Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: J2AkCQaTOGdnpVsKOQooJDI5cIV01TfWZiBZHwHWa5g=
Subject key identifier: B6:0E:A8:57:4C:AC:F3:BF:58:69:9A:C2:A2:D4:BC:4D:B9:1A:6A:AE
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 01A179287E21119429732B16B6AF26538E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 1797
Signing time: Mon 26 Oct 2026 17:00:59 +0000
Manifest this update: Mon 26 Oct 2026 17:00:59 +0000
Manifest next update: Tue 27 Oct 2026 17:00:59 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: 2BTX95oOgQ/jphcgo8BETBYRro3he4nMvLGgOFJa3lw=)
2: c9DEUEWEQPqrGgYUimiiQviSMgM.roa (hash: wakxrbqHUtPpN1M0QZFEdKnthWi1t40kvnk8QYdL7EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:7e:21:11:94:29:73:2b:16:b6:af:26:53:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Oct 26 17:00:59 2026 GMT
Not After : Oct 27 17:00:59 2026 GMT
Subject: CN=b60ea8574cacf3bf58699ac2a2d4bc4db91a6aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:50:52:ce:70:4d:7e:fa:8e:0f:d9:e0:d7:
ff:5f:bc:34:3a:7d:d4:41:64:5a:48:c6:a1:64:af:
34:ac:16:7d:9d:8a:e0:b8:95:5d:fe:83:59:49:ef:
e1:d2:85:0b:27:18:9f:f5:ae:4f:3a:47:9b:4e:d9:
ad:e4:bf:80:c7:81:09:ae:7b:27:16:22:d0:7d:e3:
f0:c0:62:d9:94:f9:ff:89:b5:d4:12:7f:38:46:e7:
52:56:ef:70:67:5e:95:d1:0f:47:39:d7:e2:4b:f4:
46:d6:bb:61:0f:9f:f1:4b:f6:c9:30:63:f9:d7:c9:
78:91:34:c5:28:34:19:93:94:4c:11:06:b7:17:ca:
ad:ab:7e:3c:b6:5e:ca:61:27:ea:7d:e9:10:b8:26:
23:fb:2d:c3:3f:3d:cf:ef:c9:e8:d6:3f:31:e4:3c:
a4:5f:02:8a:79:0c:95:d1:45:f6:13:ff:90:a8:ef:
d6:fc:2a:46:58:a9:9c:8e:1d:fe:7d:c2:11:8a:ee:
60:52:2a:9e:42:97:90:d6:bc:17:21:db:56:37:be:
2e:5f:75:cb:13:70:a7:b2:a8:74:3b:f8:c4:9f:69:
45:9a:42:df:f1:42:98:f6:aa:26:0e:11:fd:4c:ee:
92:4e:4b:a8:bc:d3:d5:d9:03:6b:0e:aa:50:52:aa:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:A8:57:4C:AC:F3:BF:58:69:9A:C2:A2:D4:BC:4D:B9:1A:6A:AE
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:98:68:b2:32:e3:44:f3:68:0e:6d:6f:90:5b:a1:d2:62:36:
d0:53:c4:ed:97:6a:98:68:8a:11:f4:f1:a7:a9:cc:d1:db:66:
7a:56:6e:9c:43:0e:75:9f:a1:68:42:2c:56:5c:2b:86:73:08:
f7:4d:16:f1:d0:26:59:89:a8:53:2b:e8:f5:6e:a3:08:03:42:
41:71:20:b3:08:80:0e:08:e3:01:79:e8:c1:cf:fd:94:33:ea:
d6:e5:a4:45:83:9f:9d:73:54:dd:0b:31:07:72:93:c4:ab:6a:
c2:4d:82:02:77:27:17:0f:3a:c4:c2:26:88:05:f6:50:cd:4c:
bd:b6:ae:bb:76:57:19:27:6d:f8:76:0a:9f:5a:57:3d:52:e7:
13:33:5c:07:15:bc:4f:b9:a4:02:7b:b8:f5:38:c8:83:0a:b1:
a0:1f:8a:57:e2:c2:83:cb:8c:67:97:57:4b:d7:a2:af:47:df:
61:02:4a:23:9f:60:c9:5d:a7:40:b7:fc:d5:d7:59:d3:bd:1d:
30:8a:51:ba:f1:76:9d:79:6c:0e:0b:38:9e:e2:53:12:95:b2:
12:90:5c:f0:be:89:45:8d:a4:d9:e3:ad:81:32:4e:cd:34:02:
9a:14:c7:96:2f:6e:78:c6:ca:c3:61:f2:73:1c:4d:b4:61:43:
19:c8:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:53:46 2026 by rpki-client