Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier: iYjT8pWuj4/N0l5IqpFhvFbOjpxqUVmaejzwKaWG8/0=
Subject key identifier: 28:13:16:B4:16:91:15:CC:61:7A:F6:76:DD:EF:32:27:04:A1:87:19
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 01A18214709F53C3BFBFA231EA3BE11321F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number: 1AEE
Signing time: Wed 28 Oct 2026 10:35:39 +0000
Manifest this update: Wed 28 Oct 2026 10:35:39 +0000
Manifest next update: Thu 29 Oct 2026 10:35:39 +0000
Files and hashes: 1: 9TBMQolrynkT7tDiDQfMSK2fy8k.roa (hash: DNBUcS0X2dXGEBDpiiVERi+TH/oYhB/Rs+ebfGfKbXM=)
2: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: KuK6uO/C4QR3SV+ZbDREiISPlrTEyrT8VYm0kguAdxI=)
3: YbMXs-qqnZGcm28PtMoFbQ9Fiyc.roa (hash: +dXezcIxEO83p8ts3tcgQGxFH2MyYEbFUXR/v2ogXqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:14:70:9f:53:c3:bf:bf:a2:31:ea:3b:e1:13:21:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Oct 28 10:35:39 2026 GMT
Not After : Oct 29 10:35:39 2026 GMT
Subject: CN=281316b4169115cc617af676ddef322704a18719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:ff:b1:a5:c5:7c:33:fe:90:55:9d:37:21:
7f:59:d9:e8:d2:1d:66:b9:d9:ac:57:ff:03:af:53:
08:68:7a:c1:46:03:18:11:51:cb:12:39:7a:86:05:
c5:e7:31:db:df:43:9f:89:70:b1:2b:a7:05:ae:e3:
84:b9:98:db:30:06:ea:5d:48:d4:07:d6:93:7f:66:
4a:d6:da:c7:af:93:92:30:d5:cd:91:58:ee:28:b1:
13:c1:8d:62:8f:8e:6e:51:f7:97:8e:74:92:00:0c:
dd:e4:d5:d9:72:fc:3f:46:65:dc:e7:3f:45:cf:d7:
d6:29:1f:6f:5b:b7:49:bc:06:91:01:12:d7:7a:76:
13:47:2c:56:ef:37:a6:db:41:e7:17:a6:e0:71:be:
76:0c:24:40:e2:16:5f:2a:e2:f6:f2:a5:f5:1d:df:
a6:d1:39:af:a3:17:4c:5d:7a:07:9a:1f:8a:c5:bf:
90:4d:83:5a:52:9f:83:19:b4:16:e9:32:f6:02:e9:
4b:38:15:93:10:79:59:06:a5:16:ac:3d:89:92:e2:
52:00:fe:96:34:9b:db:a6:54:ba:74:45:c7:2d:2a:
97:d1:17:34:5c:f2:c5:95:e7:49:a7:9b:65:1e:2f:
dc:eb:6f:fd:54:cf:7f:fd:34:27:0e:ae:b3:61:bc:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:16:B4:16:91:15:CC:61:7A:F6:76:DD:EF:32:27:04:A1:87:19
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:61:88:d1:91:56:38:89:96:96:29:26:a8:c8:81:01:da:8a:
fe:59:12:63:dc:23:0d:23:78:ea:46:da:4f:25:ff:20:77:5e:
4d:f9:39:3e:3a:3d:8c:71:17:09:af:c3:fe:a2:37:8f:a7:59:
22:4f:10:ba:66:d6:6d:69:d2:02:4f:c4:d3:ba:74:d5:3a:4d:
24:a8:05:44:99:e5:7d:9c:0f:4e:a0:59:4c:64:cb:40:a0:62:
9f:c2:24:4c:d4:1c:c1:8c:ca:76:6c:92:49:ad:20:01:09:50:
71:39:b7:43:a8:28:ba:f2:ac:64:32:a4:d9:f0:56:56:ab:6e:
54:e5:39:6a:78:1d:17:62:66:fb:5f:83:19:d3:dc:a3:00:5c:
f9:6a:d7:46:7f:b4:50:7c:5c:44:be:66:f5:10:8d:10:ff:2f:
8e:bb:75:ab:df:1d:f2:61:a7:22:3d:03:3e:36:8a:7d:1e:29:
18:36:82:d8:5a:49:52:ab:1f:a7:dc:a0:e7:ef:d8:51:bb:8a:
75:c3:1d:1f:a8:fa:3e:db:97:df:3a:e4:16:bb:eb:e0:ba:0e:
0c:9e:df:34:c3:80:45:2a:1e:23:eb:fc:00:cb:ec:7e:47:32:
51:0e:85:34:c4:ab:90:2d:6e:99:46:9e:e3:3a:91:92:58:b5:
7f:8c:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:37:51 2026 by rpki-client