Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: HP5AR+Qai1EP9KHNM82lTjfcC90kyGX34s4lRZDvjH8=
Subject key identifier: 65:FA:08:B8:ED:E0:07:40:BC:5B:D6:F2:EA:0D:F5:32:A4:0B:63:3B
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 01A08AFA401F4E703BFC7B87C6D996526BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 19A1
Signing time: Thu 10 Sep 2026 11:00:51 +0000
Manifest this update: Thu 10 Sep 2026 11:00:51 +0000
Manifest next update: Fri 11 Sep 2026 11:00:51 +0000
Files and hashes: 1: OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa (hash: tRxB0SccSN5sh50OIxV7iRImD06pzo5OWnyES6cYcyc=)
2: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
3: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: wQs17i75n2cQmjAyJKe4NQ1q3FhXiS7FIenw44T+9dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:40:1f:4e:70:3b:fc:7b:87:c6:d9:96:52:6b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Sep 10 11:00:51 2026 GMT
Not After : Sep 11 11:00:51 2026 GMT
Subject: CN=65fa08b8ede00740bc5bd6f2ea0df532a40b633b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:ac:6c:ad:19:0b:6e:7b:3b:75:8f:ef:c3:
af:43:d9:7b:a2:e5:73:47:d4:1d:ad:5d:49:f5:2a:
80:8c:40:11:0f:48:4c:7c:26:a5:e0:8d:b5:3f:a4:
8f:ca:d7:91:d3:ce:30:7e:17:89:c9:db:ba:09:ad:
21:5a:c4:92:a7:c2:bd:9e:0e:02:1b:8d:cb:4f:d5:
e5:eb:2e:19:9c:47:a6:de:38:61:b9:bd:5e:c0:c9:
72:1c:d6:1b:48:db:1c:80:2a:7f:af:e0:9d:c4:92:
60:05:64:e9:dc:f8:a2:6c:29:24:7e:56:38:c1:06:
1d:c9:99:be:02:da:25:0d:09:63:41:11:6d:a2:2a:
d9:d0:3f:26:6f:6a:d8:27:61:5e:af:84:76:84:67:
9e:aa:65:36:28:63:84:16:58:ef:d9:98:89:2d:90:
68:eb:7c:ca:c6:ed:a1:b6:fa:5c:d5:3c:eb:81:e3:
ef:08:64:9d:69:f3:ad:ed:cb:f1:d6:5e:6f:cd:8b:
e9:b7:00:15:75:7d:da:a7:8c:72:f1:55:d6:fc:48:
26:22:b6:59:7b:01:0b:90:f6:dd:83:08:87:f6:8f:
17:b6:89:42:8f:ef:72:1b:e6:5d:20:2e:7a:14:0b:
ae:85:ab:29:85:61:30:42:b6:a9:fe:94:a5:67:e8:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:08:B8:ED:E0:07:40:BC:5B:D6:F2:EA:0D:F5:32:A4:0B:63:3B
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:29:6e:b1:94:ee:ba:cd:0d:5c:95:ea:6e:01:70:b0:f3:
31:01:e9:6f:14:7f:2e:97:75:9c:63:17:02:bf:b4:a7:6b:68:
78:c6:47:0c:c7:2d:43:11:ba:c7:03:d0:ed:8a:a2:0c:40:cb:
76:29:ff:4f:ee:07:b8:97:c5:4f:2a:79:8a:1b:34:fa:11:98:
8a:7b:f6:a2:0b:92:5c:3a:d6:66:05:50:0a:e9:ff:40:63:c9:
e7:b7:00:f7:89:db:a9:24:35:d7:b4:3e:ed:8f:4f:dd:c2:65:
8f:40:bb:a4:a4:4d:71:85:af:d0:ca:7f:18:de:10:d6:eb:ae:
ea:58:ce:14:bb:6d:e6:4c:d4:29:fe:d3:37:b7:8e:e7:60:dd:
5f:8e:c0:6d:e1:2b:b3:fa:b4:c7:af:f8:25:13:fc:21:41:19:
21:75:a7:fb:02:3d:87:3b:3c:57:3c:c1:79:0b:92:e0:92:41:
a1:3a:c0:a8:f3:e1:72:77:87:22:d9:88:ca:f0:ab:b4:4a:cd:
2a:66:22:e1:47:2f:56:3c:63:76:f0:a1:94:09:a2:b9:80:3d:
64:3d:82:0a:43:c3:75:82:b9:34:5b:1b:30:65:b9:a4:b9:2d:
af:e8:bc:38:99:7e:5c:64:97:ec:52:89:c3:1b:16:25:df:9f:
0f:6b:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:52:03 2026 by rpki-client