Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: SskFkqXkfsIcgK3/mZy0MIgrbMvYHxKLk5vtrkMm+yc=
Subject key identifier: 52:4D:53:4D:57:29:19:43:67:ED:1B:8B:15:56:87:F0:1B:FC:ED:4A
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 01A1908BB09259199D109CB245187259E603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 1770
Signing time: Sat 31 Oct 2026 06:00:36 +0000
Manifest this update: Sat 31 Oct 2026 06:00:36 +0000
Manifest next update: Sun 01 Nov 2026 06:00:36 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: 04AwozkJsDCnXhTQyKojcDieEAzzS0PoH93agCXatR4=)
2: hnmnA26xKXY54jFPUcSN_0PAckk.roa (hash: iZnIOMbwxqj7gdSqvCeT/1vFVrhvoJ0Z39/9nmcH68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:8b:b0:92:59:19:9d:10:9c:b2:45:18:72:59:e6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Oct 31 06:00:36 2026 GMT
Not After : Nov 1 06:00:36 2026 GMT
Subject: CN=524d534d5729194367ed1b8b155687f01bfced4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:96:58:dd:11:c3:e6:b8:48:f7:1a:d9:60:
bb:74:33:da:38:d3:7d:ff:c9:1a:54:ca:94:4e:da:
94:b7:57:01:82:c8:ac:8c:30:8d:ad:06:3a:89:45:
89:fb:6a:d6:8c:2a:a1:40:20:1d:7f:90:0a:ad:36:
47:56:4b:af:ba:73:a0:36:33:78:d5:eb:9c:3d:63:
5d:f3:28:27:db:bc:a5:d8:1f:d0:f8:d2:46:5e:b7:
cd:da:75:00:e1:26:1d:89:2d:fa:a8:9c:9c:76:46:
14:c2:11:5b:07:99:84:ca:07:55:b1:56:25:11:d0:
6b:40:8c:0d:d0:d8:63:9b:42:f1:63:3f:f3:85:40:
f8:21:ac:c2:6d:80:ac:60:e3:7f:c2:c6:c8:88:81:
6a:19:f0:c4:1e:d2:ac:02:7b:1f:f1:9e:f9:8a:1a:
09:c4:55:60:c5:4d:1f:80:3a:71:2c:ec:c5:66:60:
a1:8e:9f:fb:ad:79:99:f3:93:84:84:f3:2d:74:1a:
29:e2:25:1e:e1:b1:3c:1e:89:43:0d:3b:97:5b:4a:
9f:bc:a8:c3:2a:7a:f3:ab:4f:8c:b9:47:56:c7:d3:
f0:2f:6a:db:a1:bf:40:75:82:4a:64:3e:16:e2:68:
e8:1b:ab:7e:7a:d1:9f:3e:69:f3:d2:04:cc:0d:f0:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:53:4D:57:29:19:43:67:ED:1B:8B:15:56:87:F0:1B:FC:ED:4A
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:63:5b:48:61:03:e7:06:7e:7b:5a:e3:1b:19:9b:c0:48:30:
ba:25:0d:61:d5:9a:73:e4:58:a2:ac:e2:91:3d:24:4d:3c:39:
1f:e3:de:c3:a0:62:98:af:80:a6:02:4f:fe:95:89:9a:84:4c:
a4:86:ad:9b:f4:0c:41:b1:71:62:71:42:fd:cd:30:7f:3c:96:
bc:91:65:88:85:be:54:d8:64:ca:ab:59:1e:46:1d:3b:c5:6b:
44:16:3f:4e:9d:2a:6d:ed:9d:4d:c1:6f:ea:f8:ce:18:a3:37:
b0:ed:c2:f3:94:63:75:ec:a0:85:79:f3:55:9f:9d:39:48:be:
f2:16:26:6a:d8:57:ab:f2:7f:20:df:a0:5d:72:6a:be:50:62:
36:25:0c:ed:3b:bf:30:1d:7d:73:83:06:a4:97:88:d1:fe:11:
d9:0c:51:7d:db:94:81:eb:a9:71:38:41:f2:2f:cc:55:4f:fe:
e1:d3:9d:30:97:4c:25:4c:67:05:2e:08:0b:f5:30:fd:36:ca:
2f:f4:b3:15:8a:39:cc:19:be:fe:dc:a4:ae:51:48:ea:69:34:
8f:d5:42:9d:c5:01:2f:06:a1:b8:67:b7:ac:7c:ca:d5:35:88:
2b:9e:99:ea:b7:33:68:4c:f5:47:c9:4f:af:1a:0f:19:fd:8a:
fa:c1:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:49 2026 by rpki-client