Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: mX8Zt4d75Kkk6vgdE3JkGaTqbXOMRsdiW/eG+3IDcmE=
Subject key identifier: 9F:4D:4A:26:09:54:64:C2:74:BB:77:2B:B9:5D:8D:26:49:AB:50:DF
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 01A190552624447798EF937B399AC6F3265D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 1AD1
Signing time: Sat 31 Oct 2026 05:01:01 +0000
Manifest this update: Sat 31 Oct 2026 05:01:01 +0000
Manifest next update: Sun 01 Nov 2026 05:01:01 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: 12llz05X+3SI7QRJuehBO8talt22AyPj7flwCGsV2xU=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:55:26:24:44:77:98:ef:93:7b:39:9a:c6:f3:26:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Oct 31 05:01:01 2026 GMT
Not After : Nov 1 05:01:01 2026 GMT
Subject: CN=9f4d4a26095464c274bb772bb95d8d2649ab50df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:62:d4:67:f4:c3:0c:2c:4c:5c:99:51:58:
b8:4d:76:26:65:ec:91:68:80:4f:ec:ac:26:67:c7:
06:01:93:68:45:cc:c2:73:66:5c:2a:21:81:2f:9e:
74:1f:31:e7:f9:79:2e:2d:43:af:6c:7b:c6:06:90:
f0:3e:8a:a6:a3:31:c9:10:80:f9:0f:ac:69:8b:5b:
d7:5d:b9:49:6a:a3:e5:5a:97:60:e6:c3:88:3b:a4:
1d:ea:ec:33:eb:b3:27:94:8f:18:15:48:c0:32:0d:
16:4f:43:d4:13:a2:39:7d:ef:24:8a:4d:4f:82:84:
fc:73:4d:b7:5c:e7:e0:db:a9:59:53:78:7a:cb:8e:
c8:da:f8:a3:98:59:13:cb:7e:64:b6:32:fd:ae:fa:
f5:7b:ab:ff:fd:29:26:d8:dc:c3:9e:6c:59:e3:75:
4c:45:e3:69:9d:b5:3f:8f:d2:35:8c:e2:6d:b6:57:
de:45:85:18:af:98:47:7c:61:b9:a5:a6:a5:4c:6f:
c0:53:50:a5:c7:96:25:6c:20:05:c7:f5:7b:bc:61:
2f:53:1d:ea:ff:6a:91:b9:ea:32:f5:19:3c:df:44:
42:c7:36:8f:07:98:bb:38:e1:08:aa:51:1b:5b:c8:
26:cd:52:f9:f6:24:d2:75:95:59:68:84:f0:3d:82:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:4A:26:09:54:64:C2:74:BB:77:2B:B9:5D:8D:26:49:AB:50:DF
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:76:be:5c:50:16:ea:4f:c2:10:50:b2:77:1b:5e:13:80:ff:
b8:65:d4:db:60:c6:2a:4c:b4:0d:df:c6:e5:80:49:5a:fc:b2:
b4:61:63:d6:29:ab:24:1c:18:87:72:68:f8:e0:73:77:ac:48:
a0:51:17:c9:e4:43:23:2a:cf:10:f7:78:a9:e0:61:1e:53:e3:
a2:57:7f:75:fd:e8:87:23:eb:8f:34:be:98:de:40:62:a7:0c:
96:7e:b4:40:ac:1b:bd:d2:52:69:13:5c:57:83:19:11:8c:f5:
32:ef:d5:0a:43:eb:4a:5e:b8:18:46:f3:d6:69:ba:f5:e9:f9:
d2:87:2d:cc:51:33:c2:df:ad:eb:c3:47:97:25:ae:76:15:f9:
36:74:21:66:a0:c9:49:47:0e:c7:2f:b2:fd:a6:7c:38:67:38:
c4:bc:68:4d:e1:cd:71:a4:a9:77:ce:2d:6a:5a:32:28:b3:fc:
dc:eb:bb:e5:ea:58:cb:c8:50:26:1d:9d:d4:f8:cc:3b:d0:05:
fa:eb:6e:05:75:cd:e2:85:39:cf:61:16:9c:ec:57:8d:1b:80:
92:c0:9a:92:76:5a:e6:9d:b8:a9:1e:67:4d:82:cb:8d:5c:48:
ea:17:d3:0a:70:d6:7b:6b:58:97:64:18:5e:ef:b2:f0:37:b7:
f8:23:c6:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGQVSYkRHeY75N7OZrG8yZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTc4MDczOGI4NTNhY2ZmYmFiZGIyMzkxNGM1MGUzNjQy
MWY3NzMwHhcNMjYxMDMxMDUwMTAxWhcNMjYxMTAxMDUwMTAxWjAzMTEwLwYDVQQD
Eyg5ZjRkNGEyNjA5NTQ2NGMyNzRiYjc3MmJiOTVkOGQyNjQ5YWI1MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw69i1Gf0wwwsTFyZUVi4TXYmZeyR
aIBP7KwmZ8cGAZNoRczCc2ZcKiGBL550HzHn+XkuLUOvbHvGBpDwPoqmozHJEID5
D6xpi1vXXblJaqPlWpdg5sOIO6Qd6uwz67MnlI8YFUjAMg0WT0PUE6I5fe8kik1P
goT8c023XOfg26lZU3h6y47I2vijmFkTy35ktjL9rvr1e6v//Skm2NzDnmxZ43VM
ReNpnbU/j9I1jOJttlfeRYUYr5hHfGG5paalTG/AU1Clx5YlbCAFx/V7vGEvUx3q
/2qRueoy9Rk830RCxzaPB5i7OOEIqlEbW8gmzVL59iTSdZVZaITwPYKjkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9NSiYJVGTCdLt3K7ldjSZJq1DfMB8GA1UdIwQY
MBaAFIingHOLhTrP+6vbI5FMUONkIfdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzkt
NjZmNTZlZjljZTI2LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzktNjZmNTZlZjljZTI2
LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Ha+XFAW
6k/CEFCydxteE4D/uGXU22DGKky0Dd/G5YBJWvyytGFj1imrJBwYh3Jo+OBzd6xI
oFEXyeRDIyrPEPd4qeBhHlPjold/df3ohyPrjzS+mN5AYqcMln60QKwbvdJSaRNc
V4MZEYz1Mu/VCkPrSl64GEbz1mm69en50octzFEzwt+t68NHlyWudhX5NnQhZqDJ
SUcOxy+y/aZ8OGc4xLxoTeHNcaSpd84taloyKLP83Ou75epYy8hQJh2d1PjMO9AF
+utuBXXN4oU5z2EWnOxXjRuAksCaknZa5p24qR5nTYLLjVxI6hfTCnDWe2tYl2QY
Xu+y8De3+CPGnQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:22:46 2026 by rpki-client