Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: W57W3eKLt4jZ0z+oFhCclnDLMI3Nz8Z9LPPWZwyiWDw=
Subject key identifier: CE:7A:14:3F:7D:B8:31:0B:51:AA:9D:31:48:41:B6:2C:AB:E7:5F:7D
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 01A18940401077C92CDAFC9C5945EE4816B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0F41
Signing time: Thu 29 Oct 2026 20:00:51 +0000
Manifest this update: Thu 29 Oct 2026 20:00:51 +0000
Manifest next update: Fri 30 Oct 2026 20:00:51 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: DHakciRSgDse+RQ9/nX+3CIhU93n3Tx61g6uoSjVzmQ=)
2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:40:40:10:77:c9:2c:da:fc:9c:59:45:ee:48:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Oct 29 20:00:51 2026 GMT
Not After : Oct 30 20:00:51 2026 GMT
Subject: CN=ce7a143f7db8310b51aa9d314841b62cabe75f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:01:4b:79:a1:92:3d:d2:f6:fa:e3:36:85:
39:b3:f5:b2:ee:08:11:07:96:a0:d5:04:38:72:07:
23:20:f6:c0:6e:b8:f8:3f:2c:39:b8:85:67:e2:41:
07:72:e2:4a:f4:1c:1e:51:2a:e6:31:77:d5:de:5e:
6c:6c:5e:a6:71:22:8a:83:22:e5:78:b2:f9:1e:91:
13:1c:b4:02:f9:b4:51:d3:88:b9:38:50:df:e4:f3:
45:f9:db:3c:f3:d5:8d:2e:04:19:53:de:70:cf:f6:
49:e1:12:01:db:ed:bb:ac:b3:32:b1:74:74:83:40:
0c:12:c3:93:9c:0c:69:fd:ee:e2:d7:40:2f:8f:6e:
a5:84:76:66:bb:2f:d6:e3:46:16:31:9f:86:4a:e8:
e1:34:79:84:ef:5d:a6:77:a2:56:3a:5e:05:48:a6:
ba:e7:82:39:e6:e7:04:c0:68:ba:ba:4e:a0:89:55:
23:c7:a0:96:cf:a4:74:92:43:d2:08:d5:f2:74:8a:
c4:0f:5d:c8:5b:3b:38:f5:15:c5:ac:f5:bc:60:c5:
b7:59:2d:38:9b:b9:8e:18:cb:17:d5:3c:f0:ca:1a:
4f:ca:a2:85:4b:59:83:74:4b:d0:e7:a5:62:70:89:
52:ae:07:0b:b2:c2:ac:3c:f4:a3:88:e0:a7:fd:3f:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7A:14:3F:7D:B8:31:0B:51:AA:9D:31:48:41:B6:2C:AB:E7:5F:7D
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:ff:d8:0a:5d:9b:dd:c8:34:ac:9d:8a:d1:70:db:b9:7f:
66:e0:9b:c3:e2:80:cb:e4:fe:6b:10:be:a5:d0:1d:27:e2:1e:
80:15:8a:b8:71:4d:7e:8e:a4:db:4b:70:9b:ec:84:0a:b4:68:
b1:b3:1f:b8:55:4f:72:64:6a:5f:b7:0a:78:98:bc:dd:d4:1e:
e1:69:a1:a4:2e:5a:e6:80:c9:fd:32:c7:24:dd:41:de:d8:70:
e0:99:a6:8e:d5:c2:0f:45:32:88:a0:3e:da:a2:b7:43:ef:05:
3b:1e:ee:11:ea:f9:07:86:17:81:4b:4d:44:0e:ce:fb:53:a6:
d4:9b:1d:88:94:bd:93:61:21:dd:4b:60:a0:40:5e:c0:0f:b3:
12:50:8d:e9:bc:6b:66:64:4c:3e:ec:10:c6:ac:b6:a8:a3:ea:
c5:66:1d:89:00:25:8a:16:da:03:3d:53:ab:68:83:68:28:74:
be:a6:4b:75:fd:9f:48:4b:b2:5a:5a:a0:85:c2:ee:57:33:1a:
ce:f7:61:bd:8d:6e:8d:7d:5d:85:c0:52:6c:ca:19:1e:ac:6c:
a6:fe:58:ed:f8:25:cc:18:21:8d:d9:ed:6a:df:f7:25:1d:8e:
e3:61:e3:b0:d5:1b:0a:68:78:16:22:79:6f:bb:dc:99:a2:b7:
fa:ff:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:54 2026 by rpki-client