Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
File: iG3awir3vGlEuLJjKkuqxSLJIH4.mft (raw, json)
Hash identifier: vBFw6M9jEI9HgSTPJGKWgBTFOOp47weRxPCo6JY/d24=
Subject key identifier: C6:A7:01:0A:10:F5:CB:7B:66:15:02:30:2A:73:D4:40:B5:19:66:3F
Authority key identifier: 88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
Certificate issuer: /CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Certificate serial: 01A17BF2D9F15A9A46943953629C77AA9551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:01:15 +0000
Manifest this update: Tue 27 Oct 2026 06:01:15 +0000
Manifest next update: Wed 28 Oct 2026 06:01:15 +0000
Files and hashes: 1: 1X5LpoPkiiIfqJJshC34MniOMI4.roa (hash: UQKIVsiFeFuAnLSpr7xUCS9KnEW9kjaFk6PUq4VbMUQ=)
2: iG3awir3vGlEuLJjKkuqxSLJIH4.crl (hash: lx8rhFbeb2G6BYEDEocpkuKcilmtXRdFIAuKhCmVo1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:d9:f1:5a:9a:46:94:39:53:62:9c:77:aa:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886ddac22af7bc6944b8b2632a4baac522c9207e
Validity
Not Before: Oct 27 06:01:15 2026 GMT
Not After : Oct 28 06:01:15 2026 GMT
Subject: CN=c6a7010a10f5cb7b661502302a73d440b519663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:b2:ae:03:0d:84:7a:db:e3:a4:a2:fb:6c:
67:a4:10:0a:c9:b7:44:b1:29:5a:8e:2f:88:ea:63:
dc:19:7f:b8:20:96:10:5c:59:ef:6b:69:45:50:b1:
86:b5:52:16:45:15:d4:aa:d0:b6:e9:ca:c1:7e:0c:
9b:89:27:c0:5d:58:d1:75:88:e2:28:68:00:67:0a:
95:43:d2:c6:06:55:4e:89:a7:d7:17:d8:95:24:18:
e6:1a:ed:01:c4:82:c7:3d:33:72:86:a8:8a:80:56:
b8:98:3e:bf:92:f1:cf:fc:ec:19:a4:9a:63:54:83:
7b:bd:5f:33:c4:f4:5e:3f:60:ac:4e:76:47:25:99:
3d:c0:db:c1:9f:e5:6f:71:14:50:4e:78:8c:4a:b7:
af:3b:f4:b9:a7:18:53:a4:fe:d3:e1:ee:77:f9:0f:
53:24:5f:fb:17:88:50:b7:d8:21:ed:93:cf:5e:57:
69:35:77:e1:2f:3a:9a:2a:ad:08:ee:90:32:50:85:
3f:1b:d6:8e:c8:2e:4f:23:e3:91:2d:03:ab:62:ff:
c7:00:16:62:7d:a5:55:70:cd:28:12:e5:7b:8b:b0:
d4:74:27:7c:29:c2:fd:29:25:83:d3:4b:8a:0e:d9:
53:ae:37:1b:5b:ff:8d:06:ea:2c:11:8c:ad:eb:2f:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A7:01:0A:10:F5:CB:7B:66:15:02:30:2A:73:D4:40:B5:19:66:3F
X509v3 Authority Key Identifier:
keyid:88:6D:DA:C2:2A:F7:BC:69:44:B8:B2:63:2A:4B:AA:C5:22:C9:20:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG3awir3vGlEuLJjKkuqxSLJIH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b9dbe5-4fb8-4975-a1c8-997597b2d808/1/iG3awir3vGlEuLJjKkuqxSLJIH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:20:ab:fe:1b:cd:9f:3c:f6:79:35:be:52:e7:84:34:fa:10:
9b:c2:16:c1:05:f9:8e:d2:10:ed:71:81:87:12:9f:58:45:37:
08:88:2b:37:98:01:a9:15:8c:9f:f4:cf:2c:0f:4d:4b:aa:5c:
1e:dd:da:2d:38:82:37:d3:31:e8:9a:c6:59:54:03:99:e1:34:
23:6b:97:0b:1f:62:f7:e2:9c:73:54:2c:9c:45:bd:65:40:f6:
cb:89:54:f2:da:62:0a:11:d3:7b:86:cf:9a:32:05:88:66:2c:
7d:37:04:1f:a2:6e:0b:6d:08:43:50:12:90:f6:81:f1:01:36:
eb:a8:e0:54:4d:f5:e2:5d:d3:e2:52:53:c0:0f:1e:25:43:77:
84:f2:16:db:5b:2f:4c:be:c6:1f:cf:1b:18:c3:3d:71:4f:7d:
ad:5d:4b:19:6b:59:47:9b:81:69:34:09:5e:02:10:9c:65:70:
30:a9:62:0f:f9:f1:a1:5e:5d:0f:df:b5:4b:11:04:33:7c:97:
5d:a9:45:f5:6e:15:11:ce:30:21:e3:9d:13:55:f8:d5:fa:ea:
ce:20:ad:11:bd:8d:e7:d6:73:86:f3:d8:2e:38:75:ca:41:a0:
90:fd:0d:c1:5a:7b:0f:d3:63:75:5a:25:4b:61:b5:9b:d3:39:
05:fa:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:27 2026 by rpki-client