Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: 8JyqLeshdxTVtNtm84U3GxWM53IYQa+YWwCS/5ajD/A=
Subject key identifier: 54:D2:44:28:4F:B9:AB:80:E1:80:4A:91:BE:CD:0F:50:EE:0F:5C:59
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 01A17CCE6F41935EBDF7AB9400A35C0C7552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 10:01:05 +0000
Manifest this update: Tue 27 Oct 2026 10:01:05 +0000
Manifest next update: Wed 28 Oct 2026 10:01:05 +0000
Files and hashes: 1: FzaSctWTm436xTaHu7cLIoR3zuI.roa (hash: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: VYKo57CGaGbgLfFMgUpBTlSlHkDHZVEhGffYshcH7sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:6f:41:93:5e:bd:f7:ab:94:00:a3:5c:0c:75:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Oct 27 10:01:05 2026 GMT
Not After : Oct 28 10:01:05 2026 GMT
Subject: CN=54d244284fb9ab80e1804a91becd0f50ee0f5c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:e5:3a:87:18:ed:ad:44:ff:1d:db:1d:58:
60:ec:52:93:92:f9:1e:90:5d:08:9d:97:87:2c:a9:
60:d4:21:3c:8a:62:23:0d:f9:99:2e:9c:df:02:cc:
e3:2d:f7:51:33:17:ea:12:43:fd:ae:15:70:85:ff:
69:21:3b:21:04:b2:4a:5a:8e:8f:93:96:f3:c4:2a:
09:6e:21:b9:ae:ca:9d:e5:bd:52:d0:c7:45:48:99:
9c:0b:e3:f9:b9:6d:a1:25:bd:b4:63:d0:40:a2:5e:
12:d6:e1:e1:49:5f:3d:fd:17:8e:c4:d2:63:50:05:
0c:19:9b:88:a4:54:fa:c3:1c:ac:ba:f6:f8:a8:2a:
24:26:97:c0:aa:c3:b9:8c:d2:2e:e0:0f:60:04:49:
d9:36:60:fe:6a:03:1b:22:a2:0a:80:a7:91:3c:76:
20:a6:5b:b1:c9:1e:52:0d:3d:4f:c7:ad:b3:a9:7b:
22:95:e2:60:da:03:3a:20:6d:32:0b:0f:40:da:75:
b7:ae:13:db:34:e9:f6:69:19:98:de:2e:d9:d9:6d:
e1:3d:c1:88:a3:87:7e:71:cc:29:24:a2:50:c6:89:
43:63:48:be:7f:a7:54:ce:03:96:a2:ca:9f:f9:b4:
ea:d7:80:dd:16:2c:24:ee:2b:8d:0f:9f:22:09:28:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D2:44:28:4F:B9:AB:80:E1:80:4A:91:BE:CD:0F:50:EE:0F:5C:59
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3e:1c:d4:6f:14:ed:cd:44:71:bb:a2:4f:2d:b7:d0:f9:11:
a8:c3:c4:11:13:94:9a:ef:53:d6:17:01:f7:3c:12:f5:9a:6e:
b0:48:b3:af:8f:6b:cd:cb:51:b8:09:2a:8f:68:cf:c3:42:6b:
f2:48:8a:dc:41:cb:fb:4b:87:93:8c:d8:63:c3:69:c3:cc:2e:
cb:0d:42:aa:f9:fd:1a:8e:fa:2d:0b:3e:a1:66:35:57:6d:35:
41:04:9e:f3:32:60:63:52:a5:36:99:2b:c5:80:37:3e:0d:ad:
b0:f3:ff:2e:c9:ee:bc:a4:59:4e:3d:f5:e8:93:b8:da:85:17:
35:e2:05:da:8d:43:0b:18:44:0f:94:00:91:ee:56:ed:b1:75:
f0:8b:36:b1:3b:b7:35:c3:8c:f4:9e:45:a9:b2:a0:39:09:58:
c4:ba:ee:aa:c4:25:37:e9:08:e5:da:75:8c:97:fa:e9:43:2e:
b4:eb:f7:b9:0d:8d:96:ab:15:8a:1c:f4:95:00:87:12:ac:14:
4e:c9:1d:fe:b1:9b:bb:14:b9:53:70:95:98:8b:a9:58:d5:9e:
75:dc:5f:3d:80:a6:af:d4:c5:9c:31:d6:58:ec:2c:a1:d0:aa:
ca:3e:30:90:30:be:9b:1b:ef:94:46:be:fc:bb:ed:34:3e:1e:
d3:79:f5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:46 2026 by rpki-client