Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: GKQJBBi4ymIv1ButGAHKhLaSzKWaCQ3jP8QfMxSeXgk=
Subject key identifier: 51:B5:83:0B:AE:11:05:1A:F3:E8:BE:F6:7C:1C:3A:4F:CE:6A:93:C4
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 01A1280C98CD2D88BF3A37956D7268C84C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 1A9B
Signing time: Sat 10 Oct 2026 23:01:16 +0000
Manifest this update: Sat 10 Oct 2026 23:01:16 +0000
Manifest next update: Sun 11 Oct 2026 23:01:16 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: fDULFVSQsudxk5EJ64ONrzpz8P0ttXybyxd2VV4PG/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:98:cd:2d:88:bf:3a:37:95:6d:72:68:c8:4c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Oct 10 23:01:16 2026 GMT
Not After : Oct 11 23:01:16 2026 GMT
Subject: CN=51b5830bae11051af3e8bef67c1c3a4fce6a93c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:57:b2:34:57:9a:83:67:fc:9f:62:05:d6:
5b:d5:22:34:85:b7:61:36:d3:47:69:bd:57:6f:e1:
3c:cc:d5:eb:5d:cc:84:9d:60:52:70:86:cc:00:29:
5e:82:a5:ca:c2:3f:76:fb:81:54:d8:84:1a:3d:ec:
89:70:54:7c:07:e9:73:92:b6:92:21:f2:f4:d6:18:
b5:5a:cf:a4:20:6b:d8:e9:00:c5:36:e5:91:25:22:
5d:30:f8:fb:0b:1a:87:88:3f:04:6f:05:66:df:11:
12:91:99:98:76:ae:b8:13:2e:5a:ad:c1:4c:0d:b3:
8d:5d:dd:d5:40:a5:e9:5a:86:4d:ff:e4:ae:6a:01:
1a:8f:46:2e:b3:a4:49:db:21:ae:70:41:88:0f:cd:
73:92:7d:de:c4:2f:6a:b1:3b:59:0b:37:0e:17:9c:
f8:f6:87:66:16:1c:8a:79:3f:ff:ca:a0:6b:27:40:
80:21:e0:a3:e3:42:11:b3:4f:ae:34:26:f9:61:58:
a3:dc:18:c9:aa:ad:50:62:04:ef:a1:19:e3:c2:d7:
86:0f:52:f9:32:6f:9d:6d:85:28:f2:53:ea:86:be:
12:60:eb:de:b4:e4:40:fa:7e:a7:b7:8c:bf:2b:ad:
b7:30:f9:df:8c:1b:06:fa:6d:79:e6:27:17:01:96:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:83:0B:AE:11:05:1A:F3:E8:BE:F6:7C:1C:3A:4F:CE:6A:93:C4
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b2:95:31:b5:17:a3:d9:1c:c5:1a:06:32:a0:78:7f:4e:ef:
fd:c7:1b:ff:fc:fb:1a:43:3d:b7:9c:c6:24:b1:d0:dc:b4:6d:
57:d6:86:61:92:61:11:aa:ab:2e:ff:57:0c:9f:e8:bd:dc:71:
f0:3c:27:4e:18:c2:3b:0c:3e:53:ac:49:c4:dc:59:b6:e7:76:
1b:26:af:2d:4f:7a:f4:2f:9c:4b:67:b4:cc:9d:9b:20:64:18:
7d:01:ff:b5:2a:68:be:bd:8c:22:e7:0f:23:9f:f9:b9:0e:6c:
d8:11:33:ba:df:6f:e2:9b:fc:9c:44:a9:95:03:a6:4f:22:6c:
2a:93:5f:e2:b2:30:02:56:b0:24:5a:d8:21:46:d1:13:a1:23:
50:03:42:27:4f:6b:b6:ce:1c:eb:ba:68:a4:b3:3b:c2:ca:d0:
94:46:f6:9f:ff:20:17:fd:50:bf:6e:91:e1:95:59:eb:03:2c:
d3:72:c0:a0:da:76:90:33:98:44:14:89:0d:79:8d:35:9b:fc:
a4:c8:eb:18:c1:35:57:9d:0c:2c:e6:b8:65:15:a5:d4:85:47:
f0:f8:2c:ce:f4:7f:f2:c9:ee:f5:67:6a:c6:03:f7:0c:d6:92:
7e:e3:60:8a:ec:a9:84:cf:05:95:1c:31:c5:1e:74:e5:0a:82:
dd:1e:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:52:04 2026 by rpki-client