Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: t+hQ0wJWaLGWguflp4Np+dN2ubVhYE49I9SA/4FsiI0=
Subject key identifier: 74:CE:EC:C4:03:45:F3:DC:6F:8A:9E:73:3E:CD:8F:C4:25:08:F7:C3
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01A17A715ED268CC6A16CF010F343090A0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1A56
Signing time: Mon 26 Oct 2026 23:00:12 +0000
Manifest this update: Mon 26 Oct 2026 23:00:12 +0000
Manifest next update: Tue 27 Oct 2026 23:00:12 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: Ejmaez9JtiAQ+GSzEhrQZUW+CvyPjVde1gmEtmPcMC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:5e:d2:68:cc:6a:16:cf:01:0f:34:30:90:a0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Oct 26 23:00:12 2026 GMT
Not After : Oct 27 23:00:12 2026 GMT
Subject: CN=74ceecc40345f3dc6f8a9e733ecd8fc42508f7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:86:6b:2a:aa:fb:c5:05:f0:2c:5c:0f:2f:
ce:80:49:9d:c3:09:46:01:ed:7e:ed:b9:6b:2b:a8:
aa:33:e6:a1:27:66:f2:b0:f5:e1:5e:39:f2:4d:e4:
8f:d7:73:23:eb:76:c8:9a:0a:6a:40:6c:cc:e5:08:
31:09:5b:14:f2:2f:72:24:10:42:aa:1b:d3:55:ac:
c1:ad:f8:5b:d0:11:d6:87:2a:ab:dd:a7:b9:a2:1a:
fc:54:9e:c0:dd:b4:07:28:c3:67:bb:3f:7e:8d:e4:
7b:25:23:0e:00:7f:73:ce:68:9a:53:e8:d2:53:b5:
f8:9b:43:b4:28:5e:1e:7b:38:99:27:b6:89:cb:b1:
9a:99:8a:ce:62:55:9f:e5:19:5e:15:f5:df:ab:8e:
1a:9f:38:51:db:2e:91:5a:d8:f1:56:18:bc:32:be:
ca:9f:0d:c4:33:cc:96:a2:11:29:e5:b8:3a:a6:20:
f1:5c:7e:13:23:d4:a6:6a:c4:c8:f2:3f:b6:32:41:
ce:01:6c:1b:60:a3:b7:ba:31:da:de:e6:a1:c1:3a:
6e:81:18:24:11:3b:c1:ef:79:d6:57:e2:ab:ec:e6:
02:f8:18:f9:75:4a:08:cf:65:3a:59:df:98:1f:31:
38:a5:5c:36:6e:40:d3:ca:1d:1c:9d:f4:c1:49:39:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CE:EC:C4:03:45:F3:DC:6F:8A:9E:73:3E:CD:8F:C4:25:08:F7:C3
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d1:03:d0:e3:d3:af:79:80:47:8b:61:c4:42:de:fd:7e:02:
75:5b:63:11:a6:27:74:49:56:6d:24:43:20:70:6c:bc:ec:96:
e7:5b:d6:ab:96:80:de:69:cd:df:b1:4d:c9:27:c5:51:a4:b1:
ed:e2:32:50:16:12:31:d3:9f:6a:ba:2c:98:c9:67:dc:ed:5b:
39:93:1b:07:2e:47:15:b4:e6:23:fc:8d:2b:6b:c6:82:23:3a:
ae:24:6c:90:bb:b9:f1:44:33:66:84:fa:84:1d:c6:ee:75:ca:
fa:01:67:9e:4e:71:49:d2:88:6b:1a:7e:03:7c:dd:a2:b7:50:
91:51:0d:b5:30:f8:75:22:d0:34:7b:b2:64:54:ea:ce:22:9f:
60:2f:ee:7f:e9:85:b3:6d:1f:ac:ee:94:8f:07:e0:20:e3:9b:
26:de:ba:8b:c5:24:59:fe:ed:b0:22:fc:9c:4b:1d:cd:09:2f:
64:1f:52:c9:af:a0:6b:14:70:e1:3f:0f:73:69:d8:8e:82:c0:
9a:e1:3e:ea:97:5e:b9:10:b5:45:90:a2:03:06:f7:90:2f:91:
44:30:e0:74:41:ba:e8:4f:37:7b:a1:24:59:80:e8:d4:ce:c8:
01:b2:02:b6:d6:78:d7:3f:6e:da:2e:c6:97:a0:2d:48:a2:0b:
a0:ab:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:44:58 2026 by rpki-client