Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File: iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier: +Ms1aSkx7rxwI67fRvO5HRwu4QsWEq1JivvzLf6XL7E=
Subject key identifier: 80:08:5F:00:5C:6B:A9:28:96:16:F5:C4:FD:02:B1:8E:4F:5C:B5:D2
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 01A15B8C38E6B904F283ABD936D61A94F724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number: 01D9
Signing time: Tue 20 Oct 2026 23:01:18 +0000
Manifest this update: Tue 20 Oct 2026 23:01:18 +0000
Manifest next update: Wed 21 Oct 2026 23:01:18 +0000
Files and hashes: 1: 1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa (hash: PKBAPXzgnWazEIllaNoOetp38i7rE9un2IC2xSXTZlQ=)
2: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (hash: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=)
3: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: 6y4uzCPhSvk/vn5OMsnEPp1qBxBrTiF0qgEMCB5tS78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:38:e6:b9:04:f2:83:ab:d9:36:d6:1a:94:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Oct 20 23:01:18 2026 GMT
Not After : Oct 21 23:01:18 2026 GMT
Subject: CN=80085f005c6ba9289616f5c4fd02b18e4f5cb5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:3d:64:12:5c:a8:d5:c9:90:9c:6b:6a:f8:
42:5d:02:b5:fd:2d:8d:46:a4:0f:a0:5d:e3:dc:2e:
56:11:aa:08:75:c1:07:5e:d3:dc:3e:10:65:32:29:
04:15:56:61:ae:2d:fb:a0:67:fd:f2:e1:ee:bd:3c:
3a:80:cd:d9:d6:2d:c2:19:b5:d8:b1:ab:d9:59:6d:
2a:f0:80:f8:bd:f2:31:e1:f7:4c:12:6d:68:ae:f3:
ef:dc:2b:08:bd:7a:44:d8:a0:1f:44:ce:e7:87:7d:
88:71:8d:93:56:ce:64:e3:37:31:dc:99:7b:2f:e8:
d8:02:2f:fc:cb:2b:53:3b:90:89:f7:bf:b6:a9:63:
6c:36:00:0b:e4:67:02:d6:19:83:41:af:e9:d4:49:
53:3e:a3:37:c6:09:b5:6b:df:e1:c9:e6:25:25:fd:
d5:59:96:45:02:fb:47:c0:19:c7:eb:9f:7e:14:15:
44:43:7c:8b:6a:4e:28:b1:09:4f:49:ab:c9:99:cf:
e1:24:64:ab:dd:f8:47:40:e8:63:6f:7c:61:58:50:
c3:30:96:0b:9d:9c:d4:34:9a:6f:d9:bc:15:99:de:
0c:a3:4d:83:76:16:fb:d7:0c:5c:0a:f1:4e:a0:ad:
fc:81:e3:dd:3b:ef:7b:b5:78:c6:a2:8d:7b:c2:2a:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:5F:00:5C:6B:A9:28:96:16:F5:C4:FD:02:B1:8E:4F:5C:B5:D2
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:07:4b:32:50:84:eb:91:dd:c3:27:1b:a3:a2:ab:76:6e:20:
17:b0:e2:91:d0:d6:fd:1d:64:87:e0:32:d2:ca:67:11:bb:88:
2b:e9:99:0a:70:e9:75:df:b4:18:ee:f3:fc:24:71:ef:98:ef:
1b:a3:05:c6:3b:41:9e:0e:f4:e0:db:60:68:46:a3:e9:fd:48:
e2:61:76:e7:eb:fa:3b:4b:f6:4d:1e:63:18:f7:1b:c1:f7:b3:
e7:4f:ef:bc:1a:0b:95:2b:24:56:45:5f:b9:04:59:df:45:ef:
0a:9d:e9:d7:f3:6c:04:b7:13:18:c8:a5:18:32:55:2a:7f:1f:
49:ed:36:f3:4e:1a:e8:a8:a7:b5:b2:0d:68:b3:45:61:cf:0e:
9b:1a:b0:1d:da:a9:f0:6e:2b:d1:2b:e6:be:eb:7a:15:63:7e:
0f:e9:5c:00:38:05:bf:cb:d9:0a:2e:46:ad:12:a3:c2:68:a7:
14:57:52:8d:7b:48:de:e7:79:81:8e:4e:12:0f:f3:47:fc:8c:
f0:cc:a5:18:03:09:db:17:37:ba:e4:cc:ff:d2:55:5b:c2:30:
f0:2b:e8:ca:c5:c6:e0:2a:29:ac:c4:c5:d6:df:6f:95:ff:f9:
2e:73:ca:f7:79:63:c7:bc:0e:0b:6e:b5:55:30:b3:dd:32:57:
d8:09:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:38:19 2026 by rpki-client