Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File: iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier: yuS2JMeuFuu/Uy16ZFGxupOd+ReQcYnzOJ+ctevzz60=
Subject key identifier: 4F:ED:4D:EE:C9:81:8B:8F:28:B4:FF:AB:FC:FD:36:D1:C4:D2:A2:15
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 01A08A1F63FADB721F6A1B032CBC55B1D2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number: 087D
Signing time: Thu 10 Sep 2026 07:01:47 +0000
Manifest this update: Thu 10 Sep 2026 07:01:47 +0000
Manifest next update: Fri 11 Sep 2026 07:01:47 +0000
Files and hashes: 1: SS1trll_jJth-99tdKeZ_ZRXElE.roa (hash: dAGh/v5+aRUaKoZovKOMDDNudug1o0UcUdEQBS1qqyg=)
2: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: JQBTywIJWflgxaYjDAvtMHV7p5FwAqd4+fVQpkBzrj4=)
3: laVT8PutwSiKZm5iWyERcaskMo4.roa (hash: rNMpWW6dekfMOeEluSAOoZIOwRihLFiRxuXZambWDkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:63:fa:db:72:1f:6a:1b:03:2c:bc:55:b1:d2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Sep 10 07:01:47 2026 GMT
Not After : Sep 11 07:01:47 2026 GMT
Subject: CN=4fed4deec9818b8f28b4ffabfcfd36d1c4d2a215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:6a:2e:ef:3d:a8:c7:e5:99:16:18:4b:46:
2f:e6:a6:d7:10:03:e0:0f:e8:e8:91:c4:45:29:b3:
e6:51:11:86:2a:bb:06:85:02:89:47:7b:8f:d3:29:
f9:0b:e9:6a:fd:39:e3:67:85:2f:b8:5f:7a:6b:3d:
aa:f8:49:21:0b:54:91:38:71:93:de:c8:18:54:cf:
a5:7f:44:7a:ad:8b:3f:93:14:62:29:82:92:8a:2f:
74:71:3b:7f:25:0e:00:48:ce:a3:90:68:6f:bb:db:
8b:16:42:bf:d2:bd:82:d0:60:bb:3e:c1:db:aa:56:
3a:4c:59:ab:ca:06:95:e9:2b:5b:a6:c5:e0:a5:b3:
47:c7:0d:ea:1e:bd:b0:aa:a4:f8:72:d4:af:6d:e3:
65:2e:5a:f2:88:be:aa:63:2c:a7:e2:21:4c:dc:a6:
ab:81:52:8c:7b:61:36:e2:cb:a4:79:c0:51:29:29:
ac:12:93:41:0f:1b:31:61:41:64:2c:da:ff:2e:11:
e5:7d:21:dd:b2:f0:75:4a:65:c6:fd:38:d4:dd:0a:
11:aa:96:72:16:33:a3:5a:87:55:e9:25:97:64:76:
65:f6:83:49:53:82:b3:1c:84:57:0f:13:3a:9d:cf:
2d:58:51:27:e0:39:ed:92:b7:eb:85:0b:f9:a0:06:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:4D:EE:C9:81:8B:8F:28:B4:FF:AB:FC:FD:36:D1:C4:D2:A2:15
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:44:18:a4:ac:9c:a7:2b:c1:5f:c2:e3:8f:32:19:28:d6:
d2:e5:fd:2c:bf:d3:c3:70:69:81:ec:38:2f:59:10:d5:c0:0d:
ad:b1:fc:a2:de:48:c7:65:62:1f:54:15:a8:48:70:40:92:c3:
78:d6:58:80:d7:06:1e:23:32:38:f3:2b:4d:bc:ce:dd:53:f9:
9a:89:a5:c5:8f:17:16:80:b9:e5:13:8b:ab:c0:a1:85:58:49:
fc:e1:d6:ed:57:c9:60:11:0c:8a:21:bf:1a:11:b9:5d:58:42:
4a:6f:5a:d5:e6:77:1a:f2:99:82:d9:ce:a9:37:a4:53:97:0d:
cc:ff:eb:8b:48:d2:d6:ef:c0:d4:5a:0e:96:46:32:e2:48:97:
39:31:8a:47:05:e0:c7:77:da:19:94:a2:f2:7b:23:cc:91:81:
48:ec:5b:78:26:58:b2:68:e1:84:07:99:3d:8a:a5:e5:cb:14:
38:82:65:c1:03:19:26:7f:e4:2a:63:81:8a:6d:d8:c9:ea:f4:
aa:2b:fd:34:60:78:81:44:89:bd:63:92:75:c4:56:a4:46:68:
13:f5:e0:f0:ca:f5:0c:ba:6d:aa:4e:64:15:1f:8c:82:01:9c:
76:50:7c:bc:62:49:a7:ee:78:a8:d7:74:78:95:b2:2f:0c:e7:
1c:03:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:11:20 2026 by rpki-client