Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: ylCR4LRndJqnmCrPx32WVY0oqvg8CdZRL6Qda9fdtOE=
Subject key identifier: A6:3B:8B:02:D0:23:65:A4:1B:89:D7:3D:EB:44:D0:19:8B:47:D9:B1
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 01A0E399C57671E30A0D21DE67B015293844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 1A7A
Signing time: Sun 27 Sep 2026 16:01:40 +0000
Manifest this update: Sun 27 Sep 2026 16:01:40 +0000
Manifest next update: Mon 28 Sep 2026 16:01:40 +0000
Files and hashes: 1: 1-NHEE18msw7q_8UgXeghsH6Ald4.roa (hash: FF/Xn9sNxWe9/r1ReZ8kDWO+yRUG5kzbjIqNIkiEZMA=)
2: 85Ye01P3vYW2SoshWRnHI_PVVes.asa (hash: TACNBPEbUEiMrnvGz9yncx2/1KD78oen4u9nuec4q4U=)
3: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: L+fvOz0nEA6MD0qMOXnkvXLbAEiWx55p8T2P4OzjUGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:c5:76:71:e3:0a:0d:21:de:67:b0:15:29:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Sep 27 16:01:40 2026 GMT
Not After : Sep 28 16:01:40 2026 GMT
Subject: CN=a63b8b02d02365a41b89d73deb44d0198b47d9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:31:7a:99:ba:cb:04:03:d6:70:3f:40:1b:
20:b5:e6:4a:8f:1b:79:8e:3c:a4:28:b5:37:62:c5:
5e:78:3a:66:1a:13:22:76:c4:6e:c9:5c:6f:0e:e3:
80:00:f6:4c:8d:50:47:06:95:68:29:37:15:10:e3:
50:5f:39:b0:f5:f0:93:fa:87:bf:f7:4e:35:cc:49:
20:7e:6b:22:19:8b:d1:3b:58:4a:ea:37:8d:95:ed:
15:c9:ba:80:10:c2:d8:73:0a:84:d5:27:9f:34:e2:
f3:78:08:53:16:bc:bf:dd:fa:e4:c2:ff:6d:05:df:
df:81:3f:57:01:6f:1e:62:94:7b:84:aa:c4:c4:28:
ab:c9:08:bc:73:c5:70:b4:98:45:15:bd:90:8a:c2:
db:40:10:11:7d:89:42:99:04:e7:12:54:36:fb:c7:
a5:ee:7e:4b:fb:dc:50:fe:72:55:07:7e:88:c5:8c:
81:d2:7f:c6:ee:2d:e9:fa:8a:c6:ad:06:c1:14:90:
7b:77:a1:9d:ff:d5:da:fc:8c:ac:cb:f7:a9:5c:2c:
87:db:36:e3:53:d2:12:ff:19:b7:92:63:c3:04:ae:
75:05:47:8e:0a:03:4f:91:49:9e:28:a2:2e:a1:46:
1f:4a:22:f9:7c:94:5d:40:dd:d5:d5:56:f5:a6:9b:
89:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:8B:02:D0:23:65:A4:1B:89:D7:3D:EB:44:D0:19:8B:47:D9:B1
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:43:3e:dd:55:4d:2c:f9:11:9c:73:fe:ec:da:5d:00:30:1e:
5d:8a:87:8d:2f:f2:18:62:c6:6b:89:25:39:97:6c:e4:57:27:
c9:a5:76:b7:1f:7e:0b:5d:0b:ce:0c:b3:c4:16:74:9c:c1:d6:
f7:61:9a:fc:3a:73:0c:3d:c7:45:d3:4f:e4:36:19:4f:c4:e9:
1e:c2:9c:00:0f:d7:43:e6:b5:f3:87:74:e6:7d:2c:e7:b6:df:
30:58:bb:0f:cc:1f:b6:c6:2e:f9:71:da:0a:0c:dd:37:cf:bb:
19:3c:61:10:a0:77:21:f1:f1:65:60:05:67:44:8b:4f:a6:f8:
e8:3c:bb:2e:fb:8c:3c:79:ae:e8:b1:af:5a:b4:f2:ed:15:5d:
65:4f:60:05:ca:4f:9b:df:2b:ba:44:5a:fd:8b:2b:28:ec:fb:
55:56:df:cc:b2:d8:c5:41:90:65:84:de:ca:53:c5:cb:79:7a:
70:08:94:1f:d4:fc:49:73:5c:bf:76:f2:9d:f8:4e:e3:92:22:
57:9b:28:8e:6a:0f:8b:6f:c7:93:56:87:75:44:59:f8:ce:41:
e2:03:ee:43:22:1e:6f:ff:66:85:7d:5e:25:c9:5b:16:1e:ae:
47:3d:69:99:ab:8a:48:17:56:5d:ef:03:5f:00:0a:46:9d:90:
0c:c8:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:59:10 2026 by rpki-client