Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
File: IYssahphoXurfAMggKo78kR4tt0.mft (raw, json)
Hash identifier: if51BNrRtRnF6uBxpFQHAv/8uokIGYRDCMQL2glb+XU=
Subject key identifier: 8E:2B:48:6B:88:A6:61:81:F6:B1:1C:97:E1:D4:4F:C0:6F:D0:58:BC
Authority key identifier: 21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
Certificate issuer: /CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Certificate serial: 01A1799636BD49AA90C4B93D5DEEF0F3B58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
Manifest number: 117E
Signing time: Mon 26 Oct 2026 19:00:49 +0000
Manifest this update: Mon 26 Oct 2026 19:00:49 +0000
Manifest next update: Tue 27 Oct 2026 19:00:49 +0000
Files and hashes: 1: IYssahphoXurfAMggKo78kR4tt0.crl (hash: a5MZUO19JVMG29Lvkb5xPBN+jF3iT6X73Yai04AMEn0=)
2: dCLnn7sgK5v7oJDUJbrjvWO6u5U.roa (hash: BC/yFL0CMfvt5OiaE+u7P/nSsti8Z5g8EroFC8bwyK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:36:bd:49:aa:90:c4:b9:3d:5d:ee:f0:f3:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Validity
Not Before: Oct 26 19:00:49 2026 GMT
Not After : Oct 27 19:00:49 2026 GMT
Subject: CN=8e2b486b88a66181f6b11c97e1d44fc06fd058bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:75:ad:f5:e6:dc:fe:13:32:dc:43:fc:39:
97:fb:69:bc:ae:bc:85:fb:77:30:8f:71:8a:21:03:
92:3d:18:f5:66:2b:d1:2d:49:4d:18:1e:38:4a:ff:
f7:1c:0e:5b:a3:34:46:b4:c1:e0:e1:d9:1c:d2:83:
f1:69:76:3d:f0:cf:b7:0f:de:ba:e1:2b:f4:94:25:
0e:91:0a:0e:3d:09:67:d1:2a:2b:3a:73:1f:8a:37:
b1:90:df:bd:30:d4:7c:27:8b:0f:6c:ff:8d:b5:33:
31:6a:e7:12:64:18:3a:d1:92:6b:44:15:ae:bd:0f:
b1:ca:be:90:8f:01:a8:c6:1e:5e:80:77:99:c6:39:
89:cb:9d:16:78:58:b4:3d:06:4a:f7:33:d8:a0:f3:
62:39:78:2f:09:0f:de:34:6b:8d:a3:20:c7:75:bd:
7c:35:f0:b2:fe:9c:6d:0e:ea:1a:e7:07:77:7b:90:
36:fe:55:c6:32:84:74:e5:fe:60:92:ec:4a:9e:3c:
43:b3:45:0e:3c:06:9d:d2:7d:5a:30:75:4c:d8:90:
1f:44:5e:4c:12:2d:db:95:27:e0:20:3f:38:3a:d3:
52:c3:f2:69:b5:54:8d:3e:1a:2f:cf:ea:4b:8a:f6:
60:0a:5c:ed:06:4b:bd:ed:e6:59:49:d2:48:2c:0c:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2B:48:6B:88:A6:61:81:F6:B1:1C:97:E1:D4:4F:C0:6F:D0:58:BC
X509v3 Authority Key Identifier:
keyid:21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:96:a6:a6:d0:88:c6:c7:27:31:e0:9a:6e:fa:4d:c3:84:4f:
45:8d:93:06:8b:b1:55:b8:ec:3c:9c:2a:2f:68:a5:36:3a:a6:
33:c8:29:35:60:13:f0:7f:8c:e4:c6:b8:ab:60:46:90:c0:61:
c6:a9:24:9d:33:a6:dd:af:ad:78:5c:8d:75:7a:9a:52:37:0a:
25:cc:da:da:d7:c0:7f:97:c7:1e:25:a2:6a:a4:2b:e3:e6:82:
6f:b2:60:23:a9:2b:a1:2a:94:a7:f0:09:09:93:86:b4:34:52:
14:99:e3:5c:5e:b3:6f:a9:6e:37:53:46:e5:85:a1:1a:2f:eb:
e1:15:21:fa:2c:b6:8f:15:39:a5:2a:4f:2b:85:de:2f:f1:86:
ae:13:b9:40:f5:6b:0a:29:11:44:83:2d:2b:f8:18:c0:39:ec:
3c:ed:34:d0:c4:a4:b0:8e:12:72:a0:2e:6e:fa:88:93:d0:ca:
e3:40:f9:75:91:f1:7c:2d:59:b4:00:e4:52:20:dd:0e:79:6e:
e4:1d:48:cb:a8:12:24:8e:1a:1e:84:8f:da:8b:85:95:fb:48:
a8:f5:2e:4a:e3:c0:99:23:21:04:ae:61:e5:50:66:63:cb:50:
f0:b8:e1:40:5f:ec:3c:1d:36:0b:4a:d0:76:f3:91:23:46:fd:
20:a4:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:50:31 2026 by rpki-client