Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: uNrfFIPvH8ewDDqaCTCLKyRgbIOmWSdNmKPMN6rODxQ=
Subject key identifier: DF:72:C4:C9:74:BA:B5:87:AC:DF:EF:04:C2:C1:44:C7:88:7D:77:4B
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 01A1830741D1AF90823364E180AE51B303AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 1A9F
Signing time: Wed 28 Oct 2026 15:00:53 +0000
Manifest this update: Wed 28 Oct 2026 15:00:53 +0000
Manifest next update: Thu 29 Oct 2026 15:00:53 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: e9ByGisMIBFNBKhVkXNJLa1nLCzlDSNX4FZYcfx5tVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:41:d1:af:90:82:33:64:e1:80:ae:51:b3:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Oct 28 15:00:53 2026 GMT
Not After : Oct 29 15:00:53 2026 GMT
Subject: CN=df72c4c974bab587acdfef04c2c144c7887d774b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:cb:6f:0d:1b:97:43:43:88:3f:f6:a6:0e:
14:c5:4d:53:51:dd:09:98:92:61:46:fa:a8:85:ff:
a4:7f:22:ce:ba:4e:e3:26:7b:4f:ac:35:7b:ac:d7:
fc:f9:8f:46:93:c5:28:e9:dd:ac:e1:41:75:0c:24:
71:20:83:c3:b0:7e:bc:29:fb:2b:d2:fe:ed:47:0b:
cc:66:8b:99:07:2d:39:6b:36:27:4b:77:7f:9c:04:
8e:ef:0b:90:d2:c8:e9:5c:a4:d2:a3:e6:c7:26:a3:
0b:28:a1:86:1f:21:ed:ff:44:b7:b2:e0:5c:8d:e8:
62:61:c5:f8:fc:eb:f7:4d:27:3b:6f:69:a8:0b:a5:
3f:fd:64:b1:ec:ef:7d:ec:12:f3:5d:84:9a:f0:c2:
06:29:40:ba:a7:5b:ee:a8:af:10:52:99:c3:f5:20:
0c:ca:83:e3:87:87:01:1c:e3:3e:41:a5:38:79:a6:
6b:3c:ac:2b:43:6c:22:01:c8:eb:8a:ba:c5:dc:f0:
53:52:e1:bd:a2:76:e9:c1:3a:0e:4b:5a:65:89:9d:
6e:3f:1c:9a:23:5e:36:01:2b:7c:e2:ce:03:37:38:
49:e5:e2:58:3f:9a:9a:9c:1f:f6:06:31:17:b8:99:
e4:a0:c1:43:15:32:e9:b5:8e:28:fb:f6:ef:49:a5:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:72:C4:C9:74:BA:B5:87:AC:DF:EF:04:C2:C1:44:C7:88:7D:77:4B
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:69:ab:54:8e:97:25:67:d9:d6:00:31:2d:7f:22:35:13:cc:
a4:ff:d3:a5:a2:7b:e7:ee:92:1f:cf:ae:c5:0a:49:5f:0b:38:
5d:56:00:c3:d0:35:29:ab:6e:27:f4:f4:15:8f:af:21:5b:39:
c1:f7:bb:ff:a4:3f:bf:e5:54:17:f6:69:02:46:e2:71:26:3c:
43:71:01:67:ff:4b:4a:72:74:8a:3f:33:a3:ed:ab:cb:55:fa:
43:8f:ff:74:fc:39:b1:a5:a5:4d:a8:a9:ca:77:48:dc:ca:81:
ff:bd:92:ad:7b:cb:df:36:b0:f3:7f:fc:a3:b6:66:36:b9:65:
c6:b5:60:2f:84:e1:f8:41:e7:9c:9e:79:d3:cc:03:7c:47:3b:
bb:86:f6:30:62:00:00:f9:5d:f1:80:54:d5:6a:f2:2c:f4:a4:
37:90:2f:5e:c3:7f:90:74:d8:a1:1f:ac:0c:58:e2:ca:e5:94:
a8:21:b4:37:4e:c0:59:d4:55:e5:6e:d1:b7:10:35:14:5d:b2:
5b:d5:ab:03:77:7e:51:46:52:26:26:d5:4f:70:41:86:45:95:
3e:b4:53:2f:6a:3e:51:cf:29:cd:51:27:6f:6a:5d:c9:e5:61:
97:6b:a0:2d:30:5a:99:b6:a2:55:d8:78:1b:5e:c5:02:3a:03:
10:29:7e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:47:34 2026 by rpki-client