Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
File: IXQgn8IZLnORZveuTf_D1MmCNUk.mft (raw, json)
Hash identifier: M3QBnIyhTQi9ijztgUnfgFZYQO+vI1mbubbXlDE3y38=
Subject key identifier: 79:36:3F:FD:10:FA:16:D5:D8:18:36:24:DD:45:AB:E2:73:93:7E:C6
Authority key identifier: 21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
Certificate issuer: /CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Certificate serial: 01A0F8AA2CD173455548028CB488ACFDE5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
Manifest number: FA
Signing time: Thu 01 Oct 2026 18:11:37 +0000
Manifest this update: Thu 01 Oct 2026 18:11:37 +0000
Manifest next update: Fri 02 Oct 2026 18:11:37 +0000
Files and hashes: 1: IXQgn8IZLnORZveuTf_D1MmCNUk.crl (hash: c6QO/MInNggTDiAs25DrzRQ/NcOmhwAfML9IgqvqB98=)
2: VAcK6NMH8xpL2oToeLqPNjo0NLo.roa (hash: zpMhbSc5hEPY0bWxxVazj4TyRRANMBWAian/WhduIMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:aa:2c:d1:73:45:55:48:02:8c:b4:88:ac:fd:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Validity
Not Before: Oct 1 18:11:37 2026 GMT
Not After : Oct 2 18:11:37 2026 GMT
Subject: CN=79363ffd10fa16d5d8183624dd45abe273937ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:f2:39:c2:ac:53:1e:40:bc:aa:9b:d8:c4:
42:58:b8:77:4e:dc:5e:3b:c2:7f:e4:e8:df:5f:b0:
fd:19:96:e6:6c:35:38:4b:6b:d0:43:87:7b:ba:21:
57:e4:a4:52:98:31:e1:24:b5:9e:8b:fd:a2:7e:86:
b0:5e:b5:42:77:86:bf:d2:55:8d:9f:1e:cb:39:d4:
bf:ab:53:42:73:d2:b9:c7:b8:3c:f1:1f:85:21:d8:
c5:01:cd:79:7d:c3:21:0e:3a:24:01:44:a6:fd:0c:
9c:ed:6e:bb:9d:84:ca:a8:18:6a:b5:75:c6:bb:16:
07:55:a8:b5:e2:d0:58:33:94:11:57:6d:f3:f3:d3:
f8:a0:7a:23:0d:c6:29:bf:9a:2a:74:24:ec:1e:05:
01:b4:ad:ab:0c:2d:44:f6:6e:87:f3:40:44:2f:6c:
a0:7a:dc:6c:92:b2:94:32:49:3f:bb:3b:d6:45:d7:
04:d2:c6:26:2e:19:e2:cc:ec:e9:8d:4e:ca:88:90:
97:89:40:bf:32:59:bd:c9:bd:59:3b:4e:75:0b:2a:
9c:a1:54:02:41:31:3d:f0:bf:be:f0:c2:8b:ab:35:
67:a4:9d:5e:d0:23:ef:dc:9a:45:4f:db:bd:17:5d:
53:a2:f6:10:92:b4:5c:37:8d:84:2f:af:3d:99:08:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:3F:FD:10:FA:16:D5:D8:18:36:24:DD:45:AB:E2:73:93:7E:C6
X509v3 Authority Key Identifier:
keyid:21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:2a:5d:94:f0:a1:97:10:03:72:65:61:af:f6:49:a8:ff:
26:b1:11:9a:a6:c5:ba:1c:b8:73:bc:46:d6:bf:c6:d4:76:a5:
31:f5:8b:ef:06:63:de:1f:df:58:99:39:ac:8b:ad:e6:18:72:
81:0f:59:d6:d0:90:52:6c:e0:5c:db:9f:63:b1:2e:27:bc:8c:
f7:91:05:00:0c:d9:61:19:82:07:fb:ab:c6:18:25:3f:68:ad:
27:e2:18:88:1c:ba:60:ae:4d:f3:24:af:e3:1a:e2:0a:4e:ee:
9c:30:d2:e7:a0:0a:c0:7c:58:9c:98:12:cf:e5:69:39:ff:7a:
8c:18:cf:09:eb:cc:29:91:08:a6:69:85:46:ec:ee:c2:c2:04:
ca:a8:d1:ae:3a:72:fa:45:98:9c:8d:7d:d8:bf:d4:0d:ca:58:
e7:e8:59:8f:93:4d:e9:11:43:41:76:be:1c:b8:83:fc:64:ff:
79:73:a9:14:d8:38:f5:c7:07:ec:3b:1a:ca:b8:3b:d4:9e:fc:
26:c8:d9:82:1c:7a:03:c9:d7:a3:1d:00:43:71:dd:79:84:79:
72:21:a2:af:1b:be:a4:c8:34:ef:ea:04:29:8c:68:71:77:f1:
cc:bf:40:1d:af:b0:a7:5e:62:71:ac:cf:42:f9:c6:0e:02:8e:
7d:6e:70:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4qizRc0VVSAKMtIis/eX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNzQyMDlmYzIxOTJlNzM5MTY2ZjdhZTRkZmZjM2Q0Yzk4
MjM1NDkwHhcNMjYxMDAxMTgxMTM3WhcNMjYxMDAyMTgxMTM3WjAzMTEwLwYDVQQD
Eyg3OTM2M2ZmZDEwZmExNmQ1ZDgxODM2MjRkZDQ1YWJlMjczOTM3ZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1vyOcKsUx5AvKqb2MRCWLh3Ttxe
O8J/5OjfX7D9GZbmbDU4S2vQQ4d7uiFX5KRSmDHhJLWei/2ifoawXrVCd4a/0lWN
nx7LOdS/q1NCc9K5x7g88R+FIdjFAc15fcMhDjokAUSm/Qyc7W67nYTKqBhqtXXG
uxYHVai14tBYM5QRV23z89P4oHojDcYpv5oqdCTsHgUBtK2rDC1E9m6H80BEL2yg
etxskrKUMkk/uzvWRdcE0sYmLhnizOzpjU7KiJCXiUC/Mlm9yb1ZO051CyqcoVQC
QTE98L++8MKLqzVnpJ1e0CPv3JpFT9u9F11TovYQkrRcN42EL689mQi72QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk2P/0Q+hbV2Bg2JN1Fq+Jzk37GMB8GA1UdIwQY
MBaAFCF0IJ/CGS5zkWb3rk3/w9TJgjVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGIt
MjBlNTljZjkyNjg2LzEvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGItMjBlNTljZjkyNjg2
LzEvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVQqXZTw
oZcQA3JlYa/2Saj/JrERmqbFuhy4c7xG1r/G1HalMfWL7wZj3h/fWJk5rIut5hhy
gQ9Z1tCQUmzgXNufY7EuJ7yM95EFAAzZYRmCB/urxhglP2itJ+IYiBy6YK5N8ySv
4xriCk7unDDS56AKwHxYnJgSz+VpOf96jBjPCevMKZEIpmmFRuzuwsIEyqjRrjpy
+kWYnI192L/UDcpY5+hZj5NN6RFDQXa+HLiD/GT/eXOpFNg49ccH7Dsayrg71J78
JsjZghx6A8nXox0AQ3HdeYR5ciGirxu+pMg07+oEKYxocXfxzL9AHa+wp15icazP
QvnGDgKOfW5wLQ==
-----END CERTIFICATE-----
Generated at Fri Oct 2 07:41:06 2026 by rpki-client