Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: 5KPBL5mHB9wyoffRFiGpZeXy73LgjHGOHRGdRWtxjiw=
Subject key identifier: A4:E1:4F:70:62:33:D0:9E:CF:1C:B8:D5:A8:56:82:5B:79:47:18:81
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 01A08C441B844339D44C5EE1064CB20291B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 119A
Signing time: Thu 10 Sep 2026 17:01:08 +0000
Manifest this update: Thu 10 Sep 2026 17:01:08 +0000
Manifest next update: Fri 11 Sep 2026 17:01:08 +0000
Files and hashes: 1: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (hash: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=)
2: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
3: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
4: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: S/SiH6/Ve/PSEg/9de4g6FV/i2icR0IrYbNbohLqlU8=)
5: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
6: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
7: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
8: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:1b:84:43:39:d4:4c:5e:e1:06:4c:b2:02:91:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Sep 10 17:01:08 2026 GMT
Not After : Sep 11 17:01:08 2026 GMT
Subject: CN=a4e14f706233d09ecf1cb8d5a856825b79471881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:2d:9f:af:44:d8:cb:2d:8b:fe:98:98:f4:
67:95:ae:af:47:c6:50:0f:da:a9:8b:57:40:32:e7:
49:ca:22:ec:a2:54:59:eb:e1:55:37:a7:2a:7e:2c:
b1:11:3e:74:6a:9e:75:61:73:0c:dd:93:3e:3c:b0:
c6:38:19:52:e3:c4:93:3a:55:65:fe:8b:6f:14:61:
16:5a:0a:c3:88:da:c4:3f:7a:87:af:da:9a:19:93:
8b:fa:4b:17:82:9e:06:31:c9:36:bf:ab:15:98:d4:
8f:ad:3d:4d:f7:73:f1:d7:a8:55:b9:c8:63:ee:7d:
01:73:92:0a:5c:67:73:7d:61:1c:3a:96:6b:d5:38:
13:70:77:4f:e9:0a:f0:74:75:28:c2:f2:85:94:b1:
85:98:fd:79:ca:3e:49:be:83:c8:c7:7f:85:93:40:
f0:0b:83:51:b9:56:a4:1e:02:dc:77:c9:7f:8d:93:
bb:ce:4f:c9:92:63:2f:cb:3a:18:2d:88:85:43:d4:
fb:af:96:3f:29:43:75:85:1d:3c:93:97:c6:54:a2:
c1:72:66:e4:be:31:ab:88:df:d9:70:07:fc:1b:76:
da:6e:c6:7f:ff:84:6a:82:f9:ca:18:40:13:a0:fd:
c8:0e:f1:cd:98:00:7c:0c:17:cc:5d:78:c9:61:74:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E1:4F:70:62:33:D0:9E:CF:1C:B8:D5:A8:56:82:5B:79:47:18:81
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:87:eb:e2:a5:fa:34:fe:75:8e:97:e2:5f:d1:d4:2d:f4:5e:
72:57:90:5d:33:cd:04:78:5b:07:c6:a9:57:fa:d0:2b:e1:f2:
bb:17:8a:90:e8:f3:55:0c:d9:67:83:a1:0f:1c:3f:c0:c2:06:
9a:f3:e2:63:7e:fa:99:23:02:6a:fb:c4:9d:65:93:c0:b8:62:
3d:04:ea:44:b0:e5:45:87:ea:e6:00:d5:78:e1:28:41:c6:10:
6c:27:f4:4d:96:cb:71:04:dd:52:69:a6:a9:91:9f:cb:10:a7:
ff:09:e4:3f:bb:b7:e0:d1:16:a2:22:39:d4:39:aa:f2:c5:50:
42:a2:40:a2:8b:b2:e0:fb:db:e9:3b:44:c9:53:fd:dd:58:2f:
1b:2f:ef:e4:cb:ad:17:5a:5a:1f:0f:d5:6f:25:29:7f:09:d4:
6e:91:d9:3a:71:9a:ec:9c:4f:2c:98:4b:83:48:3e:bf:15:e9:
fc:48:04:e1:c1:72:58:29:7d:65:de:f6:fc:4e:e1:d8:2b:a3:
dd:0d:09:b2:07:2d:8d:b7:f5:26:5a:20:29:69:72:f2:c2:9a:
55:a1:01:ad:d8:c8:8a:69:cc:35:8d:25:fe:3f:9c:4d:b0:3e:
1e:68:81:ae:e4:cd:75:36:ec:a7:a2:4b:ea:94:3c:9b:91:6b:
0f:8a:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:43:06 2026 by rpki-client