Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier: RuddMb4ynhGWT6SfSm8WnG+GVHf5QBBavHYZAKtQHJo=
Subject key identifier: C5:AD:82:F6:18:84:13:DE:4A:20:A4:51:6C:9E:96:99:20:3C:F7:81
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01A16C11C7CFF9B813317C0BC755C108B883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number: 1AE8
Signing time: Sat 24 Oct 2026 04:01:06 +0000
Manifest this update: Sat 24 Oct 2026 04:01:06 +0000
Manifest next update: Sun 25 Oct 2026 04:01:06 +0000
Files and hashes: 1: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
2: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
3: M9b4OFhdBcloRT9CTkDgiDPo_xg.roa (hash: UD8QBLRere+zeS3eYPqWAJhgq/bNYUbcVCMckM22MZw=)
4: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
5: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
6: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: 9as5+fMvCiFmCKWRLpTJysbvDGNmthiepcEVlLEF01E=)
7: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
8: gqoQm8Lqdb4XkXQMCDcCwRURHZ8.roa (hash: +L7sYlMl7jfcXCPssFCunVRnMLOFkp994ICsnZ93rLU=)
9: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:11:c7:cf:f9:b8:13:31:7c:0b:c7:55:c1:08:b8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Oct 24 04:01:06 2026 GMT
Not After : Oct 25 04:01:06 2026 GMT
Subject: CN=c5ad82f6188413de4a20a4516c9e9699203cf781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:15:28:20:45:7c:47:02:ce:62:bd:30:de:ea:
97:ce:bd:08:69:cb:b3:ce:cc:d6:6c:33:22:5d:d7:
81:d5:1d:61:91:c7:e3:f0:c0:80:00:ee:4a:1c:52:
dd:cc:48:80:5f:27:0a:54:d4:a0:5f:10:fb:f1:48:
b1:09:f1:55:68:5a:a7:cf:bb:e8:cc:58:de:db:ff:
3d:d4:27:18:70:f6:26:2e:b3:e3:0a:33:4e:fe:26:
dc:0a:fe:a6:b2:73:5b:91:26:31:20:e8:16:ad:84:
3a:65:c2:4c:1f:c6:03:a4:63:e0:ef:32:df:af:35:
88:6e:26:5f:21:7b:90:1e:53:eb:6f:a0:47:6a:2d:
78:37:a1:65:6b:8a:d0:c7:d4:48:cf:2e:23:b3:3c:
c8:d8:98:15:82:8a:e4:f7:9d:b9:20:c0:ba:be:89:
d2:75:f1:92:2a:9c:a8:cc:a3:ab:c5:21:2d:ba:e0:
87:e1:9a:b3:82:62:02:ab:a9:1d:cd:d6:5b:95:12:
78:3b:90:0e:d7:a6:83:2a:b2:08:f7:77:a1:bd:de:
0b:12:d1:2e:1b:b5:e4:5e:b2:7a:87:28:7c:4d:1b:
f5:53:99:45:cd:bb:98:ae:36:d8:82:3a:f7:0e:62:
33:04:77:ad:ca:33:48:35:48:10:b6:5b:b9:db:6b:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AD:82:F6:18:84:13:DE:4A:20:A4:51:6C:9E:96:99:20:3C:F7:81
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:57:52:72:53:4e:53:b5:ee:64:bf:d4:96:86:7a:ee:9a:de:
83:6b:26:56:c2:20:fc:77:e6:05:12:e1:b2:b5:db:fe:16:a0:
74:36:a7:98:3d:c9:b5:88:bb:32:31:70:70:0c:4e:0c:f9:ed:
b2:6b:73:60:ac:34:0a:9e:33:f4:b4:47:14:4d:d4:aa:63:0e:
40:c9:06:56:0e:cc:08:75:ef:30:3e:cf:bf:7b:50:a2:0b:3d:
fa:20:e6:5a:58:9f:9f:42:2b:94:d4:e8:49:31:2d:3c:27:73:
10:68:10:58:d7:eb:ed:d0:e4:fd:e8:28:ea:cb:d5:68:cd:73:
f0:1e:ab:3f:a4:e1:76:3c:2f:77:e2:06:a2:c8:5b:63:2d:a4:
90:19:30:3e:44:68:72:19:71:97:a4:2f:1e:5a:41:74:7c:be:
13:44:50:8e:b0:07:25:16:9a:3a:18:53:f6:7a:b3:bd:57:4a:
5f:21:94:42:00:2f:ec:cb:71:6c:1e:bc:61:77:5f:e3:8a:cc:
69:23:ef:de:fa:07:98:3a:a2:d1:c6:ee:81:00:c2:04:a0:7e:
b9:ce:fd:03:e5:ef:64:9d:e7:00:90:ae:40:4f:69:58:b2:06:
c7:67:c5:86:ae:b7:87:39:b3:91:63:46:ea:20:56:12:83:ee:
59:02:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:17:52 2026 by rpki-client