Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: IaTZxmTX61yxwZuOJqVGaPBHOitRPrnpuOe9+vibifU=
Subject key identifier: 49:35:56:3C:E6:68:AA:24:9B:D5:E9:42:2D:7C:22:7A:CD:60:EE:CE
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 01A162D80AE7DF76EF363D44C07BB8A94967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 1174
Signing time: Thu 22 Oct 2026 09:01:27 +0000
Manifest this update: Thu 22 Oct 2026 09:01:27 +0000
Manifest next update: Fri 23 Oct 2026 09:01:27 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: e2Em9JgbGrgqdMj/VRvhnuxeKUhSjZ2WN4mrOiEOjwE=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:d8:0a:e7:df:76:ef:36:3d:44:c0:7b:b8:a9:49:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Oct 22 09:01:27 2026 GMT
Not After : Oct 23 09:01:27 2026 GMT
Subject: CN=4935563ce668aa249bd5e9422d7c227acd60eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:e6:55:9e:cd:16:69:a5:84:e4:68:8c:99:
ff:8f:16:da:19:0d:b9:9d:1f:f2:fc:80:da:e1:bc:
26:9f:7d:b4:54:42:f4:3b:fd:7f:9d:0e:5e:ac:f9:
7f:d0:9e:3d:30:8f:65:5c:de:4c:b6:7a:e9:4b:43:
ba:af:7a:24:51:5a:6f:4e:36:8e:82:0f:d1:b6:de:
f7:10:66:24:6f:b7:13:74:25:c5:08:40:7a:4c:93:
b8:04:e0:a4:e6:d2:36:4b:a3:91:de:e9:5c:89:ff:
47:74:c2:07:49:1a:5d:70:8e:fa:ab:78:42:89:79:
77:00:a3:e8:38:d3:a0:d3:8d:b4:fc:38:eb:a8:a1:
99:b5:9a:4b:a1:42:9a:79:b7:c8:77:04:06:18:13:
ef:35:0a:69:c4:d2:ec:2c:b0:d9:3f:f5:41:30:a7:
83:8a:1e:8a:85:99:05:f3:ee:cb:85:6c:a6:74:94:
d8:85:fd:75:3f:a4:ac:ea:a1:d8:32:01:3e:f7:97:
a1:19:d2:2a:ec:5b:49:6e:b5:57:d5:c8:e8:34:71:
9c:56:23:ec:29:fc:bd:51:ea:cc:a6:cf:00:2d:6d:
23:35:8b:13:e3:9b:37:37:96:bd:cf:63:3b:de:f2:
ac:74:ab:1b:7e:49:a5:5d:70:8f:33:8e:fe:7d:10:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:35:56:3C:E6:68:AA:24:9B:D5:E9:42:2D:7C:22:7A:CD:60:EE:CE
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:17:38:a4:3c:68:2f:27:48:b3:94:9c:a6:10:a7:2b:c8:
1c:78:d8:08:bc:ed:54:26:14:af:fd:e2:ec:5e:9b:74:bd:43:
21:5d:84:7d:0d:9a:b9:71:9a:76:8a:d2:6d:f9:8e:75:e4:ea:
9e:a4:8c:a1:fd:ff:46:07:e0:73:b9:e5:da:7a:ed:38:0d:80:
07:50:2a:9c:3f:07:33:37:b4:61:63:d3:bf:6e:75:3a:13:db:
56:c7:4f:a0:14:e6:9c:45:5e:55:97:6f:6a:0f:a3:de:6f:39:
a1:0d:f5:06:d4:73:0d:85:ee:97:aa:2a:30:de:4a:18:15:69:
23:7c:4c:14:2f:3b:3f:79:68:b9:af:56:02:99:5c:af:13:58:
33:64:ff:56:26:7d:13:d6:8d:1c:1c:c0:c8:43:75:68:09:74:
fe:d3:95:fe:5d:71:d0:db:62:57:61:2c:22:9e:88:62:c9:84:
15:c8:95:34:03:a1:31:26:e6:d0:d2:c3:90:c3:0f:62:7f:6d:
04:b8:92:31:ec:72:dd:c9:cd:fe:5a:4b:82:8e:78:87:ee:13:
c8:9f:97:d7:cb:55:25:19:d5:f0:5c:b2:1d:3c:45:79:a0:f1:
da:9b:7c:dd:f3:71:42:79:90:a4:a1:bd:60:44:d2:58:4b:74:
64:85:e9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 13:05:21 2026 by rpki-client