Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: tueRyiC4qUwqV2RElujBDTcDB5recXBu24Af7Wj2S6A=
Subject key identifier: 7D:F2:25:34:AE:D9:4E:F6:B7:F2:50:7C:35:E7:C9:37:70:97:85:B2
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 01A179CD00E50268BD9F27922AA293CA2453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 1644
Signing time: Mon 26 Oct 2026 20:00:40 +0000
Manifest this update: Mon 26 Oct 2026 20:00:40 +0000
Manifest next update: Tue 27 Oct 2026 20:00:40 +0000
Files and hashes: 1: DWHWORrS3BHCdKCom2SvJuOOFgQ.roa (hash: neZrwsmxWjbB3VimASaWthX1wVXWiR6atISt14XcKo0=)
2: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: atFTL2anwNYUYhxdzCigHFlh8vcx8A2uSwNPqJw8ilc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cd:00:e5:02:68:bd:9f:27:92:2a:a2:93:ca:24:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Oct 26 20:00:40 2026 GMT
Not After : Oct 27 20:00:40 2026 GMT
Subject: CN=7df22534aed94ef6b7f2507c35e7c937709785b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:fd:cc:94:fb:d7:de:5b:11:e4:4a:69:4d:
e7:49:2f:c5:fd:bb:af:a4:53:f2:9e:5d:90:3c:7b:
08:1f:e6:04:1d:91:84:10:4c:de:55:62:0e:ba:df:
e4:ae:6f:23:69:70:be:d0:90:59:88:3a:73:88:15:
22:63:b9:2c:d6:f3:8b:16:24:9c:27:c2:fb:e9:1e:
81:7a:2e:ae:a1:bf:ce:ff:0a:a0:df:5a:1b:cc:32:
f5:65:da:2a:ab:9c:dd:ee:3a:92:ca:d3:90:bd:8a:
89:38:eb:4e:7a:16:a5:0e:5e:19:e0:f3:a6:80:b6:
5a:f0:a8:50:3d:7e:6e:de:55:2d:ca:2d:e9:9e:f7:
c2:5c:59:95:ac:e2:ac:61:56:f8:c7:5e:26:85:ba:
23:b4:b4:99:f9:3b:54:1c:3d:17:d3:0d:89:fa:56:
64:57:48:e0:12:a4:b5:04:1d:4c:00:1c:72:96:c3:
ab:53:e5:43:f7:b3:c8:74:ef:eb:ce:34:e8:63:77:
07:a5:6b:6f:20:6b:60:67:19:6a:79:6c:26:74:05:
3a:b8:6e:d3:48:e5:d0:aa:ec:23:5c:15:c9:ba:2a:
1d:98:a1:d5:01:85:aa:5e:81:68:49:80:9b:16:a9:
34:ac:b0:02:70:c7:3c:63:28:27:23:fb:b8:b5:3e:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:25:34:AE:D9:4E:F6:B7:F2:50:7C:35:E7:C9:37:70:97:85:B2
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:71:7d:d1:fc:f0:c5:51:a8:bf:5f:f3:fd:7e:d3:af:62:5e:
ef:f4:c7:fe:44:4f:d5:07:aa:b2:c6:45:f8:89:69:7d:75:dd:
ee:9d:43:50:1a:be:32:6a:e4:a5:6c:9d:62:37:8d:7e:9b:69:
d7:d5:9a:8d:4f:2c:9a:f4:68:89:ad:1d:f3:94:a0:92:f9:06:
26:64:4f:18:b4:08:a4:b3:c6:87:ef:e6:bc:5d:1a:1c:ae:0b:
a5:e6:f7:1d:bc:2d:43:93:01:9f:24:42:77:a0:cc:db:29:4c:
fe:bd:b3:f3:99:38:6c:4d:84:3e:b8:88:f8:89:42:27:17:25:
ff:e0:73:c8:d4:05:9a:f2:44:b1:2b:9e:2d:09:b6:fc:29:d9:
02:5b:3e:e2:0f:94:1a:db:23:b9:f5:0f:16:b1:1b:30:db:18:
9a:11:3d:39:a5:ca:3d:13:3d:7c:69:38:12:57:bb:85:10:c0:
41:b4:ed:7b:c5:17:fa:d6:9b:0d:d6:ab:d8:83:a8:d6:b6:8d:
33:62:2a:ef:45:4a:84:ac:03:a4:25:05:cf:61:91:b8:13:df:
b4:37:1d:9b:64:9e:3c:37:24:02:38:e2:0c:6c:e8:69:82:a9:
03:18:c8:6b:c6:4f:14:dd:8a:f9:95:7a:45:e8:06:f1:cd:85:
81:16:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:52:46 2026 by rpki-client