Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: V3hdSsWMsPVAuQNhGCC2jZ5kTq3+wtsYz3xYZLbTEyk=
Subject key identifier: 2D:F9:D6:F2:C9:48:BD:A7:96:AC:57:C6:C8:CC:45:30:22:56:57:6B
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 01A17B8410DDE2B802765B60B1B394D95E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 117C
Signing time: Tue 27 Oct 2026 04:00:14 +0000
Manifest this update: Tue 27 Oct 2026 04:00:14 +0000
Manifest next update: Wed 28 Oct 2026 04:00:14 +0000
Files and hashes: 1: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: rBsaCdk3BhtEKiY78qXGTBW/wWOKIJqWC7s94jd5jZc=)
2: jzAkYuzy0NM24DLxJG0nO2NEr2U.roa (hash: wNAWGH60q5oOPI5elDbJUeO2WCg0rkQsTkxovsLZh+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:10:dd:e2:b8:02:76:5b:60:b1:b3:94:d9:5e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Oct 27 04:00:14 2026 GMT
Not After : Oct 28 04:00:14 2026 GMT
Subject: CN=2df9d6f2c948bda796ac57c6c8cc45302256576b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:b7:a3:bd:43:d7:67:1b:3a:47:b7:1d:f0:
cb:4e:3c:05:e8:b8:8b:e2:7d:b3:e0:e7:3c:3b:f1:
02:6a:db:82:c8:f4:dd:5d:27:39:11:ba:be:71:58:
59:11:18:60:f6:35:d6:87:a0:27:65:e8:2f:a5:ec:
3e:c3:1f:80:68:01:e1:e5:aa:d8:74:ac:0a:ce:01:
22:78:7c:23:49:70:56:37:e3:ed:37:89:26:45:25:
19:12:5d:99:b9:c5:9f:0e:85:f8:25:f4:87:91:ce:
81:67:a5:4a:8c:a1:6b:ff:bc:b8:68:d9:75:2a:20:
b5:96:a3:50:25:86:91:c8:fc:61:1c:0b:70:0b:ed:
78:98:ce:67:0c:61:3a:50:1a:33:0e:ce:16:d7:1a:
ae:1f:d8:e6:b1:26:dc:38:b7:79:a9:1a:24:28:a3:
49:95:6b:83:05:79:6a:f7:a4:c4:58:06:b7:b0:32:
15:9a:08:a6:fe:7f:e8:57:ec:b2:26:53:35:8d:56:
21:0a:1c:3b:60:42:7c:43:79:13:da:e5:26:40:85:
07:55:b6:f0:97:0a:a2:5a:87:ee:5b:2b:d3:9b:61:
72:f4:16:3c:01:34:e7:6d:ac:aa:e4:a7:39:3f:b5:
0e:5a:54:71:0c:28:17:8a:38:f9:1a:a7:0b:90:51:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F9:D6:F2:C9:48:BD:A7:96:AC:57:C6:C8:CC:45:30:22:56:57:6B
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2a:42:ec:dc:66:dd:35:7c:a8:e1:26:ef:2f:3e:a7:c1:44:
85:c3:1f:54:91:bb:29:35:1c:92:c2:e5:3c:6b:fd:c7:d9:76:
a7:c7:72:2f:52:89:2d:92:25:91:22:30:1a:65:da:bf:91:a9:
7a:57:62:14:82:5d:cf:c4:3d:f6:fb:58:a5:89:eb:d2:ee:a3:
83:98:57:58:b0:74:d2:94:04:67:78:52:f1:c4:63:b9:c1:5f:
2d:a1:5e:5c:27:50:28:b4:31:c1:38:58:a7:90:37:3e:ba:cf:
bd:e7:8c:06:2d:fe:2c:74:10:e9:f0:86:53:d8:77:02:2e:84:
44:54:ae:78:e9:8d:ca:68:a1:ad:3e:6d:b5:4e:b9:e7:5b:d7:
c4:8c:67:d7:84:5d:72:23:9b:7a:d8:b1:ee:9e:df:39:82:33:
9e:19:0e:86:3d:7b:39:c8:d0:24:7c:2f:4a:0e:8f:82:0e:a1:
04:10:5a:ea:d0:af:9a:4b:d4:54:31:a7:53:41:e6:4d:b5:43:
ad:15:4f:ef:0d:51:eb:1e:8c:ed:36:dd:7f:1c:89:dd:2f:57:
75:de:2b:c5:3a:56:80:ce:c6:ac:c2:35:78:3d:5f:bd:34:c9:
95:9c:3b:f8:14:17:b6:b5:bb:79:68:d8:08:0f:cf:17:44:bc:
1f:26:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:38 2026 by rpki-client