Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: Sp7io7rLs3pkqNvjijQOcmsbisdO6ngpM19irFzkNdU=
Subject key identifier: 04:60:5F:98:A6:3B:63:8E:B4:13:13:3B:F9:0B:35:C0:2C:40:80:87
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019EB5454D6EF16497514EEC9CB7A972E836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0A88
Signing time: Thu 11 Jun 2026 06:01:18 +0000
Manifest this update: Thu 11 Jun 2026 06:01:18 +0000
Manifest next update: Fri 12 Jun 2026 06:01:18 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: 9CE1eFRqwd2qKZC26nf6wfaWopiOFZlWdJpNXFVVxvs=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:45:4d:6e:f1:64:97:51:4e:ec:9c:b7:a9:72:e8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jun 11 06:01:18 2026 GMT
Not After : Jun 12 06:01:18 2026 GMT
Subject: CN=04605f98a63b638eb413133bf90b35c02c408087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:cc:7b:db:fd:4e:61:71:05:32:1a:af:3e:
ea:6e:78:82:2b:d4:6b:8a:de:c3:b6:3e:72:1f:94:
01:09:91:64:fa:ee:a5:b2:90:88:8a:9f:6d:b9:4c:
69:d4:de:ba:62:e1:6d:28:57:72:93:96:c9:fb:e2:
8c:88:a3:fd:58:08:1a:d1:fe:04:cb:89:49:11:da:
ee:ce:4d:f9:e9:4b:ea:b4:05:06:02:d4:a7:95:d0:
04:e4:99:03:cf:49:1f:a0:47:de:05:31:be:7e:98:
f1:c5:a6:a0:c5:2e:5b:3f:9e:db:05:8b:6a:ca:7c:
07:39:10:4f:18:78:64:18:91:79:8b:1f:d8:d6:e5:
d9:65:3f:f7:8f:62:08:df:c1:30:c2:01:0c:af:24:
8d:1e:d3:d0:ba:fd:90:b4:f0:23:20:32:87:11:7e:
10:df:04:ee:d0:9c:cf:7a:d5:1a:d9:7f:ae:e9:58:
b6:5b:98:88:46:b9:29:b7:bc:af:a5:0a:72:2c:78:
09:9a:cb:23:b6:ba:53:ff:c9:5c:61:7e:9f:0b:7e:
90:40:d9:7f:55:83:94:1c:9a:4a:4c:c1:52:10:4e:
eb:64:f3:b7:47:dd:85:3a:34:a2:65:23:08:82:e8:
89:c1:28:c3:16:d5:ca:f6:38:bb:f4:02:45:67:63:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:60:5F:98:A6:3B:63:8E:B4:13:13:3B:F9:0B:35:C0:2C:40:80:87
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:08:23:87:e7:be:8d:fc:5d:4c:99:f3:9e:02:dd:b4:d4:
b7:93:67:0d:a2:72:ee:58:a4:77:17:10:34:1f:2c:3c:47:11:
7b:3f:85:e3:3c:23:3b:89:98:82:af:0b:5e:4b:32:77:6a:77:
5a:3a:c6:ff:8c:97:bd:0f:ca:9c:08:5c:45:a1:76:fe:36:d3:
2f:9f:4c:2b:52:83:c0:1f:aa:79:23:f6:f0:c6:2f:79:47:c5:
77:06:53:70:86:53:59:47:5a:c9:2c:2a:cd:01:22:9e:e0:0f:
36:46:86:14:37:7c:7a:6b:6b:dd:aa:27:d5:41:02:75:e6:54:
1d:ec:e1:70:ac:62:e3:a2:0c:22:1b:c2:45:30:75:74:c6:81:
c6:b7:4f:8f:0e:fc:e6:71:4f:82:a1:18:22:88:e3:f7:e5:af:
28:96:b8:00:a7:dd:8d:5e:ec:52:c2:5a:78:1f:64:ae:2b:32:
23:d5:94:f8:44:ac:df:dd:16:78:cd:e9:2c:12:51:b9:c1:c5:
1c:a9:c5:50:3e:f9:69:c0:56:b3:13:5d:96:36:83:31:30:ff:
9f:04:3e:40:ab:29:67:51:98:a7:04:53:b9:b5:1a:d6:f3:70:
8f:db:9c:b7:93:75:84:0c:7b:cc:3b:66:89:13:50:23:86:b5:
2b:e6:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:06:52 2026 by rpki-client