Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File: IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier: scFuPdE40oBDFCFgL/I0mZ9IUGT2+Nb34shROXTx8as=
Subject key identifier: A1:D6:41:60:C1:BB:97:FE:55:76:BD:14:95:DF:79:E9:0D:9D:C5:1C
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer: /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial: 01A151E3FB0B5B7E53EE2C22F25C35BFA9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 02:00:57 +0000
Manifest this update: Mon 19 Oct 2026 02:00:57 +0000
Manifest next update: Tue 20 Oct 2026 02:00:57 +0000
Files and hashes: 1: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: NtR1Yuf20RD07BrZq34bl0am++VLlkWUCG51n8Kz+Bs=)
2: ToOm_DRG8L881LK0bTvQrJEi9zE.roa (hash: DCNqoXRqfdwODxjtc8J2/AVxGOKRF24UDLD2fHtc4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e3:fb:0b:5b:7e:53:ee:2c:22:f2:5c:35:bf:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Validity
Not Before: Oct 19 02:00:57 2026 GMT
Not After : Oct 20 02:00:57 2026 GMT
Subject: CN=a1d64160c1bb97fe5576bd1495df79e90d9dc51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:42:92:9a:0e:82:f9:93:c3:c4:cc:44:cf:
c8:5c:1a:14:43:f0:df:15:fe:e5:12:0c:c3:83:6c:
fc:8a:43:9d:37:6a:35:d9:82:bf:5d:e4:d9:45:a2:
d5:ac:53:c5:33:32:0e:88:12:88:fc:47:27:2b:d5:
b0:c5:4b:95:d8:e0:4e:c5:72:1f:08:75:ff:2e:fb:
11:27:37:f1:7d:4d:31:47:c6:8b:0e:77:09:73:f3:
c5:43:4f:08:f2:0f:1e:e8:92:bf:1a:86:f9:50:22:
a5:68:9b:16:75:c8:8f:92:9d:18:16:be:cb:27:6c:
0c:e6:43:1a:bc:e1:72:76:2e:65:4c:6a:bc:d7:c6:
2a:51:06:6e:e4:7a:60:c0:15:7e:67:f0:5a:36:f2:
77:c4:ca:48:a4:b8:2b:c6:79:2d:ea:de:4b:ab:37:
d7:2f:2b:ab:08:e5:8c:e7:0b:89:e2:9c:6b:2d:49:
77:85:c5:1f:8b:04:53:87:bb:98:30:b8:7a:37:d3:
b5:11:68:07:cc:df:b1:4e:64:db:4b:04:7d:12:7f:
28:f7:99:99:96:16:e6:82:13:ef:85:4a:84:f7:68:
6e:9c:55:b3:08:2c:2d:96:69:68:2c:e8:5f:38:db:
f1:97:e7:d8:a2:fb:93:97:9f:53:e9:7e:d1:79:a0:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D6:41:60:C1:BB:97:FE:55:76:BD:14:95:DF:79:E9:0D:9D:C5:1C
X509v3 Authority Key Identifier:
keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:36:e1:92:64:7a:2c:3e:96:c3:94:74:a9:8b:49:99:af:79:
57:d0:72:04:f4:67:8c:dc:2e:84:b3:91:ad:a1:26:a0:86:68:
86:40:3f:b8:4a:70:b9:0e:6c:aa:1d:b0:b2:88:1b:56:3d:ed:
40:f5:a0:bf:f8:9c:57:fe:b5:9e:8d:9d:80:ce:36:9f:0e:2e:
08:b0:9e:03:d6:29:f4:0c:75:c0:53:cb:da:39:8a:ec:a6:8b:
a2:96:84:0c:96:8a:54:35:f1:c2:75:63:4f:14:d8:fb:01:a3:
eb:9b:da:3f:e7:8c:1a:92:b6:79:dd:c7:09:1b:1d:5f:6c:53:
28:61:c9:c8:5c:79:c1:96:c8:a6:eb:ca:41:10:2f:27:25:bb:
c9:6b:77:59:ef:a0:6f:9f:68:74:3f:dd:33:df:41:bd:75:79:
fa:85:36:6b:23:ea:c1:7c:63:23:ba:60:db:c8:ce:9c:25:49:
e5:19:35:98:c5:8f:f0:68:1c:97:c5:55:3b:5f:d0:9e:c2:66:
ea:ab:83:75:3b:62:78:f1:05:1e:6b:98:16:aa:20:56:b6:2b:
5b:b1:26:ce:df:cc:eb:26:e3:3c:ab:ed:0b:60:89:31:32:1c:
e2:de:45:99:1a:28:d7:e2:d6:c3:b5:ad:31:be:f6:c0:41:d8:
e2:34:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:45:58 2026 by rpki-client