Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: ghZuS+1coyGupREVe6bp1l7gC8QLMXY76iwlr5ZMu1s=
Subject key identifier: 54:47:65:0C:BD:86:86:5F:72:D7:BB:DC:63:52:EC:34:39:88:33:E0
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 01A1893FD2680647B00A23F0698712673D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 126B
Signing time: Thu 29 Oct 2026 20:00:23 +0000
Manifest this update: Thu 29 Oct 2026 20:00:23 +0000
Manifest next update: Fri 30 Oct 2026 20:00:23 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: qxFgznBYWD+sPd1Qwq6PQ2syEVILUOTHSZJv4FsGFsU=)
3: v6M5ib-nqVd93in2ll5RNT1MfYM.asa (hash: qr60aoODIC+z5g67bZbeuAziczqZFFdUc4K7PrAUEj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3f:d2:68:06:47:b0:0a:23:f0:69:87:12:67:3d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Oct 29 20:00:23 2026 GMT
Not After : Oct 30 20:00:23 2026 GMT
Subject: CN=5447650cbd86865f72d7bbdc6352ec34398833e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:6e:d6:74:97:83:ca:5d:d4:44:d3:72:2f:
52:76:eb:7b:7d:32:ce:21:60:ad:1b:89:e7:1a:b7:
14:78:4e:d2:ce:b1:8d:d2:ca:fe:d0:55:82:08:3e:
6d:b6:41:e9:05:43:d7:92:f1:60:29:b9:90:c6:18:
80:63:66:57:f5:fb:43:1b:68:35:ce:8d:29:6a:63:
eb:62:41:0e:08:79:b4:d6:f9:db:aa:ef:28:f5:da:
9f:48:81:bd:db:f5:31:6e:05:72:e7:d3:13:65:d3:
06:e7:26:2c:7e:fa:ed:51:62:69:c4:06:16:b1:f3:
c1:c4:ca:48:4f:d4:3a:bf:ab:54:df:8b:27:4b:28:
96:e7:58:1d:27:22:5f:16:02:f2:85:b0:5e:b4:04:
3a:34:24:de:ab:54:ec:d4:66:bb:f0:ce:4f:95:0f:
f4:33:e9:55:0f:9c:b2:53:d6:a0:46:33:90:08:11:
9a:f8:a0:a0:18:d2:b7:b2:6a:c0:9f:6c:44:69:27:
de:44:d5:95:9f:64:9f:73:38:1c:15:94:a8:ab:2a:
0f:5f:01:c2:f7:18:1b:a0:a5:d8:9a:89:0d:6f:81:
9e:6a:e9:62:c1:68:71:1e:9c:23:f2:b9:0a:db:61:
8c:e0:4c:e7:b7:a3:a3:ce:59:fe:0b:49:23:84:42:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:65:0C:BD:86:86:5F:72:D7:BB:DC:63:52:EC:34:39:88:33:E0
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d1:4f:9f:e8:89:f9:5e:74:2b:2a:5d:6f:ad:f3:47:37:df:
69:fe:ad:a9:3b:2b:3c:2d:d4:53:1d:e3:6c:42:2e:a8:3c:5b:
8b:db:fe:3e:31:43:5c:b5:90:7e:bd:10:b8:d8:b9:0c:30:dd:
28:17:99:0c:32:22:c1:2f:0a:32:ce:d1:55:95:af:f6:90:58:
fb:a5:19:80:e2:2c:be:de:38:d3:0e:cd:6e:e6:e7:4a:de:73:
bb:df:78:2a:89:d4:7b:d8:c8:9a:14:f0:b8:b2:26:97:2b:1a:
b3:c6:c4:b7:b7:6c:4b:83:44:07:b1:8f:98:6b:6b:20:38:39:
86:45:f5:04:45:31:50:2a:77:10:41:8e:97:c6:a1:75:2b:e8:
25:eb:7c:5d:46:bd:93:11:06:66:9a:d5:33:90:bf:c0:e1:82:
50:be:61:b2:01:65:99:9e:72:95:b8:00:de:62:51:5c:20:6b:
ed:73:e8:5e:c0:44:86:f4:a4:68:33:31:2d:73:06:69:c6:71:
c6:99:2d:d4:06:98:e2:9f:b3:04:05:06:5e:c3:b5:ab:d0:35:
cb:fc:36:ab:6c:44:58:0e:00:dc:95:a0:da:a7:7b:66:ec:e3:
99:78:33:22:61:20:c5:1b:e0:b4:59:e8:8c:1c:74:9f:7f:a1:
4d:79:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:08:26 2026 by rpki-client