Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: H9f90MZcluOBWFGSm27KSpQ6YjsqUme490+TdNw88G8=
Subject key identifier: 1A:4C:4D:2B:76:AC:2D:DF:D2:71:99:F9:54:91:C0:FE:CC:DB:CA:2F
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 01A17E187CF69D1F5DA815D1A94ED3351945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 16:01:36 +0000
Manifest this update: Tue 27 Oct 2026 16:01:36 +0000
Manifest next update: Wed 28 Oct 2026 16:01:36 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: BXh7tO8984jPUbCOBE5nCvteA9EPV0gUBrq1KGlnmuY=)
2: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (hash: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI=)
3: tIEL4J6jSkAPZLSFtELamVkICgM.roa (hash: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:7c:f6:9d:1f:5d:a8:15:d1:a9:4e:d3:35:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Oct 27 16:01:36 2026 GMT
Not After : Oct 28 16:01:36 2026 GMT
Subject: CN=1a4c4d2b76ac2ddfd27199f95491c0feccdbca2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:02:a0:6e:64:6b:20:43:63:8f:64:b4:eb:
1f:7b:f5:a6:39:93:8f:ee:fa:4e:31:7b:57:62:13:
a4:38:65:ef:1e:50:d6:5d:32:1b:85:7d:40:31:28:
43:73:01:cf:3d:04:f0:f5:eb:e2:78:0c:b3:be:14:
14:1b:ba:59:0e:93:b5:a3:a3:65:64:3b:8b:7f:3c:
4d:f9:e5:59:29:e1:03:2b:19:fb:c0:76:62:01:3f:
b4:b8:f3:e8:61:0b:04:64:2a:68:c4:af:bc:01:ab:
f3:99:57:5e:b9:b4:4d:dd:16:0e:47:61:40:8a:8d:
6b:c8:88:69:70:7e:5b:6c:28:c8:32:47:6e:b0:12:
07:66:7b:41:05:02:93:cd:eb:4d:8a:63:93:83:84:
1a:cf:4e:b1:69:5e:2d:29:35:29:fe:5f:55:bf:4d:
0b:94:b7:33:6c:77:f8:35:12:42:3e:95:ac:f0:f5:
d6:8c:f6:51:01:5b:e4:b8:1a:4a:8b:7c:44:31:05:
12:57:f7:3a:b2:c2:05:6a:42:6f:ee:bd:11:0e:4d:
ae:be:38:05:9c:54:60:d2:8a:a5:48:10:ad:f5:26:
2b:7f:7c:39:49:60:4c:c3:12:ba:e4:f9:58:9f:cd:
eb:d1:b8:a0:d9:89:aa:29:d6:07:84:ed:b9:47:3b:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:4D:2B:76:AC:2D:DF:D2:71:99:F9:54:91:C0:FE:CC:DB:CA:2F
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5f:48:13:47:1f:9f:5d:77:1e:fb:3f:fa:dc:f1:fe:10:c1:
f3:1b:58:8c:11:06:93:20:68:82:64:e4:ac:77:28:2b:0e:7d:
17:3b:76:07:bb:c6:71:c6:f9:a2:33:3f:f3:29:48:a6:ad:75:
d5:5a:53:b3:34:2e:92:63:68:b7:22:e9:10:fb:0f:40:ab:e0:
d2:67:92:d6:e6:1f:ed:4e:23:9f:24:64:b3:e5:f3:61:24:28:
48:94:fa:ba:03:48:d7:0b:68:33:5d:3a:4c:ae:59:93:de:cf:
62:fa:b4:56:eb:21:35:a4:46:86:f7:fc:39:97:ad:fd:53:ac:
a1:ae:70:ca:ac:7a:8c:bf:b5:a6:6e:f2:1d:a9:a5:25:60:01:
6f:0f:42:d5:6b:b3:5c:ac:9a:b5:24:51:f6:6c:a3:24:54:6c:
04:7a:20:08:70:77:1b:be:1a:c2:1d:13:10:15:c7:17:ac:de:
7c:a5:49:87:03:d3:67:27:2f:1a:5d:85:08:3d:8a:1f:29:f3:
7e:fa:51:a3:c0:87:e0:c8:78:80:56:6d:6d:46:de:b1:79:d5:
a8:61:02:74:73:82:a5:5b:2b:fb:fe:b7:d1:2e:bd:f1:76:13:
22:c0:c3:05:e9:60:6d:15:51:a9:50:1a:ed:7c:ea:92:26:46:
61:de:50:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:01 2026 by rpki-client