Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: 5MJKmh5+EV3vDTSo1VDOUBCBZ9WactIALEA81rivHfI=
Subject key identifier: 38:91:8D:91:90:CF:7E:26:F8:CE:C2:2F:FB:D2:37:02:A5:0E:5C:96
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01A08AFA2FF841A7FCD0E5356B40B1F0BF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 11:00:46 +0000
Manifest this update: Thu 10 Sep 2026 11:00:46 +0000
Manifest next update: Fri 11 Sep 2026 11:00:46 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: Zeaay8KDSJxYasfth73wV2SXwk3wzWRwsWSaT6ZmNRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:2f:f8:41:a7:fc:d0:e5:35:6b:40:b1:f0:bf:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Sep 10 11:00:46 2026 GMT
Not After : Sep 11 11:00:46 2026 GMT
Subject: CN=38918d9190cf7e26f8cec22ffbd23702a50e5c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:48:cb:45:c0:5d:7c:72:5b:65:1e:e3:b6:
f7:8d:24:4b:43:24:79:eb:89:72:84:5d:1f:b6:87:
9f:95:ff:89:ac:c3:fc:b0:e4:97:68:92:d5:23:91:
cc:bf:f6:87:7e:f7:8d:13:6c:9c:9c:dc:f2:cc:c8:
b4:ed:53:71:24:fb:6d:ac:4f:02:76:cb:6a:d1:d7:
98:b4:0e:55:0d:75:d9:3f:7e:67:e1:75:54:ff:83:
4e:83:5b:8e:06:d2:a2:72:16:2c:14:04:b7:0f:e8:
be:ef:14:44:4d:0d:fe:f4:99:2a:48:82:51:58:0d:
98:a8:23:12:1e:e4:6f:af:b6:4e:86:d9:2c:a3:0b:
2e:8e:de:78:d1:ff:82:57:87:47:8c:fb:49:4f:92:
96:63:d9:87:d6:32:ae:58:f7:7c:6a:90:c9:e0:ba:
6c:22:d9:1e:69:2b:ec:af:40:6f:a1:67:5b:fc:24:
eb:5f:4f:9e:5d:8e:fd:43:50:d5:cc:40:76:2d:20:
6e:1f:35:58:10:89:7f:82:db:42:e9:6b:71:76:3e:
92:41:5b:07:51:32:ef:94:03:2b:cb:d6:cb:fa:ce:
1e:c9:73:d5:fe:f4:ac:19:df:1e:b5:0a:dd:dd:08:
25:7c:30:3c:29:37:25:16:60:b7:d8:8e:e3:2a:07:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:8D:91:90:CF:7E:26:F8:CE:C2:2F:FB:D2:37:02:A5:0E:5C:96
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9e:63:63:45:f7:ed:3a:3c:52:ad:e0:d8:f7:74:ad:14:d8:
19:04:6c:ff:ef:ba:9a:8e:d0:7e:c5:a4:aa:f8:67:ac:be:04:
e7:49:a4:7c:67:07:d8:ff:6f:1c:14:67:2c:42:5d:8c:3d:77:
36:46:1f:08:a1:4e:a0:48:66:bc:5c:ed:50:11:a4:ab:8d:80:
ec:17:e3:3b:b9:ad:ad:5f:64:9a:73:d6:86:6a:bc:21:a5:0b:
2c:a5:bf:49:9e:a3:12:5a:cf:bc:3e:e5:e0:c6:24:79:eb:db:
61:4d:68:09:01:fa:55:86:98:15:cc:44:70:fe:96:d3:f3:37:
f4:b6:7a:57:4b:be:b8:76:0f:80:85:75:f2:77:3d:31:b6:19:
94:a2:f8:f0:76:98:7f:72:4a:83:a0:4a:7c:c2:ac:97:6b:7d:
9a:2d:0d:7b:39:f1:9c:d7:a4:34:8c:e9:07:42:c5:77:9f:0d:
d5:50:f4:b3:6f:3a:9e:ff:fb:a1:9e:3c:6c:8a:49:6c:02:28:
1d:fb:af:9d:98:db:52:0e:5c:c0:19:a4:32:27:23:da:b2:d0:
e0:23:09:f0:d5:8c:96:06:e4:8e:e2:f7:dc:89:22:ca:86:cb:
dc:ac:c2:2e:0b:c4:55:fa:0a:20:2b:ca:a2:82:95:85:47:66:
78:c9:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:06:11 2026 by rpki-client