Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File: IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier: z3RE6JgOPWXJ3hY+xcrG7rZuobD569ZjRIbKokXpiAc=
Subject key identifier: 4C:EC:AA:86:7E:42:C6:38:A3:6C:A8:79:2F:D9:70:F4:C7:C3:79:2E
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 01A1016CC22178937A984061577894B354E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 11:01:06 +0000
Manifest this update: Sat 03 Oct 2026 11:01:06 +0000
Manifest next update: Sun 04 Oct 2026 11:01:06 +0000
Files and hashes: 1: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: ajg1NbZUP9b2iiPtE7w5ciU8uxpXUhMasR1c0R3GjZI=)
2: mIJkdI_D_OLqojcSa_oOxsMYHXI.roa (hash: /rw37thuWBvovhA/vpu0eqLvxv8XNv0W36vkyYoUMlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6c:c2:21:78:93:7a:98:40:61:57:78:94:b3:54:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Oct 3 11:01:06 2026 GMT
Not After : Oct 4 11:01:06 2026 GMT
Subject: CN=4cecaa867e42c638a36ca8792fd970f4c7c3792e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:76:a4:a5:09:63:89:36:66:57:1e:21:45:
a7:63:28:5a:e4:41:3d:bd:1d:ac:6f:dd:9a:9a:7c:
57:69:e1:25:7b:f1:5e:7d:e3:7f:3a:50:03:b9:87:
04:24:b9:31:bf:f9:f6:9f:1f:58:5a:73:2c:4b:67:
52:cd:04:19:09:66:86:77:98:e3:e2:fe:9f:4e:9d:
6c:33:87:e4:f8:70:45:9f:2c:bd:8f:32:f6:ab:2d:
8b:4f:5d:d1:25:bd:2c:ee:85:4f:06:99:17:f2:29:
b0:a3:93:c3:5c:0b:e9:d8:07:43:ba:42:ae:b3:f9:
04:89:1e:72:14:d1:3a:1a:80:e8:30:39:f7:94:b0:
01:18:dd:4f:3a:4f:2a:94:d5:d8:f7:02:e1:4b:c4:
44:31:65:33:22:71:c0:44:65:db:57:d9:ff:e0:cd:
63:4d:81:7f:af:0f:a7:3f:e7:d7:5e:f2:65:61:74:
83:7a:58:04:8c:66:d0:68:53:b9:82:49:57:c6:eb:
7a:85:e8:57:ad:90:b6:71:9e:54:0c:79:c3:9b:16:
19:04:ae:4b:c2:9c:72:d7:81:b8:e6:26:7a:d2:cb:
9b:81:51:d2:43:39:05:fd:8c:de:4f:ad:92:14:1c:
8c:94:02:e3:c4:89:3c:62:fc:64:64:72:59:95:48:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:AA:86:7E:42:C6:38:A3:6C:A8:79:2F:D9:70:F4:C7:C3:79:2E
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:dd:9f:62:f2:f2:73:12:9f:38:50:70:58:cf:81:d9:ad:3a:
3e:98:be:f8:6a:8a:df:0d:96:e1:ea:ba:71:a6:aa:6c:e8:1e:
93:13:30:08:e3:ed:b8:1b:c4:dc:45:de:bf:d5:7e:fd:20:82:
ef:4a:c8:74:0d:da:1e:79:4e:4c:65:ec:f9:21:33:91:3b:36:
bb:bb:04:d6:20:89:60:2b:82:39:0c:52:75:b9:4d:53:fc:14:
18:83:93:4b:51:b2:e9:99:e8:f4:05:ce:bd:49:4e:42:18:a8:
a2:7d:4c:40:a7:db:a8:a2:09:68:36:2b:96:9c:c2:a8:cb:82:
da:d4:f9:d1:ec:f8:a1:99:01:c3:0e:ff:cc:d9:8f:4e:ae:c6:
26:07:4f:d3:46:84:81:0f:0f:42:82:38:18:2c:88:19:bf:23:
17:b1:77:c5:6a:77:75:3a:a3:41:03:ba:09:b2:7b:2c:5d:68:
7a:a0:ec:a1:09:25:90:1d:67:ec:82:a5:79:8c:78:fb:5e:c1:
54:ca:59:74:e7:6d:52:69:71:da:d8:7a:6b:81:36:78:7e:80:
67:1e:77:13:a4:8f:0b:ca:18:2b:c3:44:51:d2:71:dc:e2:8c:
99:97:f0:57:5a:cf:3f:08:6d:c4:56:75:ee:6e:7b:3c:14:53:
0d:74:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:32:45 2026 by rpki-client