Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File: IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier: lSRHrCmhHB/XVKEFEMOhhvIi3jNJ6rRO46Du5l/Has8=
Subject key identifier: 5E:DD:1B:39:90:5A:12:E7:71:3E:0E:63:2F:63:AD:01:C0:61:DD:DB
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 01A17EF41D41AD42DBC999C432CE52319EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number: 1ACF
Signing time: Tue 27 Oct 2026 20:01:29 +0000
Manifest this update: Tue 27 Oct 2026 20:01:29 +0000
Manifest next update: Wed 28 Oct 2026 20:01:29 +0000
Files and hashes: 1: 1-1889f_-iRQYnH3-fqXrOkR2ikE.roa (hash: /z9uTfpjXRCmTc6GwPli+bHZeS9FVw3t6IXyn4g2iag=)
2: 4tb80eIeaemuew5fxP0iEI9imgA.roa (hash: e9ASBdL/cxgsl0ZRb+D15EqqF9ntvaIWRU4Syd78R4c=)
3: 5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa (hash: wdooR1EonyLTBTWw2tpg6m0I9TSD570lR7yhgwvAcsk=)
4: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: aqN2o5uceUdEECwSC5umntZQtn3yePDghDagurBmEac=)
5: V6C5S8FHu-VQP7fJy_qJO2TbRW8.roa (hash: ERX1UGNBCgL3/72WnrYeAgNLYeESJE2SSaY/KZ9ee1o=)
6: xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa (hash: mElWxlPb4ggRHli9cITYJ0YySn8gxZXbhGQNUFYIVAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:1d:41:ad:42:db:c9:99:c4:32:ce:52:31:9e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Oct 27 20:01:29 2026 GMT
Not After : Oct 28 20:01:29 2026 GMT
Subject: CN=5edd1b39905a12e7713e0e632f63ad01c061dddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:46:da:43:28:f8:a2:c5:cc:fc:56:d4:60:
1a:40:51:88:c0:01:7d:19:03:25:ee:df:10:d2:51:
6b:e7:8a:63:3f:1e:7e:58:64:79:48:66:91:1b:37:
ca:83:30:b8:f1:6a:f1:73:56:54:5b:f8:34:d5:fd:
89:d0:66:10:08:cc:c0:be:20:15:35:84:41:98:ea:
0e:d1:c2:94:fe:0c:77:cf:8e:16:c6:9c:17:84:a2:
f4:88:1f:67:96:8a:78:5d:7e:4d:c1:61:28:0a:85:
69:19:9e:42:22:4a:15:d7:ea:18:c1:60:04:93:38:
18:8c:fc:1d:6c:c0:ec:4f:b4:a3:93:94:ca:97:52:
8a:c7:75:7b:03:bf:34:6e:de:e0:41:64:33:4f:b2:
29:09:3f:2c:c4:97:07:b1:43:cb:83:16:c8:76:4a:
bd:3d:42:1d:fd:6e:7a:f8:59:63:a1:6b:41:6b:19:
a7:31:67:26:72:c4:70:20:df:a0:6e:4f:31:35:fc:
11:8a:92:75:38:18:61:c6:2b:ef:00:77:18:8c:21:
b7:a6:03:c7:0b:83:0f:9a:79:bf:93:eb:54:5d:eb:
32:eb:27:f3:97:2f:8b:3a:e3:be:da:2b:1e:88:45:
b0:ba:37:85:c1:98:a2:74:4d:8b:54:00:dd:26:08:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DD:1B:39:90:5A:12:E7:71:3E:0E:63:2F:63:AD:01:C0:61:DD:DB
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:50:e5:fe:fd:64:ea:7d:3f:3b:b9:20:db:7f:fa:3e:9b:e3:
ba:99:87:60:68:a3:82:8f:8a:9f:8f:12:51:2d:90:aa:b6:ed:
de:8b:7a:85:4a:b1:31:a6:9f:1f:9f:48:a7:8e:ea:af:7b:1d:
01:98:53:48:28:28:e7:66:4a:20:45:1d:1f:6e:17:34:1c:29:
01:9c:2b:92:4a:8c:52:9f:43:39:e0:51:c4:9f:6e:e8:5e:3f:
e8:22:56:de:d0:e6:87:6a:3f:5b:b8:a6:d5:eb:99:7f:b1:49:
fc:71:f2:60:aa:b6:9b:4b:68:e9:c0:b2:1b:4a:7a:21:f0:40:
78:dd:24:95:ef:d4:e5:3b:fe:20:54:ab:26:a9:d8:48:3e:ca:
d2:71:69:02:db:73:05:55:a8:47:09:1e:75:15:89:3b:68:e5:
ee:79:e1:74:9c:dc:88:10:8b:d4:06:32:8e:92:b3:9c:72:4d:
b9:cc:45:e5:18:52:04:86:f3:af:d7:d8:01:51:2f:64:dc:f8:
13:bf:66:1b:b7:dc:84:59:fe:bb:44:59:08:15:a8:5f:f8:59:
11:69:33:8c:80:78:38:9d:66:b4:72:ec:63:83:10:6e:75:71:
96:97:de:be:f9:6c:0e:24:0d:03:39:d2:5f:98:5a:8b:6b:f5:
a2:2c:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:14:18 2026 by rpki-client