Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: 7uZRmHDUix8hQUaYVuxHFwKZMoPkeObkUxezXK48gwQ=
Subject key identifier: C3:61:F3:DC:4F:5A:A6:50:E2:D6:77:77:AC:8A:B0:49:61:4F:04:B5
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 01A16DC9136AAE8470BDC184D6EC99CE713F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 11B9
Signing time: Sat 24 Oct 2026 12:00:56 +0000
Manifest this update: Sat 24 Oct 2026 12:00:56 +0000
Manifest next update: Sun 25 Oct 2026 12:00:56 +0000
Files and hashes: 1: AOuKaEFuAus3hz3w0WC3j7I2mqc.roa (hash: YMOsepey7pZcM4gw70d5HgYaXkzZjfvaKQx2Aill38c=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: geQeyCu/EJax0tHy/HLSrYGJrResaeT/VYABuROkj1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c9:13:6a:ae:84:70:bd:c1:84:d6:ec:99:ce:71:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Oct 24 12:00:56 2026 GMT
Not After : Oct 25 12:00:56 2026 GMT
Subject: CN=c361f3dc4f5aa650e2d67777ac8ab049614f04b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:e6:3b:a3:68:98:12:e7:5a:5a:a9:e5:5d:
32:26:14:32:9f:5b:1b:4d:92:4f:ae:7e:11:ea:99:
f4:d6:0a:37:0f:77:a3:e3:09:43:c8:9a:2d:4e:52:
a8:8f:6e:79:2c:60:e2:fe:6e:34:04:2c:c7:8d:c4:
27:8b:a0:fc:64:44:8d:5c:51:44:f3:b9:0e:20:55:
38:2d:81:1b:8b:e7:81:fb:36:0f:5e:9a:54:02:5d:
2f:47:19:44:94:30:f0:a1:1f:c1:09:eb:98:50:61:
96:9b:bb:6a:26:e1:8a:e6:81:82:c0:83:df:43:f4:
ca:93:ae:25:3d:f6:25:a3:bf:2b:9f:34:78:a4:96:
7a:51:2f:a6:51:02:fa:df:63:9c:19:4b:fc:85:ef:
93:02:4c:a9:20:f7:7e:cf:79:64:75:70:2e:2a:d6:
3f:b3:92:52:6b:5b:d4:1c:de:4c:99:64:26:54:fb:
a6:6e:73:04:64:50:c5:83:cf:7c:6a:19:c0:ec:a1:
e7:dc:56:25:ac:2b:ec:78:3c:79:f6:88:2a:fb:ef:
3f:7b:9c:c3:05:71:79:ee:11:63:47:fd:63:24:97:
05:dd:ed:56:c6:21:3f:a0:b7:bd:3a:dc:66:c1:6b:
6a:60:42:0f:4c:89:5e:a2:ac:12:07:f3:2c:a2:78:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:F3:DC:4F:5A:A6:50:E2:D6:77:77:AC:8A:B0:49:61:4F:04:B5
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d8:5d:23:a2:59:a5:33:52:04:e8:f0:8b:58:9a:9b:21:bd:
1b:15:1e:e0:42:39:d8:21:1f:83:11:42:02:2e:93:a8:b3:94:
5c:d5:59:97:cd:01:10:a7:10:f1:b3:94:05:11:a3:d7:02:84:
31:f2:84:4f:27:0a:f3:b8:6b:1f:a4:0b:a3:89:f2:c6:5b:3c:
d5:55:47:01:ba:ab:97:92:74:35:c9:7e:52:0c:3a:43:2a:c7:
e3:4e:72:17:5f:95:b3:fd:27:18:64:27:8b:67:52:38:c3:d2:
c3:d0:24:28:4d:90:6f:01:81:8e:a6:3c:4a:40:13:7c:a6:d0:
51:5b:c5:26:86:db:cc:69:be:75:f8:4f:3f:38:34:ab:39:2f:
3b:72:c8:b0:77:94:e6:0d:3e:e7:eb:15:d1:ec:63:71:2b:04:
3a:f5:ee:82:bf:bb:8d:68:6d:0b:81:ed:4b:da:12:6f:2d:0c:
90:e9:ed:22:9c:7b:fa:57:6a:c0:86:cf:4b:67:ee:ad:9b:c3:
ba:06:4a:d1:9a:8e:4f:02:8d:f3:6b:58:b2:4e:9f:67:85:45:
99:71:60:22:0e:41:53:07:82:3b:f5:55:74:ae:29:a9:de:04:
4a:0e:ca:5c:42:e2:2b:ad:48:79:cf:32:9d:67:fa:2d:a9:a8:
35:85:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 16:56:23 2026 by rpki-client