Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
File: iBKgqAncPNH72JUaj4D2mSXhGQg.mft (raw, json)
Hash identifier: 1jJT9nAL60JnT/bv6jzJPzWJG7oJgHRVyY2kAnQ7VW0=
Subject key identifier: E4:5A:55:01:F5:76:25:40:A7:F5:77:90:5F:5E:A2:43:1E:0F:A2:BF
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 01A189E48865AAD15D52DA3C157D0D897769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
Manifest number: 15B0
Signing time: Thu 29 Oct 2026 23:00:17 +0000
Manifest this update: Thu 29 Oct 2026 23:00:17 +0000
Manifest next update: Fri 30 Oct 2026 23:00:17 +0000
Files and hashes: 1: V4V1l39T5s1HWbLvpZ_dNNrQqrE.roa (hash: 2VhJQ/68VuS0vWM3hQGdKSnDSrR+nJHlsrGkam4iQlg=)
2: iBKgqAncPNH72JUaj4D2mSXhGQg.crl (hash: ZcEMH/783gT1tjNlGrSqlMHCUstt6VK3PDHNaFGxPgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:e4:88:65:aa:d1:5d:52:da:3c:15:7d:0d:89:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Oct 29 23:00:17 2026 GMT
Not After : Oct 30 23:00:17 2026 GMT
Subject: CN=e45a5501f5762540a7f577905f5ea2431e0fa2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:b2:64:0a:1a:87:a5:06:9c:cb:65:a4:14:
49:a4:a2:d6:00:b8:81:78:e0:c8:51:7a:72:eb:f9:
0b:ef:d6:f9:7b:98:97:f2:c2:be:f4:6b:e0:13:f0:
c8:be:59:07:cf:e8:a7:2b:48:6d:6f:ef:fa:94:1b:
3a:80:30:12:6b:f5:c9:40:ad:1f:fc:d9:ea:12:04:
90:84:de:dc:c7:19:30:71:89:37:8a:c1:dd:32:1a:
82:33:f8:1c:0b:8f:63:ee:c4:9c:c7:c2:03:50:98:
3e:08:d3:a7:50:82:5f:14:45:b1:99:4e:37:90:2d:
b3:73:59:e1:63:52:c2:a4:9e:c4:fa:05:09:71:43:
34:c0:c3:20:43:49:9b:ae:0b:70:c1:41:5e:5c:8e:
45:a1:8c:d5:5c:f4:86:3d:81:2d:1a:4d:9c:ea:fe:
6d:df:67:2d:cc:8b:36:48:61:d7:65:e2:4d:7a:55:
55:e4:61:bb:70:45:d9:9e:47:a6:a4:79:ed:e4:d6:
d6:ad:11:a0:e9:c9:ee:69:e0:9d:e7:80:d0:bd:39:
0d:ea:17:30:17:c5:b2:da:62:2a:e5:ed:bf:d8:ab:
a9:9b:d7:35:df:38:9b:26:8b:44:42:2b:92:49:dd:
b3:73:ce:dc:6d:aa:85:46:5e:cf:85:d6:29:5a:ec:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:55:01:F5:76:25:40:A7:F5:77:90:5F:5E:A2:43:1E:0F:A2:BF
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:74:cc:c2:04:66:06:b1:1a:3b:b1:ac:ac:e9:b2:92:e7:89:
0e:02:33:59:94:3f:81:20:8d:23:4a:62:64:d0:28:3d:08:3e:
92:79:74:59:5e:a1:6d:22:16:c9:b8:41:f4:d9:56:34:01:75:
2a:26:62:e2:60:68:fe:30:eb:3a:d1:a1:19:97:36:02:8a:ff:
fb:42:9f:77:84:7b:2a:95:f7:e8:a6:f7:c7:40:f9:fb:e7:48:
40:8f:78:a1:1c:79:f6:b6:6c:7d:49:28:c7:96:d1:47:a6:7c:
57:1a:75:9a:f4:fb:86:93:57:07:ee:9a:55:a8:80:0e:38:82:
6c:98:2f:a9:4e:c0:48:97:8a:67:54:a5:a8:04:3c:50:ab:62:
64:b3:f3:b2:23:35:da:37:60:35:7b:b8:e6:09:e5:04:44:7a:
a2:36:dd:d3:a5:5d:66:b3:d3:08:b7:1b:e8:d1:53:2c:61:e9:
3c:f2:7c:6b:1b:b1:f8:fa:a7:8b:d1:8e:f8:d4:8c:21:52:c9:
12:4f:d0:92:51:01:e5:c3:16:b9:d2:05:34:d6:a6:03:01:b1:
37:a5:7c:06:27:75:07:f5:bc:38:f7:bf:d1:23:af:ef:43:74:
48:bf:0a:2c:dd:be:5f:54:9c:45:8d:fc:ea:67:8f:49:9c:47:
3b:28:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:55 2026 by rpki-client