Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
File: iG3awir3vGlEuLJjKkuqxSLJIH4.mft (raw, json)
Hash identifier: ssRLvTcy9zoBNrTKbZ9SDyKxz2sKI+KcEDEDLDvXXQ0=
Subject key identifier: FA:6C:7F:CC:16:42:2F:4A:98:EA:40:44:BF:E6:28:4D:4D:0D:F5:41
Authority key identifier: 88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
Certificate issuer: /CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Certificate serial: 01A17DE147E4B337189457745835DBDA2B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:18 +0000
Manifest this update: Tue 27 Oct 2026 15:01:18 +0000
Manifest next update: Wed 28 Oct 2026 15:01:18 +0000
Files and hashes: 1: 1X5LpoPkiiIfqJJshC34MniOMI4.roa (hash: UQKIVsiFeFuAnLSpr7xUCS9KnEW9kjaFk6PUq4VbMUQ=)
2: iG3awir3vGlEuLJjKkuqxSLJIH4.crl (hash: 1qXn07htO4gOQCQnJanq9jkV/+yVu+POb4sBk0nvGVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:47:e4:b3:37:18:94:57:74:58:35:db:da:2b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Validity
Not Before: Oct 27 15:01:18 2026 GMT
Not After : Oct 28 15:01:18 2026 GMT
Subject: CN=fa6c7fcc16422f4a98ea4044bfe6284d4d0df541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:da:8f:76:68:0e:d6:91:a7:62:e3:1d:f2:
d1:53:c4:d2:4c:d1:06:4c:2e:f7:2d:55:a3:8f:ae:
2e:3d:19:43:68:52:04:04:1c:ae:c4:88:31:af:65:
74:c4:d4:ca:c5:13:c8:7c:51:41:8c:20:3a:39:3e:
11:28:37:5a:13:4b:80:27:b5:81:7d:6d:49:8b:cb:
9c:29:c0:ee:6c:17:c7:43:33:4b:26:71:b5:85:17:
f9:4d:01:ca:67:05:73:8e:85:8d:f6:cd:2f:e1:8f:
ab:f0:2c:bf:be:0c:c8:7a:a2:1c:71:32:a5:57:3a:
1e:a3:34:b3:e0:bc:c0:41:31:55:d1:cb:f4:aa:0c:
2b:0c:5f:57:6c:57:f0:39:54:cd:f7:c6:22:62:e5:
c8:de:cf:24:db:91:72:82:b4:25:00:81:d7:ca:20:
3a:c3:6e:a7:7a:9a:6a:7f:30:54:27:63:12:fa:20:
b0:ce:43:4f:be:d4:aa:bc:5d:6e:c0:37:ca:c6:e0:
92:0f:48:5e:35:b0:14:90:38:b9:be:f9:ca:d0:de:
ad:08:cf:97:ea:67:f5:02:81:39:f0:81:2a:9a:be:
bb:7b:0f:f8:90:37:99:74:3f:f7:2d:49:19:82:fd:
d3:22:70:0d:ac:3b:36:ff:13:4e:a0:6f:ef:a3:df:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:7F:CC:16:42:2F:4A:98:EA:40:44:BF:E6:28:4D:4D:0D:F5:41
X509v3 Authority Key Identifier:
keyid:88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c9:73:36:29:c5:41:ad:d2:1b:bd:15:78:4a:a1:87:02:8c:
54:3f:e4:dc:2d:9c:04:23:48:4b:7b:ef:87:72:71:44:16:f7:
57:5d:1b:e6:23:51:b5:7a:09:41:88:93:1e:6d:87:2a:ff:e5:
76:f4:d1:f0:59:0f:a2:f4:07:d9:8d:c2:ac:1b:d7:58:ed:03:
5b:3e:59:a2:05:22:9f:1f:7c:56:a7:bb:ee:b2:5a:c8:59:6a:
2a:01:5b:a0:4b:e7:e4:f0:31:9c:65:06:2f:5e:e9:2f:87:ad:
e9:6a:37:aa:2d:15:a5:a7:ec:6e:fb:48:0c:55:32:e3:be:1b:
02:04:54:46:16:88:78:1d:60:2b:ad:4f:98:f7:ec:c4:38:cf:
94:5b:a7:e2:0c:b3:5f:72:5a:e5:0d:db:77:6d:94:6b:50:85:
a4:49:c0:47:79:cb:1b:2b:f8:cb:54:7e:44:45:c3:03:f4:4f:
d5:ba:e1:a0:29:3b:ea:ed:c6:ce:d2:69:72:e6:35:4a:32:ab:
0f:17:3c:77:b6:9e:99:38:cf:2d:88:fb:e3:1a:dc:5c:78:1e:
d6:4d:5b:ae:ff:72:ae:93:63:bf:83:52:21:6f:09:90:d7:56:
a8:f7:99:b4:e2:bb:d0:d5:d5:dc:0d:94:51:2d:68:ae:99:a8:
7c:c8:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:04:22 2026 by rpki-client