Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
File: iBKgqAncPNH72JUaj4D2mSXhGQg.mft (raw, json)
Hash identifier: 0NJzRwJjJQsswJtCgmhvtbb6/zHARus/cV0Ah5F5JnU=
Subject key identifier: 43:DE:5B:6F:9C:66:0F:05:E3:D8:5D:FA:C9:9D:AC:ED:AE:75:A2:E0
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 01A18608732AD2D7194C54C2089B0C847B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
Manifest number: 15AE
Signing time: Thu 29 Oct 2026 05:01:02 +0000
Manifest this update: Thu 29 Oct 2026 05:01:02 +0000
Manifest next update: Fri 30 Oct 2026 05:01:02 +0000
Files and hashes: 1: V4V1l39T5s1HWbLvpZ_dNNrQqrE.roa (hash: 2VhJQ/68VuS0vWM3hQGdKSnDSrR+nJHlsrGkam4iQlg=)
2: iBKgqAncPNH72JUaj4D2mSXhGQg.crl (hash: 6LXPb6HLwRPZRtwhMRDL3o6BtMvILlUypi2P2qW8Vx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:73:2a:d2:d7:19:4c:54:c2:08:9b:0c:84:7b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Oct 29 05:01:02 2026 GMT
Not After : Oct 30 05:01:02 2026 GMT
Subject: CN=43de5b6f9c660f05e3d85dfac99dacedae75a2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:7b:86:04:43:47:62:53:2b:d5:42:af:a8:
27:50:cd:83:2e:4a:59:e0:dd:95:46:ab:52:d7:b0:
e8:a0:89:30:3b:a7:e9:fa:44:d8:82:11:80:6c:f5:
65:42:7c:14:19:1c:e9:00:f3:f7:67:ad:a8:01:22:
2d:21:3d:b3:82:4b:62:71:e9:b2:1b:42:75:e9:97:
55:b8:4a:e7:4c:39:0c:65:53:95:d7:92:c3:41:5e:
a2:a9:23:42:52:fb:b8:fc:30:1c:da:72:41:7e:cc:
8d:44:c2:58:14:33:de:80:9d:84:b0:0b:0c:65:79:
d5:3d:48:68:5d:d5:a6:a5:bf:dd:7c:9a:c8:bc:a4:
5a:23:23:3f:13:2a:1c:ea:90:ef:ad:c5:fc:2e:1a:
f6:e0:96:5e:cf:dd:1d:e7:3a:84:0b:5a:f9:50:86:
67:57:f0:06:03:2e:3d:c9:2f:29:40:61:96:08:55:
0c:6a:83:74:ef:59:e2:34:21:48:49:7e:d4:1a:fa:
15:7a:e0:73:e3:28:b5:d9:d6:c7:96:5f:ae:c9:90:
58:ca:e1:3f:e1:fd:43:39:03:d0:a3:c6:d6:df:29:
c5:6a:d3:e1:ee:31:17:e3:3d:2b:bd:19:c5:94:f8:
ff:8a:de:13:fd:41:f2:3e:d0:7d:2c:89:08:a0:03:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:5B:6F:9C:66:0F:05:E3:D8:5D:FA:C9:9D:AC:ED:AE:75:A2:E0
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e8:fc:02:e9:fd:f3:7a:2f:ab:56:2c:bb:1c:c4:fe:40:80:
05:fd:81:d0:88:d5:3b:06:ed:92:5c:da:7d:4b:f8:aa:5e:65:
c9:35:e8:1c:a4:6a:e0:51:a3:dd:b5:37:db:7e:c1:99:b5:40:
32:a6:70:5f:14:06:d4:c2:90:a7:9f:20:38:e5:f7:e5:c9:df:
21:58:44:41:b7:5c:65:b3:87:c8:5b:aa:07:67:b5:81:83:8e:
c3:97:6e:65:1c:d0:5d:49:05:4c:d7:80:5e:39:bf:f4:b7:b0:
a7:06:7d:16:e4:b5:7a:96:b8:ec:f4:23:66:cc:f8:7a:4e:77:
b8:3f:88:2d:59:cd:1a:79:c2:cb:90:5d:ee:bb:77:3c:6a:eb:
48:2b:02:09:fc:d0:cf:12:cf:82:7f:1d:34:4b:79:74:63:07:
19:46:39:ae:24:41:2d:b7:c4:6e:44:4e:65:5a:2b:08:ef:6f:
ea:e7:ca:81:80:6d:51:b8:9c:3b:70:ff:88:a6:1f:22:80:67:
d2:90:fa:64:67:8d:b4:0e:96:7d:42:b9:fd:5a:61:a3:5c:ce:
15:65:7a:c1:56:c6:13:45:d8:41:d8:05:8b:8c:3d:11:57:a1:
35:c5:18:37:cc:58:3c:af:90:6b:e3:4b:80:b5:b5:bd:a6:40:
a2:8e:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:56 2026 by rpki-client