Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: YeLv69DisoICkvSDvl+E3oN4kgMb+gnkqY4y07ht3fA=
Subject key identifier: 98:81:3D:E9:90:06:FE:A3:A7:AD:4D:50:B2:57:04:1D:19:9B:11:2D
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 01A029C66AAC8563010363BDE4213CD878A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 1232
Signing time: Sat 22 Aug 2026 14:01:04 +0000
Manifest this update: Sat 22 Aug 2026 14:01:04 +0000
Manifest next update: Sun 23 Aug 2026 14:01:04 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: KLSsSdrZ8PDx3SgqTX4CcZDoSPjsdEOayROXVrDx7Uk=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:c6:6a:ac:85:63:01:03:63:bd:e4:21:3c:d8:78:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Aug 22 14:01:04 2026 GMT
Not After : Aug 23 14:01:04 2026 GMT
Subject: CN=98813de99006fea3a7ad4d50b257041d199b112d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:4b:45:d7:70:c3:55:1d:8f:64:32:01:a9:
97:35:f3:2a:46:00:ca:c2:32:7d:60:32:f5:da:f4:
b6:cf:54:df:ef:f3:b6:0e:d4:7f:c8:69:05:b5:11:
b2:f0:85:02:ef:55:44:3c:57:f2:3e:c2:61:8d:76:
00:b3:c8:ee:61:1b:21:44:95:51:f4:82:7c:f5:a1:
08:09:d5:74:84:d9:2c:f2:e8:4e:75:24:24:2c:80:
2f:94:00:c4:50:21:22:61:66:b1:1c:e9:3d:df:ef:
7c:5b:e5:f1:dd:68:24:15:b7:db:07:c8:45:fc:ef:
8f:9a:6b:10:ce:02:46:bc:67:9c:91:b6:01:ea:cb:
ae:41:3f:af:b7:51:ce:34:f9:57:96:81:c2:ca:dd:
b0:76:21:fd:80:95:56:fa:4b:0f:fa:e7:d9:1a:15:
b9:d8:35:28:31:d1:cd:e0:ba:e1:34:15:2f:a5:b0:
d1:47:51:70:7c:37:7b:b5:f0:13:b4:20:c2:de:a7:
f4:b8:7c:00:96:dd:6d:ee:38:c5:9f:f1:45:74:a3:
56:5f:66:1c:67:7d:46:c0:c9:8d:7a:99:8b:75:08:
5d:94:47:79:20:e9:b8:87:e7:e0:ea:27:00:4a:71:
e0:84:ca:c8:2a:55:7b:7a:31:41:1d:7b:c4:ee:0e:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:81:3D:E9:90:06:FE:A3:A7:AD:4D:50:B2:57:04:1D:19:9B:11:2D
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:39:43:03:9e:bc:52:12:e7:0c:78:60:91:04:37:bd:53:90:
97:c8:4c:0d:47:11:1a:1c:c8:a8:2f:0a:8c:d6:6a:23:53:5b:
7f:d2:09:f9:62:a2:9d:36:02:6b:a7:ce:ee:94:e1:ff:16:24:
a2:76:0a:87:26:66:7c:4e:08:14:c0:4e:99:7f:64:09:01:ac:
24:77:a8:94:80:58:54:68:38:e4:2f:da:56:66:5f:50:ac:89:
6a:15:c5:f6:b9:e0:95:49:7b:86:15:d8:c9:11:2f:c1:2a:ce:
f2:14:d9:9d:f3:23:27:02:44:77:e6:0a:d9:f1:87:1f:c1:3f:
36:87:ca:52:53:96:1e:08:b7:bf:ad:a8:01:03:0c:4d:d1:1e:
c3:9b:38:ed:9d:3e:0b:23:b3:05:fb:cc:ac:7f:46:2e:30:1a:
5f:ba:51:3b:71:2e:d3:fc:17:5b:80:da:5f:6b:10:44:a1:de:
b8:6d:9d:29:53:97:c7:ea:be:74:6d:49:7d:5a:05:b5:14:c0:
0b:73:5a:c9:50:9f:a6:8b:5a:fd:c0:65:7b:70:21:6b:e6:be:
14:fd:d5:a0:95:9f:3d:2d:c7:b0:aa:6b:3a:24:df:cf:b0:2e:
f3:27:58:82:7b:99:3f:77:07:45:6e:c3:a5:19:9a:68:8e:55:
cf:f4:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:12:41 2026 by rpki-client