Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: mStg8I8q67Fo94ORq9+TVkgpy3Eios1yJz0A3Zo421M=
Subject key identifier: 6D:B7:A4:A5:26:A7:C6:7F:EF:65:F8:EB:7B:54:53:F8:E5:91:54:28
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 01A12A3155575A30B2B846670BFC829B10F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 1281
Signing time: Sun 11 Oct 2026 09:00:38 +0000
Manifest this update: Sun 11 Oct 2026 09:00:38 +0000
Manifest next update: Mon 12 Oct 2026 09:00:38 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: j6z55Vn4sAT6tXysoIrVehbFes0fzLoP8VZ1RhVre+g=)
3: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
4: dmE1mURwbo1v9xYDFiuIvh4HZz4.roa (hash: E0j3Vog7/eKV4rz8QxbpUA9nxxFmMsDogYNNNnTdFVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:55:57:5a:30:b2:b8:46:67:0b:fc:82:9b:10:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Oct 11 09:00:38 2026 GMT
Not After : Oct 12 09:00:38 2026 GMT
Subject: CN=6db7a4a526a7c67fef65f8eb7b5453f8e5915428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:71:0c:f1:c6:57:d6:5a:4e:11:3f:e4:b1:
7a:ed:4d:78:e3:b2:ff:66:86:35:84:af:f3:ec:41:
de:da:72:79:fa:28:af:c7:9c:47:47:e7:0f:91:7f:
f1:f8:41:e7:b0:b5:5d:54:98:ac:68:1a:e3:7d:b5:
15:ba:69:ed:f4:20:8a:62:99:b0:c0:fe:9b:f5:80:
dc:f3:c1:58:90:c2:58:97:92:8e:bb:3a:49:19:ca:
b8:d2:df:ae:29:50:71:28:d6:6e:9d:dd:4e:fb:d4:
22:b4:0f:d9:f4:df:06:93:35:c6:88:14:a4:01:9e:
8a:bc:15:d8:f1:22:5b:40:6c:4e:96:d5:4b:df:61:
7f:d2:b3:98:09:5a:f2:55:76:ac:33:8a:c2:8b:8f:
64:b5:78:84:d8:bf:2f:b7:a5:e3:79:8f:12:bb:da:
9c:54:a8:85:95:cf:af:ce:6d:19:8c:69:3b:a2:78:
7a:d2:68:73:8f:87:fd:27:bc:53:44:35:9a:90:06:
95:3d:3a:d1:f3:a2:66:21:5d:3c:71:6e:3b:a9:a3:
4b:0c:4c:9d:65:62:b7:6b:41:e3:0e:0e:29:e9:48:
ec:31:5d:62:c4:6c:e2:66:d8:85:eb:41:ab:da:e0:
9d:4d:a5:31:fb:79:1c:e8:38:3b:ce:3c:3d:77:13:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B7:A4:A5:26:A7:C6:7F:EF:65:F8:EB:7B:54:53:F8:E5:91:54:28
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:04:20:18:6f:62:cb:f2:e2:af:21:70:c4:64:af:66:10:c6:
c9:26:98:fb:d8:24:58:d7:9e:61:7f:51:68:15:3b:9f:ca:63:
b1:80:b1:21:72:4f:e6:d4:f2:75:30:a8:ba:a0:24:af:2c:bc:
a3:1e:e6:d9:ea:47:12:f9:dc:86:eb:a5:70:d0:b6:fb:d9:e8:
52:fc:e0:74:f1:34:0b:28:78:b0:a7:a1:04:62:83:65:d5:9c:
30:1d:0d:49:de:c0:df:f0:a0:c1:69:83:2c:ab:27:5d:79:6c:
4d:58:4c:b3:ec:74:0a:1e:3d:d5:88:74:cc:c3:ba:27:54:fe:
ce:e4:c6:fc:ef:0a:08:f7:71:4a:33:84:ca:53:29:83:97:bb:
5c:fb:cc:ad:3d:c2:fa:68:fa:44:39:bb:76:4a:eb:08:dc:ed:
af:e4:54:bc:7d:dc:fc:7f:7c:3c:ef:b3:0b:5f:e4:8b:01:9e:
b1:d0:a0:06:d5:54:fd:99:ca:f4:ec:a7:fe:29:72:ee:fd:bb:
01:32:1d:11:78:1c:7f:13:14:7c:0a:0a:5c:51:fe:6e:0e:cb:
19:48:9c:42:6e:1f:37:c9:a9:d1:3f:62:dc:e1:db:d8:1c:78:
d8:fb:0b:41:15:a1:0c:e3:36:46:66:8c:a2:30:6d:f7:79:11:
bd:ae:79:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:01:33 2026 by rpki-client