Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: NLoFftzNyHT1NcFxcpuSjxH+fBNbN0VYDV/sAIzREf4=
Subject key identifier: BF:44:28:DC:47:BC:A6:F3:39:D2:E7:63:88:E5:0A:12:96:31:D7:EC
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01A0D3EF140AC10EA7D1FE502DEA914465EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 1ACC
Signing time: Thu 24 Sep 2026 15:00:55 +0000
Manifest this update: Thu 24 Sep 2026 15:00:55 +0000
Manifest next update: Fri 25 Sep 2026 15:00:55 +0000
Files and hashes: 1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
3: EDn6jQwDUb3_g3td9FsRuFag4vc.roa (hash: odWjY9IlQTpSIG4MhA9Jlqnd2G5ltLMnoOP98UOiafU=)
4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: 5i8nzO6lxQVsuYgXGvaWesHDqkefwucIR1+a+UD7cP0=)
5: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (hash: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=)
6: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
8: xOkTZSLsa771caq28USEEIkXpes.roa (hash: NwIcfsi68DSP9V21cWD03wWREzD0An2kgwljZOmrIf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:14:0a:c1:0e:a7:d1:fe:50:2d:ea:91:44:65:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Sep 24 15:00:55 2026 GMT
Not After : Sep 25 15:00:55 2026 GMT
Subject: CN=bf4428dc47bca6f339d2e76388e50a129631d7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:d2:4b:8b:45:e8:d0:e5:b5:8a:0d:ed:7e:
26:37:85:56:d4:a1:d6:2e:d4:44:84:07:a4:f6:10:
d6:71:40:9f:ea:09:54:e0:fc:87:4b:21:1b:85:c3:
89:d3:2d:19:9e:7b:f5:41:48:16:9f:ec:96:8a:5e:
e2:ee:f5:7f:37:e1:a3:0d:ec:05:fd:a9:cd:e5:eb:
ad:36:ad:be:c3:89:a5:e6:df:a1:d5:82:0f:93:cd:
24:f5:b0:90:2d:23:51:27:34:74:fc:59:75:40:9e:
10:6e:00:d1:fb:b7:11:89:29:b7:ab:8b:f1:ae:b0:
e3:43:df:bb:7d:fa:93:21:2f:34:4a:5d:0e:23:de:
d1:0e:81:df:c7:fc:80:11:0b:ab:b7:70:b7:75:99:
b5:66:5f:b4:72:98:72:b5:ed:55:7c:39:be:50:02:
d4:4b:31:e8:f9:62:d2:be:e6:1a:54:a5:86:b0:d5:
20:b4:20:53:59:b6:ad:85:34:9a:3e:4d:f1:47:91:
c6:15:1e:9e:15:47:7e:b1:10:ba:da:57:1e:fc:27:
28:4e:f0:4b:32:b6:bf:03:81:7c:25:db:90:3e:5f:
09:8c:10:4c:f4:03:70:70:6d:de:9c:e9:94:ea:cd:
9b:b4:3b:31:00:67:52:70:0b:5c:80:1a:a8:09:15:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:44:28:DC:47:BC:A6:F3:39:D2:E7:63:88:E5:0A:12:96:31:D7:EC
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d9:d8:a9:0b:4c:62:01:eb:ac:8f:14:c0:59:40:19:4e:b4:
a8:09:2f:3b:dc:b1:29:0d:f4:e5:61:75:1b:b1:3e:f0:a9:00:
0b:da:7f:32:4a:2a:fb:3d:04:ca:bf:e9:75:7b:30:19:7b:30:
ec:93:80:05:36:15:22:3e:72:f2:b4:8d:5e:7e:66:b3:20:06:
b7:8c:c3:91:0e:fd:80:a1:fd:50:30:76:cf:5f:da:fc:8f:80:
08:75:6c:74:74:31:63:19:96:26:68:ea:2c:e8:8f:25:5c:35:
ed:d9:8d:d9:d0:47:fc:a4:35:6b:28:52:0b:cb:28:00:f6:5c:
0b:78:94:4c:e0:b3:c8:ca:46:40:81:41:d9:63:29:bd:ad:66:
29:0c:a3:c8:c6:01:f7:11:49:be:fd:b4:e0:bd:93:92:22:ff:
e4:01:ff:d4:7e:1d:f6:2f:1e:ca:b0:64:5b:e4:b9:ce:87:f9:
80:58:20:9a:2c:c0:11:a9:08:ed:19:70:6d:78:f3:fe:75:aa:
f9:83:6b:86:48:ae:4c:db:42:2f:6c:bf:98:e3:9b:e3:e0:0c:
38:99:1a:b6:9a:80:67:89:44:5e:52:e1:9e:57:d1:ed:93:f1:
ed:03:b7:78:bb:24:6d:89:fc:f9:24:42:08:90:5f:6a:a3:c1:
72:2f:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:39:15 2026 by rpki-client