Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: RcZTlzK5yRlPfjsZdyHYdS2lGIcYrxxtEohajulgdOU=
Subject key identifier: 66:84:F0:0A:08:F7:87:55:3A:50:7A:41:FE:41:7D:99:C1:DC:48:89
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 01A18608AE434B3E72929063E30D9A982B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 1A23
Signing time: Thu 29 Oct 2026 05:01:18 +0000
Manifest this update: Thu 29 Oct 2026 05:01:18 +0000
Manifest next update: Fri 30 Oct 2026 05:01:18 +0000
Files and hashes: 1: OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa (hash: tRxB0SccSN5sh50OIxV7iRImD06pzo5OWnyES6cYcyc=)
2: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
3: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: DpDcn6ALnJLnxiSR7ax1QFMOfwQUY+tpEsyIV5qqWlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:ae:43:4b:3e:72:92:90:63:e3:0d:9a:98:2b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Oct 29 05:01:18 2026 GMT
Not After : Oct 30 05:01:18 2026 GMT
Subject: CN=6684f00a08f787553a507a41fe417d99c1dc4889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:e3:f5:7b:0e:71:97:0f:95:68:a1:73:c2:
74:75:00:34:f9:32:df:60:ce:38:a5:eb:ab:3b:8d:
5b:aa:e5:0c:06:ac:0b:25:13:f1:59:4f:1b:8e:1b:
d7:da:e7:9f:7c:38:c3:e2:71:da:50:5c:81:a5:97:
90:da:e2:c7:a3:35:45:1e:59:2e:d2:26:e2:23:f9:
13:fb:85:76:d1:69:c8:de:e5:b1:9b:59:39:93:3f:
12:21:08:d7:e4:94:e4:90:f1:d2:4c:77:0b:57:1f:
e6:c2:06:b4:e8:5a:97:47:e8:48:4d:83:ca:6a:25:
72:ef:2c:7a:16:1b:8d:1a:de:e9:fd:ce:6a:65:a0:
be:3d:8c:8e:43:08:18:20:18:33:d1:2e:3d:2a:65:
2c:86:43:ef:95:e3:ce:70:28:64:75:d0:5a:fc:c6:
d2:03:68:1b:05:45:66:fb:55:a5:ba:95:b1:14:72:
f3:16:a7:5b:44:d3:53:74:81:fe:14:44:d8:4b:6d:
0c:2f:25:7d:a3:d0:7a:69:a1:15:05:3d:77:2f:bd:
e3:99:46:5c:58:e5:ce:0e:2d:d1:24:63:57:c7:3d:
54:23:55:74:ea:0c:ae:42:a3:c6:14:97:97:69:00:
e8:6d:0f:df:71:86:8a:d7:04:ad:d8:18:48:88:78:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:84:F0:0A:08:F7:87:55:3A:50:7A:41:FE:41:7D:99:C1:DC:48:89
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:40:7a:ec:4b:c1:cb:8b:b7:b3:f0:96:de:fd:04:da:17:65:
2c:d1:10:66:00:3d:40:fc:f3:c5:58:f2:3d:9d:40:bf:de:cd:
9f:0a:b2:81:d4:33:5c:a1:7d:bb:fa:b1:2c:33:8d:58:3b:0c:
a4:93:3e:1f:b3:5a:dc:57:68:fb:d0:00:3c:c5:09:40:f0:b7:
8f:bb:54:22:1c:0e:13:e9:d8:29:e0:4d:4e:f2:59:b5:2d:0a:
36:f8:f6:b7:93:bc:fa:2b:cb:e3:da:ff:71:63:9b:f6:83:8a:
f5:83:88:54:d4:4e:41:eb:a6:98:be:25:f4:12:b6:f0:71:1f:
5a:66:04:ab:78:c0:f8:f9:2f:6a:6d:06:b2:1c:fa:2b:95:a1:
19:f1:37:3e:ed:ef:d7:4a:35:c5:f4:ff:05:b8:d9:f1:41:ca:
fd:b0:d1:7d:98:84:8e:fc:e5:46:42:5b:12:61:13:27:65:3f:
ec:08:ae:7c:78:70:d2:4c:9e:66:13:ed:fe:cb:cd:f1:bb:5d:
cf:b5:e5:4c:35:aa:b0:bc:b0:b1:ef:79:03:50:2e:f7:c9:f4:
b4:5c:af:12:58:c7:c2:c9:5e:f0:8c:7d:58:7f:78:ed:c5:b8:
b7:86:61:bc:ce:d2:2f:91:d1:6c:a2:8d:19:2c:0f:b1:3a:47:
8a:23:3e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGCK5DSz5ykpBj4w2amCtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDRmYzRhZTEwNjQ5OWUwNTc1ZmYzY2ExNTU2ZGJjMGQ5
YjQ2NTEwHhcNMjYxMDI5MDUwMTE4WhcNMjYxMDMwMDUwMTE4WjAzMTEwLwYDVQQD
Eyg2Njg0ZjAwYTA4Zjc4NzU1M2E1MDdhNDFmZTQxN2Q5OWMxZGM0ODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0vj9XsOcZcPlWihc8J0dQA0+TLf
YM44peurO41bquUMBqwLJRPxWU8bjhvX2ueffDjD4nHaUFyBpZeQ2uLHozVFHlku
0ibiI/kT+4V20WnI3uWxm1k5kz8SIQjX5JTkkPHSTHcLVx/mwga06FqXR+hITYPK
aiVy7yx6FhuNGt7p/c5qZaC+PYyOQwgYIBgz0S49KmUshkPvlePOcChkddBa/MbS
A2gbBUVm+1WlupWxFHLzFqdbRNNTdIH+FETYS20MLyV9o9B6aaEVBT13L73jmUZc
WOXODi3RJGNXxz1UI1V06gyuQqPGFJeXaQDobQ/fcYaK1wSt2BhIiHhFUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaE8AoI94dVOlB6Qf5BfZnB3EiJMB8GA1UdIwQY
MBaAFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2Mt
MzE3NjQ1Y2Q3ODg1LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2MtMzE3NjQ1Y2Q3ODg1
LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0B67EvB
y4u3s/CW3v0E2hdlLNEQZgA9QPzzxVjyPZ1Av97NnwqygdQzXKF9u/qxLDONWDsM
pJM+H7Na3Fdo+9AAPMUJQPC3j7tUIhwOE+nYKeBNTvJZtS0KNvj2t5O8+ivL49r/
cWOb9oOK9YOIVNROQeummL4l9BK28HEfWmYEq3jA+Pkvam0Gshz6K5WhGfE3Pu3v
10o1xfT/BbjZ8UHK/bDRfZiEjvzlRkJbEmETJ2U/7AiufHhw0kyeZhPt/svN8btd
z7XlTDWqsLywse95A1Au98n0tFyvEljHwsle8Ix9WH947cW4t4ZhvM7SL5HRbKKN
GSwPsTpHiiM+Tg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:23 2026 by rpki-client