Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
File: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft (raw, json)
Hash identifier: UogDKDB2suiUjA8ROtLBczLdxI2Id70eDVoqMiS3Gkc=
Subject key identifier: 44:EA:1B:76:8B:33:2E:4C:E5:B4:87:6A:3C:3E:6D:CF:12:8A:47:A9
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 01A151088BCC9B739C9686405C8748603FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
Manifest number: 0128
Signing time: Sun 18 Oct 2026 22:01:16 +0000
Manifest this update: Sun 18 Oct 2026 22:01:16 +0000
Manifest next update: Mon 19 Oct 2026 22:01:16 +0000
Files and hashes: 1: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (hash: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=)
2: 2LF9uim0YdDpGegCa61UauWuWfA.roa (hash: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=)
3: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl (hash: s+i28CbNHfKKQ9B3hNP14WKrsv8n050JMe4x+++4SVU=)
4: LsSQmC_-rCiQYaygyKvWlRY8mCY.roa (hash: oBqqVFOWNVmG9s/k9r52SWz1AmcmC9z1tPLhK+7cnj8=)
5: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (hash: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=)
6: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (hash: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=)
7: d9UMor1VyAKI95wbo0VML8JqXA0.roa (hash: Ue762QdnWxcT+gtVI8j0lIqvVnpOu+dK95cax6FcHFw=)
8: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (hash: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:8b:cc:9b:73:9c:96:86:40:5c:87:48:60:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Oct 18 22:01:16 2026 GMT
Not After : Oct 19 22:01:16 2026 GMT
Subject: CN=44ea1b768b332e4ce5b4876a3c3e6dcf128a47a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:30:1f:ea:27:d7:b0:9e:21:71:1f:f3:b2:
87:4c:32:0d:fa:31:91:08:84:14:45:b8:3a:19:48:
1e:73:99:5b:fc:d7:ef:73:62:85:ac:1e:e4:78:c9:
2b:a4:f9:de:2f:9c:6b:06:18:06:df:9e:f8:47:e5:
2c:a8:78:57:ae:ab:9f:64:43:ed:d1:70:d4:4c:1b:
d5:43:b8:4a:f7:c8:7a:3c:72:1c:7b:bc:9c:7a:ef:
cb:d8:e2:c5:82:67:0e:d1:d4:a3:12:76:3f:ef:9c:
b2:71:29:71:ed:8c:4b:a5:b0:ef:50:f4:09:d6:ca:
db:ac:f3:15:62:3a:d5:be:88:65:6d:74:28:cb:47:
16:7b:4b:c6:20:f3:19:4a:26:57:41:d6:0f:ba:cb:
49:d0:2c:52:98:04:5a:c6:39:d9:d9:2b:9b:68:66:
67:e6:8b:dd:28:6a:89:ab:11:d7:df:54:b8:de:18:
4c:20:9e:e3:7c:51:c3:6e:52:d8:6b:fd:79:43:09:
e6:ed:75:68:e1:e3:e7:b9:4c:b0:fc:86:5a:fc:56:
5e:b4:65:c2:4a:e3:88:be:87:41:0e:92:92:bc:17:
a9:f9:9d:e9:b4:eb:a1:f7:00:b1:c8:a6:76:ed:a9:
42:97:ef:1d:24:2e:76:92:59:aa:4f:09:0f:73:cd:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:1B:76:8B:33:2E:4C:E5:B4:87:6A:3C:3E:6D:CF:12:8A:47:A9
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:44:34:09:dc:db:5e:bb:3e:5c:3e:12:f6:eb:87:d7:b6:27:
72:d6:2c:c7:ea:e3:fd:65:c5:70:ff:6f:0f:bc:7f:c2:a6:c4:
f6:6a:a9:6d:56:31:f3:a9:59:02:fc:21:22:e7:2e:70:d8:89:
a0:ba:af:61:2a:18:95:e8:58:7c:b8:b9:b0:c1:e7:f6:16:ab:
0a:e9:01:f5:eb:7c:0d:ee:b5:b6:4e:3b:f7:3b:2f:db:4c:d8:
17:22:77:1e:b5:07:5f:6d:53:a5:4a:1e:e9:3f:31:6f:45:51:
22:8d:6d:e7:fe:80:7a:6e:87:76:2d:0c:15:d8:e4:38:f0:4b:
8e:ba:2b:47:dd:9f:34:93:39:32:14:48:a3:c0:ab:31:1e:88:
df:23:a9:ac:e2:bf:7f:e2:ac:3f:79:2f:48:8f:e2:03:75:df:
eb:44:d8:27:a5:fb:01:55:1f:8b:2f:f2:12:b7:c9:6a:da:72:
69:72:0d:df:b8:9c:48:dd:3c:07:14:bc:56:f5:17:5e:fc:ad:
9f:86:5c:bb:6f:a6:78:f7:10:2e:1c:e3:1b:82:3d:51:64:78:
30:fa:ac:bb:64:3c:89:5a:04:e6:01:87:4c:85:e6:8c:18:77:
df:3a:39:cd:2f:31:67:18:b6:85:f4:14:33:79:b2:13:fa:be:
9b:3c:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:16:50 2026 by rpki-client