Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.mft
File: IysrqiGe4bxOi_3iEqPz27YpAdk.mft (raw, json)
Hash identifier: z0Pyv86ifVofkorcTGe5jS06yTyQhvqzKyG3vklYkHc=
Subject key identifier: BB:74:93:E9:7F:32:C2:66:91:29:F0:10:A8:E2:14:FF:8C:C8:FF:4E
Authority key identifier: 23:2B:2B:AA:21:9E:E1:BC:4E:8B:FD:E2:12:A3:F3:DB:B6:29:01:D9
Certificate issuer: /CN=232b2baa219ee1bc4e8bfde212a3f3dbb62901d9
Certificate serial: 01A17EF427195B6391681CAE30347EF3465D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.mft
Manifest number: 16
Signing time: Tue 27 Oct 2026 20:01:32 +0000
Manifest this update: Tue 27 Oct 2026 20:01:32 +0000
Manifest next update: Wed 28 Oct 2026 20:01:32 +0000
Files and hashes: 1: 1-2JjIT0BwXXkcTzYPbr5zBDkfow.roa (hash: ncYR/OKiwuyY7imRGcoS/IlBlOuZd2foTSLpO4T1c/Y=)
2: 1-ana5CiQrlxgeZVaPOpCEh5Bnp8.roa (hash: 1AqJwbwSaXAkBRRP9Cjas8dt7lszAZh0v41o5RR9U9w=)
3: IysrqiGe4bxOi_3iEqPz27YpAdk.crl (hash: 3eniXFhnlcXXpnlLXT4vAZtu2h8cQAy2eFVHcmVLn9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:27:19:5b:63:91:68:1c:ae:30:34:7e:f3:46:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b2baa219ee1bc4e8bfde212a3f3dbb62901d9
Validity
Not Before: Oct 27 20:01:32 2026 GMT
Not After : Oct 28 20:01:32 2026 GMT
Subject: CN=bb7493e97f32c2669129f010a8e214ff8cc8ff4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8f:1b:c2:f8:86:65:9e:03:7e:aa:7b:c8:e8:
14:61:63:f0:a2:cb:4e:55:e1:74:be:14:85:ec:9d:
2f:3b:3c:7d:af:71:c0:25:a3:df:e0:89:83:2a:62:
e7:e5:11:e2:cb:b4:00:6a:e8:91:26:ca:e2:5a:fa:
71:de:7c:ca:25:a3:56:1f:52:79:17:6f:1e:09:74:
44:bc:d8:4a:fa:76:d3:9a:f7:db:67:4a:e0:aa:15:
c3:c4:e6:41:cd:d4:fe:7c:fb:ea:e2:12:99:c6:ac:
8e:3a:30:f0:16:e8:37:d3:c7:c2:c1:bd:f2:33:77:
05:57:2d:fc:b3:11:75:a5:54:1a:b8:52:b5:82:bd:
97:ce:96:17:82:26:1f:86:1a:1e:e6:8a:e5:3c:47:
4e:23:5a:10:80:aa:c8:b8:d0:db:94:01:32:33:10:
97:d2:05:23:67:bf:84:d5:97:41:cd:4d:83:cc:12:
e3:56:0c:f0:f7:cd:78:02:7a:f2:43:eb:6b:98:b7:
14:e5:8b:7b:7a:b6:8d:04:3f:e1:81:41:ee:20:c7:
13:50:a3:2e:ff:c7:1f:46:37:71:d5:c2:60:da:b8:
5b:4b:b8:c5:c6:03:89:48:a5:35:9b:fa:4c:0b:8b:
66:47:25:d5:86:e0:ef:4f:0c:7f:1d:85:98:02:19:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:74:93:E9:7F:32:C2:66:91:29:F0:10:A8:E2:14:FF:8C:C8:FF:4E
X509v3 Authority Key Identifier:
keyid:23:2B:2B:AA:21:9E:E1:BC:4E:8B:FD:E2:12:A3:F3:DB:B6:29:01:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysrqiGe4bxOi_3iEqPz27YpAdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6a037d-6109-460e-b43e-f67dca33ec73/1/IysrqiGe4bxOi_3iEqPz27YpAdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:df:5a:39:4c:01:ed:e8:7a:e2:7c:81:26:4e:49:c4:81:55:
d5:9c:1a:fa:bd:2a:b8:55:41:15:57:95:90:09:6f:3d:df:5a:
71:15:77:d0:de:06:fa:d5:ce:69:d0:7e:da:f3:3f:f8:cf:61:
09:69:4d:38:7c:18:3c:d8:2d:47:d0:1f:15:07:dc:4b:bb:52:
e6:ea:cf:1a:66:2b:be:7b:76:78:ce:06:b3:9a:4a:df:46:d6:
7e:2a:08:29:e5:10:b4:4b:45:d6:c4:59:27:26:ef:8e:61:00:
99:13:1c:1b:1f:78:4f:f9:18:a8:13:90:de:3e:1a:c0:b4:93:
d3:58:25:1a:1a:8b:21:e1:be:11:f1:a4:9e:46:f6:90:07:7f:
14:bd:48:49:e4:80:c2:ca:d5:49:55:f1:ad:30:d1:a9:2c:e5:
75:b8:f9:86:63:72:fe:ae:fa:ee:1f:33:a4:45:d9:18:62:b9:
bb:ea:72:d2:06:0e:86:82:be:c5:7b:1b:78:13:02:84:52:bd:
03:cc:dc:19:a1:58:df:c1:7c:70:32:26:bc:96:a7:6e:9e:ec:
98:7f:e8:d8:ac:63:97:fc:17:5c:a4:fe:3a:bc:0c:7c:7b:68:
29:a8:c9:5a:31:af:58:af:1f:91:28:98:74:93:97:72:22:e1:
df:a8:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:22 2026 by rpki-client