Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: JPvGQnLLrluCzP3SQ6tkRI2woC2B2Pkao8hjLzvBB0U=
Subject key identifier: B1:FB:39:7C:E0:06:62:99:2D:47:A3:9E:C7:CB:F2:14:E0:A0:8E:7A
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 01A0F59F88C4E38667707974E02493B8915F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 17F0
Signing time: Thu 01 Oct 2026 04:01:08 +0000
Manifest this update: Thu 01 Oct 2026 04:01:08 +0000
Manifest next update: Fri 02 Oct 2026 04:01:08 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: wvlxlprZLKHJNiFja4RZmZpHtcE0epMzlupIyyCuImY=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:9f:88:c4:e3:86:67:70:79:74:e0:24:93:b8:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Oct 1 04:01:08 2026 GMT
Not After : Oct 2 04:01:08 2026 GMT
Subject: CN=b1fb397ce00662992d47a39ec7cbf214e0a08e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:c9:96:4d:5f:f3:0f:ea:ca:22:2c:a1:5b:
1c:09:bc:27:28:bd:43:33:4d:5c:3b:03:12:4b:c5:
ef:6a:b0:1a:e2:ac:35:02:be:d6:05:5e:d5:90:f3:
5e:cd:b2:17:f7:c1:a2:b6:da:06:2d:78:27:a9:e1:
cf:b2:34:f2:e4:b7:25:99:14:a8:ad:bc:04:78:81:
d3:9d:bc:c1:6e:e6:18:fe:68:aa:cd:57:e1:e4:f1:
1d:e8:95:a0:d1:65:28:11:a2:f9:fb:a5:c8:85:ef:
53:4e:41:16:52:5d:74:35:46:15:9a:49:8b:a1:cd:
b9:2c:39:6f:a2:cf:05:79:35:4e:ed:8d:9e:37:7b:
32:9c:49:8f:4a:a0:cc:56:fd:49:de:7a:c8:a7:b1:
3d:1d:2a:dd:a6:b4:56:a6:cd:63:11:7c:20:44:bb:
46:f5:06:11:73:ab:09:34:0e:5b:74:1a:6a:85:23:
8d:aa:09:ac:7e:5b:34:4e:2d:8e:21:27:6d:cc:c1:
c0:ad:d5:a9:46:56:d5:9e:2c:f7:1b:8a:c9:c6:da:
af:d8:5e:15:ff:c1:98:fc:07:f2:8f:61:32:82:95:
50:ff:51:ce:74:32:a1:bc:81:74:0a:d4:2c:66:b8:
d8:9f:12:6d:54:61:00:85:94:76:8d:0e:63:fd:90:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:39:7C:E0:06:62:99:2D:47:A3:9E:C7:CB:F2:14:E0:A0:8E:7A
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:35:a0:1b:c9:04:27:ce:bf:c1:21:a6:8e:d8:0f:69:25:c8:
e7:a2:79:d1:db:7f:2b:40:34:79:19:b5:6e:ee:68:9c:b8:83:
b0:48:50:87:a7:50:6d:f6:e5:b9:c8:70:8d:d7:0e:c9:89:c7:
c8:75:fe:09:6b:e1:e1:d4:4d:52:55:51:b0:d1:a9:20:22:d4:
84:bf:15:d5:39:56:01:3d:5e:fc:29:ef:b1:f2:43:ec:07:9d:
83:53:48:24:35:9e:e5:df:75:2c:d4:b7:ad:78:f6:c3:6a:62:
a8:d0:70:3d:1c:c1:a7:26:93:8a:fd:f6:6b:c0:ed:bc:e8:2e:
de:2c:e1:8e:1c:aa:da:d9:61:22:0b:cf:41:ad:12:f9:30:66:
39:4b:de:ff:0d:b5:a5:b5:40:6c:9e:36:db:7d:56:9b:e7:a3:
d7:bc:9c:16:df:10:89:bf:76:65:0b:bb:19:b9:88:10:cf:66:
87:17:72:77:ed:5a:f6:4c:9c:5c:67:f2:6f:be:ca:20:e6:e7:
81:4b:4f:8f:2d:7c:cb:c6:ed:15:32:2a:99:cd:9e:a5:f8:80:
8f:6d:77:cc:c4:63:28:45:5a:2a:d5:6c:50:59:12:da:30:14:
2b:17:6d:c7:90:66:30:10:2f:af:90:7b:1d:47:6f:c5:bd:0e:
fa:91:b9:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD1n4jE44ZncHl04CSTuJFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5
NWEzZjAwHhcNMjYxMDAxMDQwMTA4WhcNMjYxMDAyMDQwMTA4WjAzMTEwLwYDVQQD
EyhiMWZiMzk3Y2UwMDY2Mjk5MmQ0N2EzOWVjN2NiZjIxNGUwYTA4ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoTJlk1f8w/qyiIsoVscCbwnKL1D
M01cOwMSS8XvarAa4qw1Ar7WBV7VkPNezbIX98GittoGLXgnqeHPsjTy5LclmRSo
rbwEeIHTnbzBbuYY/miqzVfh5PEd6JWg0WUoEaL5+6XIhe9TTkEWUl10NUYVmkmL
oc25LDlvos8FeTVO7Y2eN3synEmPSqDMVv1J3nrIp7E9HSrdprRWps1jEXwgRLtG
9QYRc6sJNA5bdBpqhSONqgmsfls0Ti2OISdtzMHArdWpRlbVniz3G4rJxtqv2F4V
/8GY/Afyj2EygpVQ/1HOdDKhvIF0CtQsZrjYnxJtVGEAhZR2jQ5j/ZDubQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH7OXzgBmKZLUejnsfL8hTgoI56MB8GA1UdIwQY
MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct
Y2E1MWZiNDA4OTAxLzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx
LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzWgG8kE
J86/wSGmjtgPaSXI56J50dt/K0A0eRm1bu5onLiDsEhQh6dQbfbluchwjdcOyYnH
yHX+CWvh4dRNUlVRsNGpICLUhL8V1TlWAT1e/CnvsfJD7Aedg1NIJDWe5d91LNS3
rXj2w2piqNBwPRzBpyaTiv32a8DtvOgu3izhjhyq2tlhIgvPQa0S+TBmOUve/w21
pbVAbJ42231Wm+ej17ycFt8Qib92ZQu7GbmIEM9mhxdyd+1a9kycXGfyb77KIObn
gUtPjy18y8btFTIqmc2epfiAj213zMRjKEVaKtVsUFkS2jAUKxdtx5BmMBAvr5B7
HUdvxb0O+pG54g==
-----END CERTIFICATE-----
Generated at Thu Oct 1 15:12:35 2026 by rpki-client