Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: e8Cp5rsSGbP65xjiWk6FDJD6UPE+rJ/BN570ZDvMrQw=
Subject key identifier: 6E:F7:2F:1A:50:78:3F:D2:D0:47:47:E2:05:13:0E:35:6F:32:48:DE
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 01A18676873B3C21F728693A03FAF42C7B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 1ACB
Signing time: Thu 29 Oct 2026 07:01:17 +0000
Manifest this update: Thu 29 Oct 2026 07:01:17 +0000
Manifest next update: Fri 30 Oct 2026 07:01:17 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: QqFyvj2faksdnebmB9Xzi8r42vj+xC9DeKb49bskQ7U=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:87:3b:3c:21:f7:28:69:3a:03:fa:f4:2c:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Oct 29 07:01:17 2026 GMT
Not After : Oct 30 07:01:17 2026 GMT
Subject: CN=6ef72f1a50783fd2d04747e205130e356f3248de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:2a:a5:c7:84:af:48:70:ca:0c:e9:1d:7e:
c2:f0:08:4a:a0:9d:a2:36:3e:7a:4e:4a:8f:f3:d8:
6e:b7:2a:4e:d3:67:85:9a:b8:33:3d:fc:a7:f0:e5:
44:7c:8a:e0:eb:5a:1d:0d:76:47:a5:5c:33:74:d9:
10:ac:ca:3b:e9:03:66:d9:40:85:46:3d:14:1a:99:
d3:a3:1b:0e:36:d7:98:3d:53:09:31:0a:77:f7:e2:
cc:ee:87:4d:69:8e:67:d4:03:15:9e:74:aa:68:55:
8c:3e:e1:41:42:d9:d9:2b:27:c9:71:a1:96:8a:0c:
ad:06:b4:5a:07:30:08:11:d6:08:61:80:c6:66:6e:
53:c7:8b:f3:d2:2d:4d:31:24:e6:99:93:3b:9f:73:
3c:64:11:f3:35:25:c8:56:5e:40:49:6b:a5:d3:05:
1c:78:07:d6:4b:7b:88:6c:3d:bc:ff:18:ac:41:a0:
8d:f4:52:ca:5d:e5:7e:4d:8a:44:b3:98:5c:f6:69:
21:4f:a6:91:34:34:0a:fa:2c:df:d9:57:df:86:b3:
f6:69:7a:9c:a1:f1:ad:17:7f:a6:8e:64:e9:d2:e4:
2a:dc:79:bd:27:e4:d9:d1:44:1f:01:6f:ae:b1:f3:
09:ca:02:76:47:9e:32:9d:9d:8f:30:b8:a1:5c:e7:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F7:2F:1A:50:78:3F:D2:D0:47:47:E2:05:13:0E:35:6F:32:48:DE
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:db:7d:0d:49:8d:b0:35:05:ef:e5:0a:a3:6c:78:6e:6e:b5:
53:22:da:76:e3:98:96:6e:98:56:b0:c7:29:82:80:97:dd:8b:
c9:67:9e:7b:eb:25:e9:d3:8a:a6:c4:46:12:01:33:ab:b1:bd:
41:c8:4d:58:80:d0:ab:01:c1:2f:ad:41:d6:57:2c:ea:e4:46:
63:5a:38:45:ef:b7:b6:4a:1c:c8:f9:79:cf:0d:d4:cb:3c:ca:
25:e1:31:c5:a8:52:05:8c:ec:54:8b:8d:80:30:e7:d1:0e:f6:
c7:07:95:06:75:fb:93:cb:14:f1:83:a8:9a:9a:7d:b4:0c:20:
28:1b:73:6b:aa:9d:46:93:48:73:d0:85:56:dd:46:87:e2:be:
bb:de:cf:0d:6f:e3:82:59:04:b6:f4:fe:d4:12:0c:cb:8e:9e:
d4:3d:0d:95:78:85:eb:91:43:3a:b2:3f:48:f7:6a:98:37:ee:
8d:ab:62:28:80:ea:ba:2b:88:89:f7:fa:14:73:5b:b6:68:86:
9b:89:9a:75:bb:b4:f0:e8:b8:41:f5:c4:e9:a0:82:cc:86:2e:
c1:81:87:6d:8b:d7:e8:e4:76:79:99:20:ba:5a:59:a5:bd:c0:
d6:04:8c:e6:81:39:ec:34:a7:3c:ba:f4:3c:53:94:d7:9d:7d:
e5:54:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:29:27 2026 by rpki-client