Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: 72vV2ps1dirJ1okkvIBGtVjS17XeYoZjvk7nuE7ES44=
Subject key identifier: FF:72:E7:C2:EC:AD:1B:99:75:6E:57:44:0B:BE:3B:ED:A0:7D:D9:21
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 01A175823087925FC2A64DDCFCAB6D34FA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 1214
Signing time: Mon 26 Oct 2026 00:00:28 +0000
Manifest this update: Mon 26 Oct 2026 00:00:28 +0000
Manifest next update: Tue 27 Oct 2026 00:00:28 +0000
Files and hashes: 1: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
2: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: h8bvLAs1B7SHgKhpBV3m7UH+u+aGZLYXozPwDsYtPDA=)
4: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
5: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
6: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
7: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
8: hRGXnqMuvvp8ezdGfd45_rLgiwA.roa (hash: c1R3TI5GdxYNvsLIzQT5n+CI+5W996We99FtvnhCTiY=)
9: tTsvoY1rw5-valp9iJMdTgSw-Ss.roa (hash: Reu19PFjxak8z9ZrnBaY/7yhM4BdNppIrLBODZoVJD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:30:87:92:5f:c2:a6:4d:dc:fc:ab:6d:34:fa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Oct 26 00:00:28 2026 GMT
Not After : Oct 27 00:00:28 2026 GMT
Subject: CN=ff72e7c2ecad1b99756e57440bbe3beda07dd921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:22:7b:b7:ec:15:1e:7e:58:61:28:3f:e7:
b9:7d:b2:bb:44:54:65:f2:7e:d1:0d:45:f4:20:53:
df:48:f1:57:4e:ce:c4:d8:47:e0:b6:10:0c:a4:30:
c2:88:6f:10:85:40:6d:b8:c2:d3:eb:f7:57:7a:3f:
36:67:81:2b:66:dd:4e:a8:3e:65:00:43:e8:6a:79:
ad:fc:43:49:cc:1a:09:f9:86:61:fb:e4:bc:95:f7:
2a:d4:ed:34:11:c6:d9:f0:35:2c:f2:a9:ea:c0:21:
42:4f:2d:c8:b4:2e:dc:e4:b4:08:d2:db:f9:7b:4f:
cf:fc:90:5e:07:a5:13:23:27:1e:e9:78:dd:00:8d:
ba:41:d8:ce:e4:f1:18:c8:09:b4:ab:4a:32:be:d0:
09:8d:2d:7c:48:65:5c:86:0d:a6:1c:80:af:34:d8:
35:5c:6b:b1:f4:ac:1f:f2:9d:c4:d8:7c:95:95:d5:
bc:e1:6e:ed:68:95:76:cd:b1:ba:1c:33:4f:dd:86:
bb:bb:23:50:76:71:6a:68:2c:ce:19:99:07:a0:fc:
be:ff:29:fb:cb:e9:8a:a4:8c:d9:e5:62:b2:3b:ba:
d2:54:64:7a:c2:65:4c:c0:a2:0c:90:68:7a:42:db:
67:c1:ad:e7:48:24:e2:46:63:70:8b:8b:e8:b8:a5:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:72:E7:C2:EC:AD:1B:99:75:6E:57:44:0B:BE:3B:ED:A0:7D:D9:21
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e3:be:ba:0f:ed:d7:89:88:09:c8:ff:46:85:db:d7:41:56:
03:82:70:74:e6:35:fa:9f:c1:3f:08:24:e1:57:52:87:47:cf:
ad:8d:a3:a2:32:05:6d:a0:bb:63:22:88:49:21:00:1c:f6:39:
3c:9e:7a:ff:a6:d0:a6:cc:f0:56:52:57:75:61:65:c8:82:09:
6f:a7:81:f7:38:82:59:6e:dd:77:2e:f2:fb:b7:11:20:04:a4:
af:8a:dc:cc:2a:3b:e8:4f:c8:e3:15:0e:53:3d:60:7f:b2:cb:
8b:52:f7:f5:00:91:a1:a2:91:19:4e:35:43:9b:d8:f3:5a:8b:
47:2d:54:9b:63:c1:a4:c5:b8:b4:8d:5e:7d:9a:75:d4:9a:58:
a3:97:b1:df:73:4e:31:68:e6:b4:11:84:ae:55:40:3d:f6:30:
dd:15:88:c7:24:57:61:46:86:b2:07:a7:8e:3c:63:9c:96:45:
a5:85:44:16:91:a6:62:19:b1:ef:ff:1f:8c:dd:87:81:50:73:
83:68:eb:2a:ee:29:a4:cc:2b:d5:f9:a4:0b:fe:66:8e:da:ab:
4a:58:c3:c2:76:9e:98:e7:93:fe:3f:8c:6a:a9:54:d6:a8:fe:
fc:df:56:a2:d2:ed:3a:b6:cf:f3:7e:61:90:d8:0f:5f:87:54:
35:d2:99:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:18 2026 by rpki-client