Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: 8XBvl7MpsoHb/d6WOdIG7mHJxF1PHqJLdZSci2t9POs=
Subject key identifier: 58:1F:98:8A:BF:54:FD:67:2F:30:9B:42:E8:6C:FB:AE:F8:80:DF:BE
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 01A08CE95E0ED9FE6432DECE3CC9F27FDB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 11E8
Signing time: Thu 10 Sep 2026 20:01:39 +0000
Manifest this update: Thu 10 Sep 2026 20:01:39 +0000
Manifest next update: Fri 11 Sep 2026 20:01:39 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: 09W0AvTq8GOJVQWjFcbRvOYZHqSECyQrS48Xa6XBh1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:5e:0e:d9:fe:64:32:de:ce:3c:c9:f2:7f:db:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Sep 10 20:01:39 2026 GMT
Not After : Sep 11 20:01:39 2026 GMT
Subject: CN=581f988abf54fd672f309b42e86cfbaef880dfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:bf:06:4a:19:4a:85:f4:1b:36:1b:18:9f:
66:d3:d4:bc:c2:44:e3:30:6d:d5:95:0e:49:fb:fd:
d9:78:8a:74:20:2d:5b:bc:8f:6b:5e:fe:8d:f9:1d:
de:c7:e0:a0:97:4b:9c:5f:d0:ac:8c:20:fd:86:b6:
2a:02:a9:c4:a8:13:d1:86:f4:20:b4:29:26:24:cc:
79:cf:86:a7:41:19:11:1f:4a:bb:b7:e9:5a:0e:d5:
7f:3b:8e:1e:50:aa:ed:1e:ee:cd:cc:78:d3:09:cf:
5c:4b:52:3d:41:cf:74:05:55:34:c4:a4:61:b3:24:
c1:bb:58:c8:5b:5e:18:d8:05:ca:74:ca:59:4e:c4:
f9:93:13:87:21:54:79:d9:d0:68:26:e7:14:53:52:
40:61:22:15:88:71:62:f2:15:6a:00:74:a4:61:24:
2e:ed:32:73:3f:78:f2:c8:c1:3c:f1:3c:67:f8:26:
41:e2:8f:9e:3e:52:5a:5b:24:90:cb:76:69:d8:b6:
1d:4b:aa:1c:fb:09:d6:25:85:b4:cb:a1:d1:7d:40:
21:fc:58:f7:8c:bd:4b:22:bf:12:6f:fb:81:c9:eb:
0e:96:42:b4:bf:8a:14:dc:89:0b:62:79:1f:c9:a8:
5d:2c:da:4c:1f:fc:1d:23:b3:46:d3:42:33:71:3c:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:98:8A:BF:54:FD:67:2F:30:9B:42:E8:6C:FB:AE:F8:80:DF:BE
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:58:82:2f:b3:cf:c2:19:68:48:7e:c6:36:fa:7c:80:03:a0:
7f:e2:a0:36:54:5a:3a:13:3e:bf:e2:0e:9d:6b:30:83:f7:2f:
1b:ef:68:3e:10:a7:7c:b6:57:76:5a:69:b8:89:a8:d6:ef:aa:
7e:1d:2c:4a:08:56:e7:02:18:57:ae:23:4a:6f:98:f1:81:b3:
90:08:67:52:73:53:62:6c:6d:e6:69:13:21:e9:b3:aa:c3:f7:
9f:f0:1a:a5:52:66:35:a3:61:54:75:ac:41:35:5a:5f:1c:d7:
99:c6:8e:d8:6c:e6:88:cf:d9:94:e8:47:b4:a2:8b:c4:cd:6a:
08:56:48:27:81:3b:73:d2:be:88:16:90:50:02:6f:01:d2:3a:
b6:d5:10:cc:aa:5c:c0:46:c6:e2:9c:2b:ac:c6:01:49:de:cd:
04:7d:95:e1:dd:49:d0:79:ec:50:4b:15:44:41:2a:84:6b:6e:
e0:b8:f6:51:b4:b8:68:64:75:cf:17:fc:af:a8:be:58:67:42:
01:7b:ee:4c:6c:da:14:65:2a:a1:0c:54:af:50:38:31:8b:f3:
de:4e:15:a6:82:0e:ba:71:e5:0b:4b:38:f9:7f:57:db:31:f4:
ac:8e:59:d1:cf:2f:db:ff:35:3c:60:b9:9d:20:ee:0c:a5:2f:
64:e3:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:11 2026 by rpki-client