Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File: ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier: YIOBgZsAu7mklGS37KAjtBB2GHc+um4nWLRWVcKiXjg=
Subject key identifier: B5:E3:E6:02:76:EB:10:92:7F:0D:D2:C7:83:E8:60:58:BC:7D:30:8E
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer: /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial: 01A1220A5C5CE642B6029A8C7534A8C509C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number: 1543
Signing time: Fri 09 Oct 2026 19:01:06 +0000
Manifest this update: Fri 09 Oct 2026 19:01:06 +0000
Manifest next update: Sat 10 Oct 2026 19:01:06 +0000
Files and hashes: 1: NlBBiPNjXDRFtCk_AZIxS1Dx7J0.roa (hash: bjhWsZ/wa6AH82ETFpbDw+CIP4gJfBrDvOOjz717MoY=)
2: ib1U59acFH1rVvjGognT3q6id90.crl (hash: TGuYiZeiAp4HnLa7J9B7xl7OnWBLK7jJ8SpgA5ylKuU=)
3: xe3xZx3T1nKXLVrwCoQvj5FQuOs.roa (hash: Oh3fgAVKVsH+R7XbFy5HM0U29rpdkHugOvIbh7/mWJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0a:5c:5c:e6:42:b6:02:9a:8c:75:34:a8:c5:09:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Validity
Not Before: Oct 9 19:01:06 2026 GMT
Not After : Oct 10 19:01:06 2026 GMT
Subject: CN=b5e3e60276eb10927f0dd2c783e86058bc7d308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:a1:64:8f:81:36:fc:b3:2c:e6:f5:c5:27:
b8:ce:a7:2f:4d:72:9f:4f:c5:41:ec:10:c4:18:22:
d2:3a:db:af:21:ae:52:b1:20:af:91:6d:a6:57:5e:
2a:c1:ed:1b:ef:05:8d:c9:2e:98:a3:8d:41:60:83:
c2:1f:6a:62:93:9a:3d:c9:a9:2c:a4:24:5b:d2:fb:
64:60:48:7e:79:26:cc:2e:40:94:94:9b:3c:10:d4:
f9:c7:eb:e3:a4:8c:51:3e:f8:74:d9:31:72:89:e6:
f3:ef:69:ea:d0:10:ab:7e:f3:82:ad:71:74:7e:10:
39:09:e0:73:e5:82:52:ef:ed:b3:88:92:e8:4b:d4:
66:06:6a:ae:7a:44:ac:34:a0:75:9a:4f:4b:48:98:
af:fb:13:9c:43:74:07:46:33:59:4d:52:77:23:c5:
3f:46:97:43:06:e4:66:d1:ee:a4:49:6c:dd:36:69:
e5:4d:38:4d:d2:40:e4:4d:e8:6d:6a:e7:d3:47:8b:
60:22:43:59:be:d3:a0:d9:f3:54:72:d2:8c:4d:c5:
d1:a4:74:59:ab:44:b6:23:66:dd:21:93:20:38:f4:
87:c8:e4:7d:f1:13:2f:ac:4a:de:3a:07:77:20:0b:
a3:68:e6:85:a7:3d:69:6d:29:2d:a8:a9:ec:42:0c:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:E6:02:76:EB:10:92:7F:0D:D2:C7:83:E8:60:58:BC:7D:30:8E
X509v3 Authority Key Identifier:
keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d7:93:0e:41:12:45:20:b9:52:9b:3d:8d:54:93:3e:a8:46:
e1:5a:c0:ae:94:f1:02:d5:be:33:e9:5b:6e:14:a5:ee:d8:d5:
2a:7d:3b:97:05:81:de:46:75:d8:ce:bc:a2:f4:9f:12:cd:60:
59:b7:c0:9d:f6:47:6b:8b:23:99:cd:8e:5f:ef:e8:c5:d1:18:
ff:fc:f0:b3:e1:72:3d:37:b0:97:91:b7:a8:b5:f7:f4:8d:7b:
13:73:27:1b:3d:26:37:e8:75:82:8e:ee:0b:67:6c:b1:12:0d:
b8:a7:c4:47:3e:27:ce:13:e6:83:06:ad:e9:5f:82:b8:67:e8:
22:8a:90:6a:93:84:53:7f:3d:2a:94:e1:e5:76:55:2e:2f:8c:
d4:cf:ef:9f:f3:5f:83:70:1d:bc:9b:73:71:dc:6c:63:25:ab:
2a:f1:1d:b0:1e:9c:3f:f1:c2:b7:c4:2f:0c:7d:79:02:fc:d5:
74:98:2c:8a:15:1b:b5:61:be:a1:2e:81:fd:29:47:a7:9c:35:
5e:30:8a:22:19:71:67:b0:df:0f:49:22:e1:2f:83:2d:4f:81:
37:67:e3:0e:69:64:1c:41:fc:33:3b:6e:b1:34:c2:88:4d:78:
f7:82:78:8a:4e:f4:db:8b:e8:5d:41:27:08:3c:a3:bd:63:57:
ec:f9:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:46:03 2026 by rpki-client