Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
File: iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json)
Hash identifier: 3kIKUzWDleWZ7ZJzjVNSaeA2jKu1zRQwfzAujDp0RMY=
Subject key identifier: EF:A5:DC:1A:AA:C5:94:3F:A1:43:52:06:8C:C1:C7:86:89:6A:01:62
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial: 01A0412ADE948C4919BE701411F57CD1A1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
Manifest number: 1A21
Signing time: Thu 27 Aug 2026 03:02:03 +0000
Manifest this update: Thu 27 Aug 2026 03:02:03 +0000
Manifest next update: Fri 28 Aug 2026 03:02:03 +0000
Files and hashes: 1: 7oSS-r2bMLw-tHLZnTLEn6ZKtA0.roa (hash: sEaYDQdsiX4RB8VnPuUfSRtKLpLITXk4UddGS53dMkM=)
2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: LLV4lvtZihlJwmliHfRezg9edT1x7/x5fMdM5F+MrhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:de:94:8c:49:19:be:70:14:11:f5:7c:d1:a1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Validity
Not Before: Aug 27 03:02:03 2026 GMT
Not After : Aug 28 03:02:03 2026 GMT
Subject: CN=efa5dc1aaac5943fa14352068cc1c786896a0162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:da:12:c3:47:6c:69:bf:5a:dc:0c:2a:df:
dd:03:d7:ed:f9:6a:81:bd:9f:28:0f:57:e4:5a:03:
b2:f2:eb:52:db:69:b8:81:a0:0d:6b:e8:ba:e8:2a:
b4:4a:c2:14:0a:e2:77:d6:3c:08:0d:4e:73:e0:3e:
7a:33:a4:bc:5b:9c:2d:07:41:02:3c:6c:5c:1d:c6:
71:62:ca:38:1c:14:ff:25:00:6f:97:3a:df:5a:1b:
ea:6d:d0:45:7b:14:4d:43:5a:10:f6:45:c4:05:80:
98:12:e4:84:9f:f7:b6:96:50:2e:78:9c:58:c5:b1:
45:93:bb:de:c0:4d:be:de:6d:f4:5f:8f:51:43:46:
d6:e6:ea:69:e6:d0:c9:b5:9a:cc:bc:de:e6:0a:1c:
22:6d:97:52:77:c7:be:41:9b:f3:09:7d:af:78:79:
2f:98:23:4a:08:ad:46:e3:bc:c1:1e:90:83:e6:0a:
fa:82:dc:81:6f:b7:22:13:e2:65:0e:15:5f:e7:30:
f4:c9:50:10:89:47:2d:e5:94:58:46:9e:ce:39:7b:
df:ab:c3:b6:89:61:53:bd:99:7a:bc:85:d7:ff:2f:
5d:af:06:f2:41:8a:83:17:46:04:19:18:92:54:96:
43:e1:19:d6:ea:23:66:cc:f7:25:bb:fd:0b:5b:6e:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A5:DC:1A:AA:C5:94:3F:A1:43:52:06:8C:C1:C7:86:89:6A:01:62
X509v3 Authority Key Identifier:
keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:34:38:ea:37:44:ec:33:6b:35:cf:9b:79:94:6d:e7:6e:46:
06:85:91:20:21:a4:70:b6:81:6e:af:60:0a:e4:8d:a3:79:6d:
b1:e5:67:6b:15:9a:3d:8c:09:e9:09:cc:45:e7:28:43:ae:dd:
da:a2:a2:bc:b0:6d:99:77:75:0f:24:8a:21:bd:8a:ec:d3:07:
ba:65:cf:68:fe:05:86:75:a5:4f:7d:bf:41:3b:d0:56:c9:dd:
77:e8:34:71:99:bf:0a:17:99:7c:0a:c2:c4:e8:9b:c7:96:1d:
a2:9e:07:a0:35:8a:99:4d:eb:56:5e:3a:8e:44:ea:ac:38:7b:
a9:c6:ec:44:fb:e4:b8:6d:f3:00:eb:30:65:00:bd:ec:02:7b:
95:08:0f:7d:21:83:21:62:1b:f7:d7:aa:37:bb:b4:6c:43:31:
40:ec:85:ff:12:a5:63:37:99:42:65:eb:79:27:0b:a3:26:69:
56:1a:b4:34:de:ec:f8:8d:86:65:c7:6f:e1:a9:55:8e:0f:03:
86:76:be:49:91:9b:eb:ef:7f:8f:a1:c7:bf:ec:49:a7:c0:68:
11:f4:cb:3f:78:43:0f:70:8f:94:90:9b:68:26:ab:c7:97:67:
70:02:95:50:1e:a9:4c:b8:8c:10:e0:9c:d0:e9:5f:f3:d6:33:
40:43:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:26 2026 by rpki-client