Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: eunvGsFiOkPI+/2m2Nyn3fdjoWUTld9NxayJ9vEzVXc=
Subject key identifier: 96:29:8C:26:BD:72:31:EB:A4:A3:25:07:F0:D1:9D:C4:52:7D:6C:B5
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 01A1E05F606FABB5D79E667D6DA2B8688BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 0E10
Signing time: Sun 15 Nov 2026 18:01:49 +0000
Manifest this update: Sun 15 Nov 2026 18:01:49 +0000
Manifest next update: Mon 16 Nov 2026 18:01:49 +0000
Files and hashes: 1: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: TbTd4Q+cvVMPRPOtLwbXyI70MC5HiysvpKepsQSEOcs=)
2: lf_obYLkdv0nF0_npBLfEGEUr5g.roa (hash: SJ8whxb+V86Y+QBEXZUDuhEOcL67d4x2EIlsWGzE0Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:60:6f:ab:b5:d7:9e:66:7d:6d:a2:b8:68:8b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Nov 15 18:01:49 2026 GMT
Not After : Nov 16 18:01:49 2026 GMT
Subject: CN=96298c26bd7231eba4a32507f0d19dc4527d6cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:b5:0b:ac:72:f1:da:cd:73:6f:c4:3c:e1:
f3:0c:47:d2:18:ca:26:cd:8c:df:4e:65:13:98:28:
96:8b:73:75:79:85:41:3f:7f:7c:a4:67:58:03:a1:
c1:23:cc:e8:1f:39:30:20:87:d0:d8:8f:8f:86:db:
6b:12:22:4f:cf:06:a4:c9:72:e1:6c:dd:96:ff:54:
eb:95:10:c5:62:11:27:f0:bf:41:89:f4:c3:b7:6d:
88:3c:c9:06:45:1e:31:6b:cd:81:db:de:a5:c1:ae:
48:32:f3:41:77:25:dc:51:57:d7:c1:cd:dd:f4:35:
e4:0e:3a:31:ab:51:ce:07:02:4f:f5:ea:6f:a7:a5:
d4:ae:a1:b2:58:44:22:a4:f0:72:18:de:34:5f:ae:
9c:12:7d:ae:8e:33:ae:fc:a4:c8:42:f9:c8:f6:61:
0d:e5:9a:07:c3:e2:2f:22:c2:bd:2d:99:1d:43:86:
fb:62:fc:da:06:12:b4:8e:89:8b:63:8f:3e:ec:1e:
32:20:1c:33:39:cb:19:ef:f9:50:11:ab:82:6c:33:
90:d6:88:f0:12:49:2f:2a:ef:dd:f6:3d:22:65:2e:
7b:ff:04:fe:e6:5e:ac:38:3f:89:fd:eb:90:55:70:
48:98:4f:2e:85:82:90:14:59:08:00:d4:95:43:40:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:8C:26:BD:72:31:EB:A4:A3:25:07:F0:D1:9D:C4:52:7D:6C:B5
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:c6:60:41:a7:6a:fc:df:5d:ff:a4:3e:60:dc:44:ab:f2:
4a:38:4c:49:f9:30:c5:c5:ac:d5:71:88:f5:5a:de:cd:c5:b9:
41:e9:06:96:f8:7f:da:29:eb:8b:8d:fe:d3:32:38:4c:7a:5f:
72:e2:e9:ef:ee:13:9a:f3:43:c7:54:37:e7:d5:16:ef:01:66:
9a:d3:31:86:d9:db:30:8e:48:f0:12:9f:f6:a9:af:94:88:a7:
5e:28:8c:9f:8d:7f:d0:4a:de:5a:ac:dc:60:80:34:30:a6:4a:
47:04:8d:a8:1f:b4:48:fd:98:da:c0:11:a5:d1:3e:dd:1f:39:
e4:a4:52:77:73:0c:71:14:ba:02:59:8e:a3:48:7b:72:7a:1d:
df:42:9b:9e:45:89:35:41:26:3d:2e:a4:30:a2:36:45:77:ee:
83:9a:ba:66:1b:6a:bc:7a:6c:8f:41:21:3c:10:42:b4:ab:7e:
1c:05:f1:29:c3:51:1e:98:84:13:e2:6f:15:a3:f5:12:7a:d1:
04:21:1b:29:8f:50:d6:75:15:d5:ae:12:ed:48:35:5f:23:fc:
43:83:96:81:c4:8e:22:9b:f3:50:4f:21:22:60:1f:44:3c:2f:
14:37:86:49:a8:b9:99:cf:71:96:69:eb:77:f3:82:a7:17:cb:
88:51:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:24 2026 by rpki-client