Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: 37Vo/Ks69ep9k25GVU82zLhVJZVPs9UoIxa1ZPcQD/U=
Subject key identifier: F9:9F:93:8E:B6:97:AA:99:9A:EB:D2:2E:B1:10:40:CD:B8:6A:8E:96
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 01A08DC4A91620715FF8AF0B83ECC66EC7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 16EA
Signing time: Fri 11 Sep 2026 00:01:10 +0000
Manifest this update: Fri 11 Sep 2026 00:01:10 +0000
Manifest next update: Sat 12 Sep 2026 00:01:10 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: zshKxSfSv6oc+DOtbRhDeuQL0MpiTMgKN/FgruZYwhU=)
2: hnmnA26xKXY54jFPUcSN_0PAckk.roa (hash: iZnIOMbwxqj7gdSqvCeT/1vFVrhvoJ0Z39/9nmcH68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:a9:16:20:71:5f:f8:af:0b:83:ec:c6:6e:c7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Sep 11 00:01:10 2026 GMT
Not After : Sep 12 00:01:10 2026 GMT
Subject: CN=f99f938eb697aa999aebd22eb11040cdb86a8e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:a0:68:37:c0:fd:32:e9:31:1b:5d:a1:e0:
fa:70:b0:c0:e4:b1:47:2b:bd:0c:21:43:0d:67:6d:
70:31:88:7a:13:e2:ca:3d:c0:dd:fc:a9:bf:ba:f5:
db:14:24:d3:64:b5:10:1b:e4:17:b7:57:55:94:9f:
40:90:1e:9d:a5:70:c9:70:8e:32:65:7a:7d:d0:95:
35:13:49:6a:4b:2e:9e:3f:fc:c1:05:39:a2:b9:3e:
d1:84:15:e7:65:88:3e:e8:45:e6:ad:db:55:57:ed:
34:8f:46:42:12:c4:99:47:9f:d4:96:c9:78:e0:8e:
7f:39:a7:2c:42:2a:1b:bb:8a:7a:1f:91:5d:20:b5:
10:b6:a2:27:4d:39:f0:86:01:5d:3f:08:38:81:1a:
26:52:05:a9:42:52:c7:7d:ea:dc:6c:ad:51:b1:1c:
c6:d8:e4:f4:e5:ab:4c:06:59:fd:25:64:ec:2d:5f:
76:50:c5:4a:d4:55:c2:32:c3:ad:ce:2c:34:c0:ef:
77:cd:57:11:7c:1f:b0:29:89:84:fa:63:69:b4:69:
4d:45:64:f8:11:2b:98:e2:99:ce:8b:0b:f2:f8:6c:
50:ae:12:e4:e8:4e:44:0e:38:9b:b9:54:e0:55:ce:
c3:71:25:6d:3d:63:f7:10:a0:10:a2:59:be:e8:e5:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:93:8E:B6:97:AA:99:9A:EB:D2:2E:B1:10:40:CD:B8:6A:8E:96
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:67:5e:2e:9d:0c:6e:86:78:81:6c:ed:b7:5f:cc:98:ec:ce:
f3:d6:c7:d2:52:b7:37:6e:0d:51:0e:55:34:1a:3b:f4:61:5d:
e9:04:3c:9d:c0:4b:23:1a:7d:aa:84:38:0b:6e:ca:fe:b2:0a:
93:94:4d:8a:f3:fd:7c:cf:7b:e0:54:7a:67:c0:53:8c:e4:7d:
ed:06:35:bf:d9:b1:bb:8f:fa:b9:d4:43:97:21:7e:86:d6:a8:
e2:9c:7d:98:80:59:ca:07:89:22:fb:7f:91:86:78:0b:ed:ff:
28:db:c4:44:e2:e4:39:02:94:71:63:93:ed:bd:6b:42:23:45:
ba:3b:16:50:59:3c:a7:9d:f6:8c:d6:31:1e:75:a0:e3:8b:65:
47:ab:5c:e3:51:1f:8f:9f:ea:f4:c1:a2:a6:7f:a1:07:6e:b8:
b5:89:b6:ab:9c:d2:95:e2:e3:b8:2c:7f:78:cd:31:66:f0:91:
e6:28:48:a7:fb:51:a9:21:98:4a:a3:0c:26:dc:e4:2c:0d:1a:
4e:d7:fe:c7:0c:d7:cc:e8:5c:e4:80:45:87:96:67:51:d7:4e:
49:38:b5:70:f6:f1:f2:b2:2c:c8:a1:73:e3:a4:aa:25:e9:78:
3a:da:48:46:c4:ee:0a:46:4c:18:9a:8a:06:de:b0:0c:8b:4f:
f8:3f:b7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:00 2026 by rpki-client