Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: GXvpM8Xvm+02FehWWDuiliBoaVlzUvU1BJ0eeRtYN8I=
Subject key identifier: 14:FE:F5:BC:4F:7B:5F:7E:4C:FC:C6:BC:FD:93:16:6B:40:0A:DD:52
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 01A1174F58F8089D52DB0B9FA79DA935D56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 0B43
Signing time: Wed 07 Oct 2026 17:00:38 +0000
Manifest this update: Wed 07 Oct 2026 17:00:38 +0000
Manifest next update: Thu 08 Oct 2026 17:00:38 +0000
Files and hashes: 1: 0O9vWC_vw7OUH6qBouhrAzEg9nc.roa (hash: ikuJBuSdoGWkG2wBAzVqA4TgxffZfq78hbpeayBzWqc=)
2: 8UaUU7He9Yv29kZRYVxM02CQ6Go.roa (hash: TPMPD8z4BbyqW0UZlFEZ6YpvhPgmje5aXLJzkHd/hwk=)
3: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: LmBDz55Q8sItlYiKVZwdafw0lq/7uN8zi/T9XHRqzf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:58:f8:08:9d:52:db:0b:9f:a7:9d:a9:35:d5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Oct 7 17:00:38 2026 GMT
Not After : Oct 8 17:00:38 2026 GMT
Subject: CN=14fef5bc4f7b5f7e4cfcc6bcfd93166b400add52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:95:67:19:e5:27:7a:13:3b:57:ce:b2:46:
d0:39:c6:e6:06:ed:ae:eb:1d:d1:48:e1:b2:b8:df:
84:0d:05:e8:4e:9b:8b:2b:ae:c4:23:d4:a1:22:7a:
bf:36:05:57:54:97:ac:45:4a:09:6a:88:1a:37:2b:
02:ed:71:cc:a3:58:a9:ad:56:df:0e:fc:09:fd:15:
13:0c:3a:bd:e1:a2:a2:70:1c:5d:03:b8:3c:ad:22:
84:64:c5:b5:ba:f0:c1:67:2e:6a:4d:e8:a6:11:e7:
0d:4e:6e:f6:70:92:3a:80:d9:bf:b3:04:1e:5e:d9:
f7:00:bd:1d:f6:5d:29:10:c7:cc:97:a4:20:f5:55:
1f:2e:ce:15:73:75:7f:08:62:61:bd:0a:9c:a0:5f:
b2:7c:8a:3d:a0:90:2d:44:02:74:8e:c6:e6:89:97:
00:86:ff:53:31:b8:61:99:88:c8:7d:8d:af:bd:44:
c7:11:8d:ac:82:06:c4:ae:36:63:b7:2e:ed:1a:bf:
85:a7:3e:7f:b0:56:f2:66:b5:48:fc:b8:07:8b:09:
77:d2:82:fa:35:4a:ea:60:d6:ea:8e:fc:ab:3e:74:
b9:40:28:2b:85:f8:26:1f:6d:a1:fe:48:b3:da:2f:
41:03:81:d4:d0:fd:27:2e:3b:b5:d2:4d:58:2b:c0:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:F5:BC:4F:7B:5F:7E:4C:FC:C6:BC:FD:93:16:6B:40:0A:DD:52
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:cc:43:34:3f:1b:f5:ab:3f:7d:7b:f6:8f:b8:0e:62:ec:
79:87:af:b3:3b:8f:4b:3c:6b:1f:19:67:c7:0a:33:09:a8:b8:
48:7b:71:45:13:1f:e9:55:4e:86:44:fa:3c:27:45:72:76:de:
59:65:f7:29:99:cf:47:d9:ac:bb:fc:b4:7f:f1:4c:d9:e7:f9:
e5:1f:48:8e:a0:fd:c2:fd:95:28:98:ce:24:d2:ca:6c:95:56:
d1:f3:d1:48:54:5f:38:ac:d0:8d:54:32:89:d3:87:fa:e6:46:
70:0e:9f:10:ec:1a:31:ec:e1:67:02:79:42:e2:0a:14:23:f3:
6e:e1:cc:cd:79:f8:d9:70:20:15:cb:fe:cb:3d:5e:ff:41:ea:
b9:f1:83:01:07:e2:67:19:79:8c:82:01:0b:b5:0d:aa:32:b8:
28:e4:1d:cd:b7:71:81:ba:10:5f:5f:5e:52:ca:54:09:e7:d9:
28:fd:b0:d6:a1:ee:4d:c4:91:78:c4:d0:de:ac:0b:e6:c0:40:
ab:fd:c0:16:1e:a1:5b:55:cf:07:34:b1:64:7c:29:4e:82:5d:
56:ff:4f:4b:bd:ca:ab:4c:66:bc:f8:8d:e7:1c:a6:bd:c3:49:
34:38:f4:e8:5c:a7:1b:39:34:30:d0:b1:92:a9:9d:ad:25:a5:
79:8c:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:48:26 2026 by rpki-client