Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
File: ivFfMc4WFKwlq9e48k24anSz898.mft (raw, json)
Hash identifier: fki9A3hE/UoaNFXvAs+oVTi89LQ5QbvHkmlss9n/rIQ=
Subject key identifier: B8:8E:DA:0D:4D:F4:AE:CA:81:71:FB:92:EE:F3:BF:FF:34:58:9C:0B
Authority key identifier: 8A:F1:5F:31:CE:16:14:AC:25:AB:D7:B8:F2:4D:B8:6A:74:B3:F3:DF
Certificate issuer: /CN=8af15f31ce1614ac25abd7b8f24db86a74b3f3df
Certificate serial: 01A10F5EDAFE2C7CDEB5EB19A9BB97045ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
Manifest number: 36
Signing time: Tue 06 Oct 2026 04:00:36 +0000
Manifest this update: Tue 06 Oct 2026 04:00:36 +0000
Manifest next update: Wed 07 Oct 2026 04:00:36 +0000
Files and hashes: 1: HVgZTOCzOmeIsVa1jFNOUlOBIuM.asa (hash: pAHXwQOyGNXX7NSjDe6sMzzzTHUuF6yV4VE2jeHCx5I=)
2: ivFfMc4WFKwlq9e48k24anSz898.crl (hash: U91hVTK5L6lh6WualEbjFKrQ9I0OH+QPmsniB1p1JvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:5e:da:fe:2c:7c:de:b5:eb:19:a9:bb:97:04:5e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af15f31ce1614ac25abd7b8f24db86a74b3f3df
Validity
Not Before: Oct 6 04:00:36 2026 GMT
Not After : Oct 7 04:00:36 2026 GMT
Subject: CN=b88eda0d4df4aeca8171fb92eef3bfff34589c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:dd:60:32:06:7a:bd:e0:b4:ea:02:d5:4d:
43:f0:1f:44:ee:26:ff:44:65:69:11:d0:07:d6:44:
f9:09:38:bb:c8:f4:e5:cc:c3:53:56:16:5a:c3:7c:
8d:91:9e:2d:7f:40:53:6e:c8:46:72:66:04:a2:a1:
6c:cb:54:ca:b0:35:4a:02:2c:be:6c:3c:66:0b:55:
94:15:7c:c7:04:d6:fc:5d:29:62:13:c2:15:3a:87:
45:18:09:fe:e4:31:2a:38:4d:99:a9:61:f5:9e:38:
63:db:19:13:70:8e:1b:4b:88:c3:bd:0c:6e:a2:65:
6c:6c:65:84:e7:04:bd:57:03:ef:ed:fa:6e:3d:f3:
48:2e:0c:5f:d2:fc:40:52:13:a9:0c:70:86:b5:26:
eb:8b:9a:c6:28:11:78:d3:c8:83:81:2e:8f:57:70:
66:07:de:e7:c7:cc:09:b7:3c:33:45:65:93:ad:e1:
32:92:3a:d8:d2:8e:c0:8d:30:05:81:5c:0d:d1:7e:
53:18:c5:27:ed:42:4f:f8:5d:85:a0:b7:04:7d:ad:
1f:73:9f:40:6c:e7:0c:39:8b:69:15:0d:60:78:52:
d9:96:35:f1:a8:c8:e5:ac:5a:78:dc:8a:74:d6:4f:
de:a6:3d:0e:39:e1:94:22:9a:a7:c7:c4:ac:3d:b9:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:DA:0D:4D:F4:AE:CA:81:71:FB:92:EE:F3:BF:FF:34:58:9C:0B
X509v3 Authority Key Identifier:
keyid:8A:F1:5F:31:CE:16:14:AC:25:AB:D7:B8:F2:4D:B8:6A:74:B3:F3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivFfMc4WFKwlq9e48k24anSz898.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6f0d98-375e-481e-9882-47935e0a59c5/1/ivFfMc4WFKwlq9e48k24anSz898.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:50:05:b8:5a:d8:c5:d7:20:87:06:5a:a2:e0:4f:03:9e:03:
75:a2:e5:74:77:16:81:cd:9b:3b:a5:b5:89:fe:9e:98:39:10:
db:c9:47:02:a1:e9:e6:16:19:7a:71:87:a2:71:4b:39:5b:b3:
4e:fe:bf:2b:97:20:0c:c1:1a:3e:3e:7f:90:14:19:81:89:86:
12:b4:68:a7:18:82:4c:a8:e2:e2:80:6f:12:f4:ae:4c:7c:02:
c8:e4:05:8c:fb:42:49:0a:0d:d0:35:73:98:29:33:60:3e:e9:
88:d0:fc:da:8f:1f:9f:93:5e:4d:57:3d:71:d2:8f:0c:3c:1a:
f3:21:04:eb:0c:f0:c0:3a:b5:fe:1c:94:17:5e:69:61:d0:c0:
07:70:da:fa:65:95:6d:40:e8:23:62:d6:39:5e:c8:09:7f:16:
a3:30:cd:f9:16:d3:f9:b8:63:eb:05:0e:4d:83:9c:44:46:e6:
06:43:54:b3:a0:77:9e:69:14:ec:e4:c0:9d:86:ca:a8:ec:22:
9a:5d:4b:ff:a6:35:fa:ef:2d:08:fa:57:b9:80:50:e7:3a:a9:
56:a4:d6:0d:df:d7:ef:2e:ee:36:85:d1:39:89:64:0c:a3:c4:
28:57:12:c1:05:ce:7d:e4:8d:c3:29:cb:87:a5:a8:ed:0c:27:
d3:84:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:07 2026 by rpki-client