Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: ckDi/tL8owSM3LGuLL4NFPdatcwWq0EZO3Prz5f3Z24=
Subject key identifier: 82:7A:19:1C:C7:6B:95:61:97:BB:08:14:6E:0D:AA:83:94:20:09:41
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 01A1724AFF2977438A18DCA7F5A70DE6CEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 1AC1
Signing time: Sun 25 Oct 2026 09:01:19 +0000
Manifest this update: Sun 25 Oct 2026 09:01:19 +0000
Manifest next update: Mon 26 Oct 2026 09:01:19 +0000
Files and hashes: 1: b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa (hash: hHkV6ifNNgCnzjffMB2ARiro7sl9sU2WuipxUNM/huo=)
2: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: xIXnVSMTBC7/cqDcY9HX2Lm0LpTsFCh48WCMYlZBFn8=)
3: jAnHcvp-J3jJ73LmJIPdJciy_zM.roa (hash: APG1rihSnkESicy3QFJODSTSwbqRn6HF/XNwWPvWKwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:ff:29:77:43:8a:18:dc:a7:f5:a7:0d:e6:ce:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Oct 25 09:01:19 2026 GMT
Not After : Oct 26 09:01:19 2026 GMT
Subject: CN=827a191cc76b956197bb08146e0daa8394200941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:49:d9:4f:11:93:1c:6e:5f:b0:34:00:0a:
8e:28:76:d2:02:67:60:fc:c1:a6:82:33:59:7f:88:
9f:47:6d:f0:01:01:67:d9:f6:c0:f0:be:26:d6:ae:
c5:7e:b7:09:c3:06:86:49:c4:a9:00:31:8c:53:04:
66:47:31:06:e0:db:ed:5d:d5:1d:9e:54:70:54:15:
8c:05:2b:81:ca:a9:8a:89:82:99:4c:df:6d:92:98:
2b:8c:4c:d4:27:68:4a:55:9c:8c:1c:7d:51:f5:99:
cf:f0:5b:e7:a3:8f:34:0b:4b:07:dc:d8:1f:d1:09:
e9:c8:47:fd:29:12:c0:04:85:c7:cb:a8:8a:fd:cf:
ba:ff:b7:0f:2f:e3:f4:15:51:fa:68:0b:54:cc:db:
5a:06:88:1e:41:ca:89:94:cf:9b:09:5a:2e:fd:fe:
f9:1d:b2:b6:8e:72:4d:c2:6b:12:3a:82:6d:d2:e0:
16:65:3c:22:00:20:8b:f9:e2:93:8d:9c:12:1e:0a:
bd:56:db:ce:ce:67:b0:76:00:e6:e8:8e:24:df:00:
41:68:e8:c2:4d:52:54:4c:2e:f0:a1:c2:12:98:a9:
3e:13:8f:fa:ba:aa:5d:eb:3d:d8:83:ae:56:fb:91:
40:ca:5f:d3:13:f8:ec:c2:8d:0e:30:27:98:5d:bd:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:19:1C:C7:6B:95:61:97:BB:08:14:6E:0D:AA:83:94:20:09:41
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:00:28:24:a7:fd:c9:7c:0e:96:cf:2d:23:70:e1:34:0d:
85:0a:31:8b:83:ba:21:84:26:6d:64:f5:de:44:5b:41:6a:94:
b7:2b:21:00:6c:24:23:f0:35:78:b5:e8:73:db:9e:8d:67:b2:
84:2b:18:cb:e8:91:bd:ee:18:65:5f:84:86:d5:34:de:51:c1:
4b:5c:27:c0:6a:b0:47:62:31:9a:c5:86:a1:08:bc:22:cd:ca:
8f:60:12:11:b4:8e:ff:00:5e:96:3c:d1:db:5a:0b:f7:aa:0d:
4d:43:09:ce:86:5f:42:93:9c:45:00:bc:39:54:bc:eb:69:8c:
f8:bf:5a:21:e7:b7:16:f0:28:6d:a9:96:5f:25:36:70:2c:b0:
a9:7c:65:b1:71:3c:76:0f:c3:d2:51:b2:bc:0b:b8:af:f7:56:
ba:6d:8e:5d:e0:35:5a:e2:8d:56:4f:7e:49:4b:a3:78:5a:1b:
2d:c9:f4:fb:2c:16:60:92:82:94:60:04:52:c7:ca:58:7c:e7:
97:b9:d2:cb:65:55:e3:41:2a:02:ad:9c:e7:03:60:14:1b:53:
da:97:dc:05:8c:85:11:b9:34:e0:64:ee:df:a9:17:77:ec:c8:
c7:75:e0:bb:7b:a6:c1:29:c6:46:1d:a5:72:51:e9:af:5d:11:
52:cb:0b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:58:56 2026 by rpki-client