Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: ak9aKhaF8BLA2SkA+hN0ETlddz71zSQqHI6zAi3XSno=
Subject key identifier: 61:7A:C2:AB:3A:F1:28:F2:53:08:33:29:48:6E:AE:BA:7C:F3:9B:4D
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 01A18CAF694F4FDBE21E6206D58785B9C4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0F45
Signing time: Fri 30 Oct 2026 12:01:08 +0000
Manifest this update: Fri 30 Oct 2026 12:01:08 +0000
Manifest next update: Sat 31 Oct 2026 12:01:08 +0000
Files and hashes: 1: dvkk0AF8tQcZnUPQCg9wGxPygAk.roa (hash: rFoeKgkf83K3sPDF/5ELGk/RlwiuIW6RTOiVohUUKGA=)
2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: xo70H0AdI+zNR5IGZrvHEZOT070smkBxdKCaptysAXY=)
3: xoWvafIMJ6TLt2ZntxrZctfmhMc.roa (hash: Rhaku6Y4Ce9/CA5bX0DFke+wrnSAKtC/WyFWuc4Uj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:af:69:4f:4f:db:e2:1e:62:06:d5:87:85:b9:c4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Oct 30 12:01:08 2026 GMT
Not After : Oct 31 12:01:08 2026 GMT
Subject: CN=617ac2ab3af128f253083329486eaeba7cf39b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:2d:a0:86:cc:34:57:82:25:ac:46:4a:0f:
c4:35:50:9a:bd:8b:a2:28:71:79:c5:01:e0:cc:f3:
ea:7d:26:9e:be:84:1e:45:8f:a6:10:1c:9c:8e:62:
06:7d:a8:af:db:c2:f0:36:79:c4:48:a3:15:a9:ab:
ad:cc:97:a1:18:e3:7b:71:6d:44:59:65:56:68:50:
59:83:64:5e:10:58:f5:f0:97:2a:f8:32:fc:36:fe:
c6:db:2a:0a:77:45:77:2d:8a:6e:4c:c3:e7:89:8c:
4d:67:93:4a:2a:26:31:4f:32:24:bd:95:6c:b8:97:
db:48:aa:3d:5f:04:a2:02:35:0e:2f:e4:57:14:3f:
b4:21:44:7e:be:ae:c1:c4:ce:89:2e:75:fd:df:1e:
98:7a:b4:bb:10:9d:d7:1e:eb:1b:8f:a0:19:35:75:
54:65:8f:72:5d:24:24:c9:4d:55:3d:4c:32:e1:00:
b9:86:5d:67:41:35:be:49:a7:61:d0:b4:da:a3:27:
10:fd:3f:bc:c1:9f:4a:ee:d7:8e:a7:57:a3:f8:57:
41:1b:fc:44:44:56:ae:5a:13:80:e3:c9:16:17:02:
4d:d5:cd:5a:7e:66:7e:19:40:8e:8e:b4:2d:c8:50:
48:0a:18:c3:21:e2:bd:ff:8b:80:07:c1:1a:97:5c:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7A:C2:AB:3A:F1:28:F2:53:08:33:29:48:6E:AE:BA:7C:F3:9B:4D
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c6:bb:37:61:8b:75:65:a6:fe:d1:89:ac:ee:2a:c4:c3:2b:
86:74:2d:09:75:a7:a1:a0:87:8f:af:56:c3:1b:f1:6e:24:7e:
7b:69:e5:db:eb:60:54:fe:dc:8a:10:6b:18:05:87:d2:05:a9:
20:b7:98:71:1f:66:70:73:d1:63:63:fa:23:03:69:b3:31:a3:
bf:02:0b:49:0b:39:6a:d5:e1:39:22:6b:02:aa:75:8f:0e:b1:
e2:06:4b:72:65:fe:39:c9:56:1b:ff:86:d4:67:9e:31:63:bb:
28:86:da:75:8b:ad:f9:b1:a2:94:15:e1:a8:c2:7c:7e:53:d9:
20:9f:77:9c:bf:c5:38:5e:dd:d4:fe:43:ed:12:34:a9:b1:7b:
ce:f6:41:60:e3:fa:bc:2e:4c:1b:83:77:27:2d:de:a7:8c:09:
66:4d:0a:7c:81:a0:86:b9:9a:96:11:ee:a0:5d:ba:8d:63:d4:
e6:66:25:a3:46:44:c6:0d:f9:1d:33:50:df:94:b5:e5:42:07:
c6:8c:47:ab:84:0c:b9:e3:78:0e:fb:8f:77:b9:fc:05:bc:d8:
6f:58:34:61:4f:74:8e:85:1f:be:56:4d:e7:84:25:de:b1:cc:
a3:f8:47:6a:44:9d:3b:5e:69:9f:d1:c9:ba:24:49:83:d1:b6:
aa:df:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 21:18:48 2026 by rpki-client