Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: /F4uV2mVZ3FsjSBYHTjjKdzZxUSCpvNFfmNoggKAtNY=
Subject key identifier: 01:FF:95:27:33:5D:E9:53:BE:D2:29:E3:BC:58:20:72:C7:07:21:7F
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 01A0B6F7F99DE327359724CC4C246E51E825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 1538
Signing time: Sat 19 Sep 2026 00:01:39 +0000
Manifest this update: Sat 19 Sep 2026 00:01:39 +0000
Manifest next update: Sun 20 Sep 2026 00:01:39 +0000
Files and hashes: 1: 19kTeJepP8HkpIg63hHdZMuI5pU.roa (hash: rYKL3pXSi0W4E3AFcHleDUG0Z3vGSYXA5D+E17BmR8U=)
2: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: EsLdm8ZFH2qOK3phchbq/TjbfmrLJf5f8vZ/iSK96cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:f9:9d:e3:27:35:97:24:cc:4c:24:6e:51:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Sep 19 00:01:39 2026 GMT
Not After : Sep 20 00:01:39 2026 GMT
Subject: CN=01ff9527335de953bed229e3bc582072c707217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:e0:fd:54:70:45:65:64:6a:ad:c0:47:8a:
8a:ab:25:cd:90:86:78:6d:d9:6b:3f:79:92:2e:e4:
86:ae:2e:f5:38:14:a0:74:f7:e6:67:e2:84:fd:d0:
da:4e:05:0c:42:4b:8f:19:f5:da:8c:d5:53:ab:f7:
11:ba:05:6b:7e:8c:88:be:b3:18:7d:ee:b2:f2:2a:
a2:3e:e1:8a:bc:0e:16:4c:23:a2:e0:e3:79:12:81:
a6:0e:c1:59:c7:e3:0d:02:63:36:9e:5d:cb:48:c9:
0a:07:b3:fb:84:80:5f:11:4b:84:f8:62:c0:67:81:
e5:05:57:ea:a9:00:ad:b8:45:3e:3e:b8:93:e5:f7:
e1:40:f1:bb:ac:6a:8f:3f:d1:6f:c9:63:0d:34:35:
7d:00:90:0b:67:4b:47:a2:89:d4:9a:cb:0c:c2:f3:
bc:97:a3:91:87:24:24:b4:63:6a:9c:23:13:81:d7:
28:dd:0f:ca:cf:2b:35:84:d8:95:ee:9b:59:ac:7b:
1c:1c:b6:33:42:f7:0a:f8:13:d8:16:45:a3:89:ea:
6a:4b:18:52:e9:20:17:43:05:b1:c7:85:74:ea:eb:
dc:a4:29:f5:77:46:48:21:aa:f9:c6:fc:e7:9c:cc:
53:6a:ee:3b:d6:36:3c:3f:3f:13:d4:ce:f6:16:78:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:95:27:33:5D:E9:53:BE:D2:29:E3:BC:58:20:72:C7:07:21:7F
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6b:1e:f5:36:6b:b1:28:a2:e9:73:ae:d0:73:8a:77:6b:ab:
85:b1:48:2b:05:1b:6d:8c:41:9c:98:de:7c:e9:05:1a:5d:16:
36:76:cb:44:77:e9:bc:43:c1:51:69:08:4d:ea:09:af:78:68:
0e:14:73:9f:ce:a7:a0:a2:c5:cc:70:f5:29:85:6a:d1:d0:44:
41:7a:28:e5:3f:3c:c6:6e:4a:1d:c7:54:4e:7f:60:ed:ae:5f:
68:71:29:60:de:98:ba:61:fb:01:ce:81:95:e6:b9:c5:cf:4f:
b1:3e:79:f4:33:a3:14:bf:b4:f0:8a:5a:69:8c:d2:fe:d7:95:
5f:03:ab:98:fa:0a:3e:c1:0c:9b:f0:59:83:8e:b8:16:ea:8a:
89:e0:0c:aa:23:64:c6:a8:c3:5c:81:7a:fa:c4:98:98:60:e0:
1c:00:7a:64:f2:0d:3a:f2:de:df:6f:14:79:93:10:26:60:d2:
f0:a4:48:15:4c:5f:ad:ed:83:f1:85:43:28:ca:eb:e4:d9:52:
e7:28:af:f9:9e:a7:24:de:e4:28:aa:bd:b2:d8:e8:70:c9:9b:
df:94:a0:34:dd:12:0e:f2:61:4e:9b:ba:1f:a9:7f:36:07:f8:
c7:67:93:9e:7d:90:2c:ea:74:6e:92:27:6b:0d:42:8f:0c:14:
d3:8e:32:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC29/md4yc1lyTMTCRuUeglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ODE2NjQ2M2ExYTMwMWNhNWI2ZWI5OGJkZGQwN2UzOTcw
OTE5ODYwHhcNMjYwOTE5MDAwMTM5WhcNMjYwOTIwMDAwMTM5WjAzMTEwLwYDVQQD
EygwMWZmOTUyNzMzNWRlOTUzYmVkMjI5ZTNiYzU4MjA3MmM3MDcyMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryLg/VRwRWVkaq3AR4qKqyXNkIZ4
bdlrP3mSLuSGri71OBSgdPfmZ+KE/dDaTgUMQkuPGfXajNVTq/cRugVrfoyIvrMY
fe6y8iqiPuGKvA4WTCOi4ON5EoGmDsFZx+MNAmM2nl3LSMkKB7P7hIBfEUuE+GLA
Z4HlBVfqqQCtuEU+PriT5ffhQPG7rGqPP9FvyWMNNDV9AJALZ0tHoonUmssMwvO8
l6ORhyQktGNqnCMTgdco3Q/Kzys1hNiV7ptZrHscHLYzQvcK+BPYFkWjiepqSxhS
6SAXQwWxx4V06uvcpCn1d0ZIIar5xvznnMxTau471jY8Pz8T1M72FniLfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH/lSczXelTvtIp47xYIHLHByF/MB8GA1UdIwQY
MBaAFIiBZkY6GjAcpbbrmL3dB+OXCRmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUt
MzhjMmMyYTc5YzM1LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUtMzhjMmMyYTc5YzM1
LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmse9TZr
sSii6XOu0HOKd2urhbFIKwUbbYxBnJjefOkFGl0WNnbLRHfpvEPBUWkITeoJr3ho
DhRzn86noKLFzHD1KYVq0dBEQXoo5T88xm5KHcdUTn9g7a5faHEpYN6YumH7Ac6B
lea5xc9PsT559DOjFL+08IpaaYzS/teVXwOrmPoKPsEMm/BZg464FuqKieAMqiNk
xqjDXIF6+sSYmGDgHAB6ZPINOvLe328UeZMQJmDS8KRIFUxfre2D8YVDKMrr5NlS
5yiv+Z6nJN7kKKq9stjocMmb35SgNN0SDvJhTpu6H6l/Ngf4x2eTnn2QLOp0bpIn
aw1CjwwU044ycA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:39 2026 by rpki-client