Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier: rKW01ljEfGHBotxVZaexbrOhDiVg6t1FpKBGl+1TJ6c=
Subject key identifier: D6:7D:BA:B3:9C:99:28:C4:EE:C9:5C:AA:85:97:7A:BD:AE:EA:58:EE
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 01A117180D4A28DF9118EC3B30F1E2B1C353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number: 091E
Signing time: Wed 07 Oct 2026 16:00:14 +0000
Manifest this update: Wed 07 Oct 2026 16:00:14 +0000
Manifest next update: Thu 08 Oct 2026 16:00:14 +0000
Files and hashes: 1: DXojyG6Fa76_70LTpGedxCQc75s.roa (hash: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4=)
2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: savBAimOev47VVt7UDahiLi7kYm1Qk+3tiqBny5+2uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:18:0d:4a:28:df:91:18:ec:3b:30:f1:e2:b1:c3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Oct 7 16:00:14 2026 GMT
Not After : Oct 8 16:00:14 2026 GMT
Subject: CN=d67dbab39c9928c4eec95caa85977abdaeea58ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:45:dd:c5:48:de:75:14:60:1c:f0:df:af:
15:4a:32:ba:30:a1:3c:a1:eb:d1:33:e0:46:7f:53:
2b:47:c2:69:09:98:f5:33:45:63:63:c5:e8:2d:bd:
7e:83:87:96:b4:3e:d2:fd:cd:76:e7:3f:3b:4f:32:
ab:35:39:1f:95:4a:03:0f:a7:4f:7e:70:51:4c:ab:
ea:00:79:6e:91:36:bd:4d:fa:06:6b:b0:0e:2e:9b:
48:ae:6a:e0:ce:2c:e0:91:cc:3a:11:a8:37:00:92:
13:fb:01:09:6b:ec:69:9f:0f:c0:16:6c:80:4a:99:
6a:c7:12:00:33:a7:ee:1b:9c:32:f6:57:28:c1:23:
f6:b6:23:f7:a4:0e:83:bb:c3:1b:8e:7a:c1:f1:16:
ed:35:26:8f:9e:c7:59:9d:d3:fa:ea:98:71:0e:b4:
f3:f2:e6:3c:18:bf:11:f1:4d:3c:0d:d8:ca:4a:ca:
54:fd:ab:e9:ef:dc:c6:f3:da:94:40:4f:c7:b1:26:
50:78:03:e7:4e:e3:f1:5e:9f:30:c5:c6:80:5d:2b:
9f:d7:5e:ee:be:82:0a:61:3b:f9:5e:8d:b9:eb:5e:
4a:7d:ac:0b:2f:21:66:6b:37:0d:eb:f8:70:2d:14:
0a:c8:09:53:f7:4e:a0:72:ab:67:ed:0b:09:da:ff:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:BA:B3:9C:99:28:C4:EE:C9:5C:AA:85:97:7A:BD:AE:EA:58:EE
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:29:17:cf:af:1a:9b:f2:87:1e:9b:43:96:21:c3:db:92:fd:
a4:36:99:b9:58:0f:e4:67:88:6f:3f:5b:b3:11:b4:a5:d7:8f:
51:4f:ae:25:53:3e:eb:3c:cc:74:2a:1e:ea:5b:4f:cc:c6:60:
01:31:4f:9b:ae:f6:48:da:cc:12:3f:f7:b1:47:aa:e5:82:7a:
5e:c7:46:38:f6:0a:f9:d8:31:28:a6:a4:a6:b1:f6:d1:a6:05:
16:a1:d2:41:93:4e:53:f3:5f:ce:eb:d2:17:27:7d:97:4b:a8:
dc:c8:ac:fc:dc:ef:d3:d5:06:20:00:25:ab:06:18:10:d0:35:
13:2e:42:58:41:63:1a:f1:ac:2d:b6:b9:26:3f:07:fe:0c:82:
cf:f4:f6:17:bc:b7:94:73:05:ad:12:50:e7:0a:c3:9b:b3:85:
d1:90:6e:ba:6d:bd:0e:a9:61:20:ee:d0:b1:79:01:45:2c:b8:
d8:50:cb:2a:20:bb:f1:1d:4c:18:32:cb:7c:37:5a:8e:a8:01:
17:4c:0e:ed:fb:29:c8:41:15:32:b7:7d:d0:27:b2:dc:02:b7:
f2:b5:26:88:e8:e2:25:ad:d9:05:e3:19:d2:69:63:91:95:65:
64:3e:fd:a9:71:01:d7:c3:e0:77:b8:a2:86:af:f9:d0:20:41:
82:c6:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:26:17 2026 by rpki-client