Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: apsvA2DQErYjG2Dr4liTS5o8TSmfT+NNbFru4+6leRY=
Subject key identifier: AE:98:6A:6D:8B:1D:C6:74:05:64:13:6A:DE:F1:27:17:14:D5:DD:A8
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 01A18E3034C1243B3F900FD9E323C5492670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 1ACF
Signing time: Fri 30 Oct 2026 19:01:26 +0000
Manifest this update: Fri 30 Oct 2026 19:01:26 +0000
Manifest next update: Sat 31 Oct 2026 19:01:26 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: M9mGIMnRCHKPN0teVmDsCa1Cmwobtc/Cr8uK74GelC8=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:30:34:c1:24:3b:3f:90:0f:d9:e3:23:c5:49:26:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Oct 30 19:01:26 2026 GMT
Not After : Oct 31 19:01:26 2026 GMT
Subject: CN=ae986a6d8b1dc6740564136adef1271714d5dda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:f6:47:d6:24:ab:e6:15:aa:d7:e1:2d:c1:
67:87:27:f7:64:06:d5:e3:31:e2:c5:d4:2e:e5:4b:
bc:5f:ac:e7:d0:76:a6:af:69:9b:72:25:15:35:5e:
d9:3a:89:1b:be:07:d3:c7:d9:85:42:41:8d:93:9d:
56:e3:8c:36:b0:fc:f1:c2:24:f6:d0:46:c3:6f:2f:
a0:76:78:98:07:d1:5b:10:57:75:5e:14:de:ac:40:
62:ba:71:f4:22:ab:6b:19:24:ef:61:48:6f:0f:b6:
3c:f6:be:c2:bb:4b:c6:6b:2d:1a:40:48:f7:66:df:
52:58:84:df:2f:95:33:49:4d:6f:d5:70:6e:c7:b0:
5a:06:a2:11:a3:72:29:a0:a3:3a:35:bb:70:c9:cf:
df:57:73:9f:41:c4:2f:f6:17:fc:5a:35:ac:7e:c2:
a5:75:bc:5f:01:79:ec:30:96:e3:d3:82:5b:48:89:
97:a8:09:e5:6e:45:62:76:26:92:cf:7b:ed:04:42:
f7:cc:90:3f:a2:f9:26:9a:da:fd:82:3a:a5:3f:2e:
61:9a:44:f9:60:67:ac:3f:d8:05:02:d7:62:92:94:
35:2f:a5:2d:07:33:7a:30:6b:30:fd:b0:4a:2a:b8:
92:90:f2:ad:fe:28:2e:e6:a6:69:ac:1c:6a:97:44:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:6A:6D:8B:1D:C6:74:05:64:13:6A:DE:F1:27:17:14:D5:DD:A8
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c8:7f:49:e2:ec:96:6b:ea:e8:9e:ca:d5:34:cc:93:71:47:
7f:05:a5:9e:ed:87:2d:8d:bf:44:88:de:0e:48:b0:83:85:68:
b2:43:43:55:aa:7f:10:ea:c9:2d:04:a2:b1:2d:b3:42:aa:6d:
89:42:02:9b:50:c1:11:2b:bc:05:38:c7:c8:ea:cc:fc:05:a6:
ab:89:e2:b7:c9:9b:3a:02:37:93:eb:24:b3:78:f6:b3:34:39:
f7:fb:18:72:81:c3:e7:cd:8f:82:92:f7:4c:95:32:0b:03:40:
1f:9e:f9:45:19:19:8f:95:a5:46:b4:9b:72:94:fc:19:10:1f:
9f:93:f4:ac:48:82:f3:f8:1c:a0:27:86:06:08:02:c7:f5:d6:
b7:3b:90:7b:6c:ff:99:bc:21:8c:c4:aa:a8:cb:5b:27:34:9b:
17:46:b2:7c:30:a1:d5:a3:52:1f:3c:86:96:83:fb:a7:a2:e3:
e4:b3:09:33:6d:fa:3e:62:35:c8:13:2f:70:cc:d8:f6:a4:45:
ca:28:c3:d3:b0:fb:82:91:87:a4:af:35:4b:87:0f:ab:11:f6:
25:3c:72:d3:81:29:04:bb:9f:aa:35:30:7a:93:ae:64:d2:07:
32:59:e3:07:7e:fe:1a:48:16:f0:22:f3:98:8e:c5:7e:c8:97:
26:4f:ce:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGOMDTBJDs/kA/Z4yPFSSZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj
ODg0ZTgwHhcNMjYxMDMwMTkwMTI2WhcNMjYxMDMxMTkwMTI2WjAzMTEwLwYDVQQD
EyhhZTk4NmE2ZDhiMWRjNjc0MDU2NDEzNmFkZWYxMjcxNzE0ZDVkZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5D2R9Ykq+YVqtfhLcFnhyf3ZAbV
4zHixdQu5Uu8X6zn0Hamr2mbciUVNV7ZOokbvgfTx9mFQkGNk51W44w2sPzxwiT2
0EbDby+gdniYB9FbEFd1XhTerEBiunH0IqtrGSTvYUhvD7Y89r7Cu0vGay0aQEj3
Zt9SWITfL5UzSU1v1XBux7BaBqIRo3IpoKM6Nbtwyc/fV3OfQcQv9hf8WjWsfsKl
dbxfAXnsMJbj04JbSImXqAnlbkVidiaSz3vtBEL3zJA/ovkmmtr9gjqlPy5hmkT5
YGesP9gFAtdikpQ1L6UtBzN6MGsw/bBKKriSkPKt/igu5qZprBxql0TJJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6Yam2LHcZ0BWQTat7xJxcU1d2oMB8GA1UdIwQY
MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt
OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex
LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8h/SeLs
lmvq6J7K1TTMk3FHfwWlnu2HLY2/RIjeDkiwg4VoskNDVap/EOrJLQSisS2zQqpt
iUICm1DBESu8BTjHyOrM/AWmq4nit8mbOgI3k+sks3j2szQ59/sYcoHD582PgpL3
TJUyCwNAH575RRkZj5WlRrSbcpT8GRAfn5P0rEiC8/gcoCeGBggCx/XWtzuQe2z/
mbwhjMSqqMtbJzSbF0ayfDCh1aNSHzyGloP7p6Lj5LMJM236PmI1yBMvcMzY9qRF
yijD07D7gpGHpK81S4cPqxH2JTxy04EpBLufqjUwepOuZNIHMlnjB37+GkgW8CLz
mI7FfsiXJk/Ovw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:19:35 2026 by rpki-client