Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier: MmaXr5iHUhcUMw6TghHaeaB8paON+I7Z+lg+vWzSdos=
Subject key identifier: AF:01:0F:AA:DE:77:A1:BC:15:5B:F9:F2:1A:E9:FE:2E:33:24:9C:83
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial: 01A1C555DD5616BFE0037ED80DB61047E668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number: 1AE9
Signing time: Tue 10 Nov 2026 12:01:40 +0000
Manifest this update: Tue 10 Nov 2026 12:01:40 +0000
Manifest next update: Wed 11 Nov 2026 12:01:40 +0000
Files and hashes: 1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: gJGCCh5oLSvKDjPMRIofErGstrp7oZ//9PBd1CqWI2M=)
2: nad2__VH-nPmq_Iqmre5nLL_imw.roa (hash: ELA9kRHRklvIfsJMuSHF+76tgBdN55pzj5QMVhLOw9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:55:dd:56:16:bf:e0:03:7e:d8:0d:b6:10:47:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Validity
Not Before: Nov 10 12:01:40 2026 GMT
Not After : Nov 11 12:01:40 2026 GMT
Subject: CN=af010faade77a1bc155bf9f21ae9fe2e33249c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:cc:7e:b8:87:ed:57:00:c7:7c:de:a1:67:
3f:cb:9f:a0:ed:82:e6:e6:ce:59:47:ed:b4:d5:9b:
26:46:ac:d8:c8:68:93:c0:12:55:ee:dd:dd:1c:87:
69:73:a0:33:50:d2:48:87:2a:60:d1:66:d9:03:6a:
57:93:0e:cd:ea:02:69:48:28:d8:a4:60:96:e3:f9:
e4:1c:da:ab:1a:da:61:d1:ab:64:1c:89:cf:49:a6:
39:89:ba:19:71:3b:c1:14:45:19:99:17:20:d1:c3:
a6:c4:43:f3:82:56:5d:d5:8c:a6:23:5a:c4:4c:08:
10:30:ab:62:06:a6:c6:20:87:97:bb:08:90:f7:cd:
c1:40:99:62:f5:30:43:53:9f:63:ec:df:21:82:1b:
fe:40:8b:66:d2:ff:59:5f:d1:b6:1a:2f:01:4c:d9:
38:71:9e:b0:db:96:b3:4b:8d:0d:ac:65:5f:e1:10:
c6:5b:06:54:67:c8:06:b7:16:95:45:95:c3:87:32:
99:33:c4:40:55:c6:eb:7f:c6:39:7c:8e:60:87:ef:
e2:97:56:ec:35:58:7d:3b:81:1f:db:b3:73:0f:ea:
60:bc:9b:0c:e9:8e:d9:1b:07:43:31:bd:a3:e1:78:
ca:c8:9e:5a:b1:85:28:77:19:1e:38:f9:62:ab:18:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:01:0F:AA:DE:77:A1:BC:15:5B:F9:F2:1A:E9:FE:2E:33:24:9C:83
X509v3 Authority Key Identifier:
keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d9:ac:8d:6d:7a:79:d2:67:bb:0f:2d:49:8f:0f:af:8d:d5:
85:a9:99:ca:e6:18:ab:1f:dc:53:e8:80:3c:35:d2:1e:8e:ce:
1d:aa:44:99:bf:b9:ab:ff:64:8a:7e:a0:f7:94:40:ca:14:1b:
86:a0:9c:65:f6:45:36:6d:d4:b1:a9:fe:3c:2f:f4:9e:9e:df:
dd:f1:1d:82:d8:5e:1c:14:5e:55:b3:a3:96:c8:70:83:cd:c1:
ab:9b:60:61:72:8f:30:ea:ce:15:e2:2a:6e:16:be:42:ca:c0:
25:91:91:9a:a8:33:bd:ee:28:cd:da:e7:79:b5:bc:4f:e9:9b:
b7:7a:bc:25:10:b4:88:c4:c6:eb:33:86:f5:b1:fd:50:91:82:
45:57:18:39:5e:8b:ea:91:c5:ea:22:f1:da:15:9c:29:03:b6:
c8:5e:d9:7b:cd:2d:61:a8:a7:2d:ba:fe:a5:64:ca:1c:af:8a:
10:7d:e9:cf:99:86:b9:b1:01:51:c8:20:01:b2:55:1b:f3:c6:
b7:24:d1:2b:51:98:28:1b:0e:c6:03:f1:06:16:65:55:e3:3d:
e6:91:88:d4:97:f8:b5:8b:01:b3:07:82:88:da:bd:63:29:e0:
ed:31:25:b9:24:91:73:91:53:ca:ed:02:39:d0:ea:46:5e:96:
b9:0e:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:51:03 2026 by rpki-client