Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: v3Akr5wT+ViSCb9sSiDHOBO7RTnFx/rGhUurwYLzDT8=
Subject key identifier: A8:21:D5:DA:AA:73:14:96:C2:A4:21:4D:F2:31:89:1A:15:18:3F:6E
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 01A134B5185F5D6361973E883031D4362F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 1AA0
Signing time: Tue 13 Oct 2026 10:00:45 +0000
Manifest this update: Tue 13 Oct 2026 10:00:45 +0000
Manifest next update: Wed 14 Oct 2026 10:00:45 +0000
Files and hashes: 1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: bTxh60awQ3ujTqDGeY8iWBrXZShcmkpnHclLzoub2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:18:5f:5d:63:61:97:3e:88:30:31:d4:36:2f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Oct 13 10:00:45 2026 GMT
Not After : Oct 14 10:00:45 2026 GMT
Subject: CN=a821d5daaa731496c2a4214df231891a15183f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:df:d7:1c:31:f8:d1:95:6e:ab:4d:96:06:
6e:e3:91:5a:f1:a1:2a:c7:d3:77:56:13:5c:9b:50:
1f:63:e5:2a:be:d3:36:c6:4a:01:cb:a0:f5:96:3e:
f9:0e:af:43:e2:c5:0e:30:2e:63:71:14:ee:00:b8:
57:32:97:b8:99:32:ee:6b:7d:3b:64:0b:60:da:72:
8e:5c:00:72:c6:cb:b7:eb:b9:3e:cf:a8:52:7a:9c:
65:f8:13:b3:06:6d:71:99:d0:ad:ec:81:71:14:f0:
f7:bf:5b:ac:20:65:03:16:5b:94:53:c9:23:22:a3:
e6:9b:e0:2f:01:9a:58:07:71:ee:a3:29:cc:af:38:
56:0c:eb:40:04:b0:2a:1e:51:3e:22:93:7e:77:6b:
72:0d:b0:9e:ab:7e:0d:83:fc:0b:70:d8:b9:0c:58:
67:de:58:1c:9a:28:4e:a2:19:5c:a0:04:96:e8:2a:
0f:e5:a8:f7:d3:89:61:7f:f8:5a:ad:12:05:59:f4:
d0:29:a6:ff:fa:14:0c:5b:f7:e3:d7:54:c0:99:49:
4e:47:0d:b7:30:1f:89:5b:4b:22:06:be:c9:82:3c:
0b:ee:49:b3:77:b8:f5:51:fe:2a:7c:93:7b:3b:7b:
37:95:9b:24:97:3c:82:21:c0:8e:a7:e4:9f:93:9d:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:D5:DA:AA:73:14:96:C2:A4:21:4D:F2:31:89:1A:15:18:3F:6E
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4b:4e:fc:87:60:d5:37:be:49:b6:67:d4:b5:1e:d7:75:66:
12:2c:34:9d:fc:57:77:89:3d:24:2a:25:34:5a:62:12:25:b1:
0c:ee:de:d6:bd:a5:0a:2c:8b:38:4c:95:0f:00:38:57:d5:74:
88:a7:2e:67:7c:e7:d1:0a:f0:04:cd:9e:f9:a6:ef:1b:e9:a4:
9f:d3:16:87:e5:27:93:d2:1a:68:0b:7d:1b:b0:22:b0:f8:d5:
3a:1b:b7:04:f8:dd:d2:e5:21:c6:e2:43:4b:01:ae:d1:d9:57:
44:3b:80:95:78:75:6e:57:27:41:12:88:fe:47:b3:43:5e:3a:
50:a6:e2:61:b2:7d:b2:ab:60:2a:72:8b:a7:56:f5:ad:fa:ee:
3b:85:79:94:c2:28:0c:3c:ef:f6:f0:12:e5:c6:b9:f0:64:48:
94:d1:f9:4b:0d:6b:f1:11:53:10:81:df:f6:8b:7f:4b:d4:11:
b2:ec:0a:27:fd:26:87:2c:00:2c:0e:7f:a3:19:79:e4:a3:64:
9b:9d:c1:fa:60:2b:e3:90:30:d0:00:78:1d:39:40:15:c5:ad:
63:2f:65:1f:ff:6d:5d:c1:d6:66:9c:b1:75:18:e7:98:76:bb:
e0:76:f6:9f:82:6e:54:48:b9:d8:e0:ec:da:70:d1:61:71:02:
4f:46:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:34:11 2026 by rpki-client