea466b2532adec4a4343f298e460b01873916cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:04:20:c4:6a:fc:3f:32:f1:d2:06:ec:75:
e1:4c:c9:ae:93:88:b5:bf:d7:e8:9e:e1:a8:0b:25:
5c:d2:f1:75:51:5b:64:d2:d7:dc:05:e3:c8:89:dc:
7c:ef:cc:bc:12:94:de:3e:97:df:6f:f8:e9:36:67:
e4:7a:ec:aa:55:34:02:cb:6e:3b:10:c4:eb:73:aa:
be:58:83:74:90:e0:b0:7e:51:ec:02:e8:90:28:5f:
05:a6:d0:77:f2:30:ae:0c:8b:f2:60:ab:fb:2f:d1:
89:42:13:6d:da:56:c7:98:8e:dd:c2:1c:b3:c3:a0:
02:97:7c:e5:5c:9a:84:cf:6c:a5:54:1a:b4:4a:69:
54:7a:ef:be:5e:ee:be:7c:59:4f:2d:f0:d2:7e:85:
ef:92:8b:c5:33:94:32:61:20:cb:d4:e1:1b:4c:ac:
81:7e:c6:ea:94:85:46:80:2a:cc:14:a8:42:e5:8a:
9b:48:d1:2c:cb:da:5a:b5:6f:23:0d:cc:8f:c7:07:
4a:99:9b:1e:a9:73:9d:18:b4:45:df:3e:e9:cf:8c:
f7:34:2c:15:1a:e2:25:13:71:77:1c:75:8c:de:aa:
e1:80:0c:7f:b2:ec:1b:ae:5d:cf:93:90:70:5c:85:
a0:1d:ce:f3:ef:d9:1b:43:32:c4:13:e5:8c:12:7a:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:46:6B:25:32:AD:EC:4A:43:43:F2:98:E4:60:B0:18:73:91:6C:BA
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fb:8e:fc:e9:4b:97:c6:46:1f:fa:f1:a6:98:1c:35:0e:91:
ca:3c:9d:9f:fb:4d:9c:62:82:69:81:37:1a:85:a8:d4:3e:00:
7f:92:1d:b2:2e:a8:cb:3b:bb:50:e0:c6:3b:25:eb:81:04:e9:
91:de:e4:70:da:a8:f6:de:5f:6c:39:1f:03:b5:b2:af:72:a1:
44:59:9b:24:b1:33:cd:a5:70:ec:78:5e:c8:47:ca:62:40:74:
86:62:49:15:b1:2e:5c:43:00:36:c7:7b:af:54:40:2f:a6:10:
f5:4b:52:77:5c:cb:fb:78:5e:68:e3:bb:63:7d:d0:11:4e:ef:
4c:d0:5d:06:80:36:2a:07:22:f4:39:d8:ec:99:49:d8:5c:20:
66:aa:c2:a9:92:0d:6c:9c:07:22:c6:af:64:8c:db:2e:1a:da:
0c:a3:23:a5:8a:14:fb:b8:54:4e:c5:24:b7:87:97:a3:3b:d3:
0f:8c:df:b7:98:33:09:b6:4e:3c:db:a1:a7:21:71:48:7c:52:
b0:5c:ea:42:10:73:29:b4:8e:2c:1b:eb:f5:2d:2c:cc:6f:a8:
62:14:50:3b:10:77:5a:3e:f1:42:81:98:98:a1:b9:2e:a9:c8:
2f:f1:f5:8b:ef:2f:85:81:07:d3:ec:ba:61:bb:40:ea:d3:9b:
df:18:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:17:25 2026 by rpki-client