Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: 2NvTMSUlwl9Dmxw8vCKssbIoz5t0aJ1Jpyxdh8e+zsM=
Subject key identifier: 48:B2:A8:D0:10:75:0C:F7:2D:44:78:5D:13:FE:30:A4:6E:55:E2:0B
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 01A186E3F17CF037C02E2A1603EB0D17C8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 0807
Signing time: Thu 29 Oct 2026 09:00:47 +0000
Manifest this update: Thu 29 Oct 2026 09:00:47 +0000
Manifest next update: Fri 30 Oct 2026 09:00:47 +0000
Files and hashes: 1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: FN68WW0ycmHfviUjQn+soZGzCSJj+gstkBwxZV5Xdq0=)
2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:f1:7c:f0:37:c0:2e:2a:16:03:eb:0d:17:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Oct 29 09:00:47 2026 GMT
Not After : Oct 30 09:00:47 2026 GMT
Subject: CN=48b2a8d010750cf72d44785d13fe30a46e55e20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:4c:bb:d1:fe:a4:a2:71:bd:d2:e5:c9:9d:
6a:1b:01:8f:b5:cd:f4:ad:23:2d:b3:40:d3:97:94:
43:14:15:03:2e:05:e8:68:95:d7:f3:57:13:ee:6c:
ad:9d:da:80:f1:58:ed:4d:c4:27:5d:4c:0a:69:8f:
d2:c0:2d:c9:88:ed:70:ff:ca:ff:da:37:66:66:53:
d0:99:97:44:8b:82:b2:d3:73:0a:73:31:59:b8:90:
9c:f6:7b:34:ed:5a:a9:a8:55:17:15:3a:51:6f:9b:
2b:b1:55:ad:f6:00:18:22:ca:52:60:1f:5e:c2:ee:
89:d0:2d:6e:41:a1:b4:be:44:64:e4:9c:f9:fa:47:
1c:ab:80:f9:4c:f2:59:94:2f:06:ff:28:00:d3:ba:
c9:8b:d9:ef:c3:1e:9b:e8:7d:fc:1c:3e:6b:97:fc:
98:43:51:77:2e:7e:3d:a6:0d:f6:91:00:c0:91:3b:
b5:41:21:a5:3a:7a:a1:ae:8e:e0:ef:9a:ed:92:d6:
3a:26:4f:ac:39:ef:fd:cf:1d:0b:67:f6:fd:8a:69:
0f:97:b1:74:b2:05:cc:97:30:b5:ea:9e:49:f2:06:
83:8e:e2:8f:2c:b8:ab:b2:4c:40:b1:af:85:8b:57:
9f:92:91:93:ba:5d:0a:94:77:b7:95:72:c2:3e:b9:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:A8:D0:10:75:0C:F7:2D:44:78:5D:13:FE:30:A4:6E:55:E2:0B
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:af:a8:9f:20:97:00:c9:b5:e3:bc:8f:00:10:ae:e7:e1:50:
a6:9b:37:b6:24:98:f2:db:7d:6b:d0:69:94:d4:8e:13:a2:ea:
59:b0:1b:2e:1c:9e:0e:be:52:96:0d:08:8e:be:75:0e:44:57:
37:cd:14:c7:a3:60:6d:66:20:2b:a6:59:ed:ec:3a:96:eb:b3:
5b:49:5f:b6:ac:a3:4b:da:dd:35:ba:c4:66:08:9b:9d:0b:42:
6d:25:08:9f:8c:a8:77:c1:42:06:14:8b:47:3a:05:2f:b6:71:
7b:7f:fe:bd:74:da:47:2a:88:62:c4:2d:38:41:8d:f4:af:c8:
bd:67:89:3d:77:22:24:ad:9f:83:cc:9a:e2:e5:d9:44:d1:14:
f3:91:e2:9b:79:5c:25:e8:7c:e4:b3:be:33:6e:58:50:81:57:
a5:60:98:7b:68:72:9f:91:e8:63:84:92:84:27:6a:64:fe:4b:
05:84:14:32:c0:e0:a6:d2:e4:4e:9b:8a:b6:aa:65:75:c1:9b:
49:d4:83:bf:ae:50:ce:a5:e9:45:ca:69:c3:47:c8:b0:33:ad:
e9:0d:3f:1e:a6:7c:c0:91:c1:a7:21:f1:31:57:e1:f4:2e:96:
0e:3d:77:94:f1:de:5e:d9:ed:0a:98:8d:12:e0:44:8a:c3:13:
cb:77:10:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGG4/F88DfALioWA+sNF8inMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDUxMjE1ZjZmMWJkMjI3ZGI3ZjQwZGY3NDhkNjRjMTA2
Zjg0YTMwHhcNMjYxMDI5MDkwMDQ3WhcNMjYxMDMwMDkwMDQ3WjAzMTEwLwYDVQQD
Eyg0OGIyYThkMDEwNzUwY2Y3MmQ0NDc4NWQxM2ZlMzBhNDZlNTVlMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri5Mu9H+pKJxvdLlyZ1qGwGPtc30
rSMts0DTl5RDFBUDLgXoaJXX81cT7mytndqA8VjtTcQnXUwKaY/SwC3JiO1w/8r/
2jdmZlPQmZdEi4Ky03MKczFZuJCc9ns07VqpqFUXFTpRb5srsVWt9gAYIspSYB9e
wu6J0C1uQaG0vkRk5Jz5+kccq4D5TPJZlC8G/ygA07rJi9nvwx6b6H38HD5rl/yY
Q1F3Ln49pg32kQDAkTu1QSGlOnqhro7g75rtktY6Jk+sOe/9zx0LZ/b9imkPl7F0
sgXMlzC16p5J8gaDjuKPLLirskxAsa+Fi1efkpGTul0KlHe3lXLCPrnBSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiyqNAQdQz3LUR4XRP+MKRuVeILMB8GA1UdIwQY
MBaAFCMFEhX28b0ifbf0DfdI1kwQb4SjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2It
NmM2ZjBlMzE5Y2ExLzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2ItNmM2ZjBlMzE5Y2Ex
LzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEq+onyCX
AMm147yPABCu5+FQpps3tiSY8tt9a9BplNSOE6LqWbAbLhyeDr5Slg0Ijr51DkRX
N80Ux6NgbWYgK6ZZ7ew6luuzW0lftqyjS9rdNbrEZgibnQtCbSUIn4yod8FCBhSL
RzoFL7Zxe3/+vXTaRyqIYsQtOEGN9K/IvWeJPXciJK2fg8ya4uXZRNEU85Him3lc
Jeh85LO+M25YUIFXpWCYe2hyn5HoY4SShCdqZP5LBYQUMsDgptLkTpuKtqpldcGb
SdSDv65QzqXpRcppw0fIsDOt6Q0/HqZ8wJHBpyHxMVfh9C6WDj13lPHeXtntCpiN
EuBEisMTy3cQjw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:53:04 2026 by rpki-client