Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: Uy4D3S857WYizpnArjMNJo/cyriObHg2kNENkUmSk7Y=
Subject key identifier: 69:F2:3C:1B:61:7D:51:57:11:E9:D2:59:E0:7A:C8:D1:A7:E2:43:A6
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01A084C17B3E55A66463D19B06FB63A19BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0B78
Signing time: Wed 09 Sep 2026 06:01:07 +0000
Manifest this update: Wed 09 Sep 2026 06:01:07 +0000
Manifest next update: Thu 10 Sep 2026 06:01:07 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: AbpxLnrVjMIPAYxsqGCjTqouxm0IJ+2ofgC5voVOeEs=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:c1:7b:3e:55:a6:64:63:d1:9b:06:fb:63:a1:9b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Sep 9 06:01:07 2026 GMT
Not After : Sep 10 06:01:07 2026 GMT
Subject: CN=69f23c1b617d515711e9d259e07ac8d1a7e243a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:b5:ec:07:a1:f2:f5:dc:6a:86:bf:8b:fe:
f5:ea:ea:73:d0:4f:f7:73:bb:de:80:f5:4c:be:6a:
8e:89:4d:6c:d8:c6:03:b6:50:43:f7:0a:a4:73:d1:
bb:bf:9b:9f:ab:a1:b3:d4:44:8a:e3:2e:97:80:1f:
7f:cb:b3:2a:ad:83:de:03:3a:da:dd:2c:8e:bf:19:
81:c4:fd:bc:4e:38:bb:c9:1a:b5:25:57:01:67:dc:
d1:6e:58:aa:f9:5e:7e:25:18:1c:1e:80:c3:07:c6:
c3:c0:34:5f:5a:be:cb:2f:3f:04:dd:b5:d7:09:0e:
95:5b:89:96:b5:65:c6:b4:01:60:63:95:10:36:80:
78:f6:4b:4f:d7:5e:e0:98:27:45:4a:85:6d:04:15:
6c:4b:dd:b5:b9:78:d5:cb:2e:66:85:f5:44:63:fb:
63:5b:e1:03:f2:94:b3:00:d8:f4:8c:91:6d:7e:fd:
a7:c0:e4:45:c8:de:be:84:11:0c:fa:f0:50:f6:62:
64:52:af:da:a6:7f:8a:89:05:4b:c9:ed:c4:43:b2:
02:4b:10:58:0a:eb:c9:ce:13:34:3b:9f:c4:bf:0f:
42:32:cc:f2:2b:9e:81:0a:b3:c5:98:7b:e1:85:38:
2b:ba:58:80:94:4f:42:de:d6:d8:10:ba:06:a0:dd:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F2:3C:1B:61:7D:51:57:11:E9:D2:59:E0:7A:C8:D1:A7:E2:43:A6
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:59:3f:33:c5:9a:3f:ba:8c:ad:8f:c4:65:10:e2:7f:44:e1:
0a:43:62:6a:49:19:a2:59:bf:2b:54:e1:bb:8b:d3:1f:74:74:
23:a2:c9:21:30:d7:e4:2f:3c:f1:6b:32:3a:69:64:86:9f:82:
68:9b:9c:01:7a:91:93:47:a2:90:de:94:47:80:fe:86:8a:b3:
b0:13:00:ff:98:7c:d9:bc:ca:9c:d6:f3:b9:14:7c:c2:36:d4:
38:65:a1:00:e5:ed:36:60:9c:e6:e0:98:de:fb:5c:71:9a:ae:
ad:cb:d2:6b:5d:d7:0c:6f:02:bc:7b:72:0c:68:35:fa:04:d0:
67:d4:61:41:62:8d:d7:63:c4:fc:53:4a:b3:6b:28:ad:58:5d:
54:a8:dc:d6:0c:65:86:32:34:26:43:8f:f9:68:ef:95:67:19:
5f:53:cf:ea:35:8b:58:73:c2:39:3c:dd:ef:eb:73:fa:c6:2f:
1b:ec:11:e2:f8:5d:54:58:fe:2a:b2:1e:c2:31:75:5f:ce:35:
9e:5c:2d:21:b6:8d:36:c7:2a:d0:1f:9e:b8:73:f6:a6:a4:40:
b0:9b:0b:b2:c4:57:42:b2:0b:dd:07:68:e3:8b:b2:99:f3:89:
be:54:2a:b0:fc:42:47:8d:ca:44:5c:8c:2f:85:6b:34:26:f9:
bf:33:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:39:18 2026 by rpki-client