Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: br7C0xrViHQjXVj8+l8x4HOWEN4ilPIRdJH+8Xxjsrg=
Subject key identifier: 91:98:14:39:24:35:E9:A5:AB:AD:E0:D2:AE:86:70:05:07:32:09:D5
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 01A08BD5F26704DFAA4EE9BAB5D2FB4287FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0EC0
Signing time: Thu 10 Sep 2026 15:00:49 +0000
Manifest this update: Thu 10 Sep 2026 15:00:49 +0000
Manifest next update: Fri 11 Sep 2026 15:00:49 +0000
Files and hashes: 1: dvkk0AF8tQcZnUPQCg9wGxPygAk.roa (hash: rFoeKgkf83K3sPDF/5ELGk/RlwiuIW6RTOiVohUUKGA=)
2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: 5/CrsmQxqqNMGR4GORYBUbJR6FmfIK3qo2tHb7FsxrI=)
3: xoWvafIMJ6TLt2ZntxrZctfmhMc.roa (hash: Rhaku6Y4Ce9/CA5bX0DFke+wrnSAKtC/WyFWuc4Uj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:f2:67:04:df:aa:4e:e9:ba:b5:d2:fb:42:87:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Sep 10 15:00:49 2026 GMT
Not After : Sep 11 15:00:49 2026 GMT
Subject: CN=919814392435e9a5abade0d2ae867005073209d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:1d:08:d5:1e:4a:40:93:50:6d:86:81:f5:
76:58:fa:93:38:a6:b5:72:c1:05:ed:a9:ca:73:76:
f3:e7:98:b2:22:20:0f:66:87:92:69:84:d1:2a:c6:
62:3d:e5:ab:61:e3:c9:3f:63:54:b8:7e:7d:cf:00:
c3:84:b1:c6:1b:72:28:15:18:cc:02:3c:6e:30:28:
30:55:62:35:d9:9b:67:6d:d9:f0:36:60:05:9b:c7:
e7:36:2e:d4:6c:3c:99:5f:91:bb:da:10:6d:98:29:
62:bc:d5:28:59:b5:34:d3:79:7d:55:21:14:6b:37:
74:78:7f:0d:b8:bb:9a:8d:71:cc:57:b2:ac:73:f4:
31:e8:7d:30:04:c6:69:04:e0:0c:71:a4:0f:a3:aa:
dc:d9:d8:69:99:5a:70:f6:df:c8:11:86:02:6e:b0:
8c:79:c6:a2:1f:ed:c4:54:26:5f:c8:d3:64:5a:27:
32:14:e3:96:41:e2:6b:80:c5:87:36:c0:a5:a2:4f:
5f:45:55:bd:33:1e:46:c1:04:c9:dc:a9:24:93:a2:
61:04:e6:a7:4b:e9:d3:28:f9:f7:34:dc:32:b7:92:
bf:e0:ef:b6:fc:6b:e4:44:45:3e:1d:a7:54:68:71:
e8:89:3d:bf:3e:89:b3:ac:da:84:6d:d1:3a:ec:60:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:14:39:24:35:E9:A5:AB:AD:E0:D2:AE:86:70:05:07:32:09:D5
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:95:d4:72:c2:c1:09:6f:6d:ba:55:8b:71:a0:5a:c4:a2:a0:
d7:b4:d1:98:d1:bc:a8:14:e7:31:e3:ae:ad:6c:ab:45:fe:d5:
11:98:f5:54:87:3c:a4:ed:d0:10:84:af:f5:ce:01:76:01:3e:
d6:3e:62:1c:3a:d2:4f:d9:dd:bb:41:f2:4a:dd:fd:61:a6:1b:
b4:95:5a:af:af:76:5b:dd:54:19:14:da:2b:c8:9f:38:97:f6:
4b:03:f3:a1:17:20:28:f7:64:2a:f0:d1:30:14:d1:f8:4f:2f:
ab:46:92:2d:99:e3:82:3e:2d:fb:37:7c:1d:27:44:56:b6:3b:
e7:b7:23:9f:9e:6e:37:fd:11:74:8e:34:7f:7e:cf:ab:f6:2d:
1e:1b:b9:c2:df:b4:ae:00:cc:61:d2:f0:d1:36:4d:1c:28:88:
03:df:98:5e:c5:9a:10:ac:c7:95:4a:aa:22:f6:85:4f:26:b4:
61:24:aa:fd:14:f6:03:ff:63:f2:2d:c6:ae:37:20:2a:68:6c:
e8:0e:dd:41:0c:bc:c2:19:10:78:07:e7:d3:b4:49:ac:fb:7f:
35:ab:90:5e:b9:19:57:7d:70:d5:99:6f:49:58:17:45:3f:7a:
f5:57:fe:14:f5:96:23:cb:22:d6:e0:0f:df:50:0d:99:bb:2d:
20:36:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:41 2026 by rpki-client