Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier: FhWa+f52GmGXSoKTR2E6L+JgVyzgeDEqiQKec9lvens=
Subject key identifier: 2E:0D:F6:72:CD:21:AB:34:24:DD:7E:19:76:B8:E3:4B:01:EF:F6:71
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 01A18C7868DB9DE50E22AE53437024AF63B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number: 1AFE
Signing time: Fri 30 Oct 2026 11:01:03 +0000
Manifest this update: Fri 30 Oct 2026 11:01:03 +0000
Manifest next update: Sat 31 Oct 2026 11:01:03 +0000
Files and hashes: 1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: pGtQNFP+UVIKHPVtzPwSi/LWRhAwiXB2yCMHvwUtcpA=)
6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:78:68:db:9d:e5:0e:22:ae:53:43:70:24:af:63:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Oct 30 11:01:03 2026 GMT
Not After : Oct 31 11:01:03 2026 GMT
Subject: CN=2e0df672cd21ab3424dd7e1976b8e34b01eff671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:73:9f:ea:1b:16:ed:71:54:f4:99:0d:4b:02:
a5:0a:44:9e:3d:c6:1f:72:df:8b:10:a1:3c:32:93:
e5:70:c2:b7:9f:ba:92:90:1f:16:3e:34:0a:44:35:
f7:31:cf:40:b6:27:d3:3c:53:af:a5:f1:8d:6d:9a:
96:e0:76:67:74:f3:6a:e1:0a:f6:b4:b1:8b:eb:1b:
70:11:d2:a8:57:2a:4e:2b:09:06:bc:f0:78:91:4b:
38:6f:f4:9d:06:5c:db:76:ca:43:e8:e0:4a:6d:ca:
cb:09:82:94:cb:0a:ab:fe:73:4c:e6:20:97:71:26:
84:ea:64:9d:31:8c:75:b7:d3:bf:ec:b1:10:47:b1:
b5:4e:8f:62:b6:f1:ee:bf:02:5c:da:15:5c:c0:40:
cc:f2:66:80:34:b8:c2:df:57:f3:c2:8b:6e:eb:c6:
0b:ba:5b:56:87:53:55:eb:9c:46:7a:7c:12:db:b3:
12:5f:6a:6e:6a:89:72:af:23:dc:21:a7:72:bf:e7:
b7:bc:6c:05:53:22:15:0b:d6:9c:d1:05:f0:70:5c:
d2:91:a1:8a:6f:25:ce:7d:d6:c4:39:98:14:bf:ee:
b4:59:fe:4c:e9:06:4c:b4:ec:3f:c1:67:09:11:0f:
6e:22:a8:1b:07:0f:9d:bc:52:83:46:1c:a0:9d:94:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0D:F6:72:CD:21:AB:34:24:DD:7E:19:76:B8:E3:4B:01:EF:F6:71
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ba:c3:d1:9b:80:79:46:45:7a:2c:56:6b:88:37:c4:e1:72:
dd:bd:84:31:d0:2e:25:02:87:e8:be:db:48:7d:5b:72:88:da:
83:56:cf:aa:f8:20:be:4b:60:7c:fa:4b:c0:67:94:dd:5c:4d:
4d:c4:e6:23:54:2d:93:d9:3f:6d:63:c6:f9:63:63:38:29:75:
41:7c:85:6f:ff:86:a3:e7:ca:f6:1e:bc:12:b8:0e:49:b6:71:
6b:0b:02:3c:1e:fc:ff:e0:07:d2:b8:e2:cf:d4:7c:b4:e9:24:
fd:b8:a1:1b:8e:13:03:ca:2b:d9:17:e5:24:2c:0e:ba:f7:e9:
94:ad:27:d6:6a:99:2b:73:f4:42:22:86:a6:f6:8a:a1:03:1d:
5b:3e:bb:77:a3:fa:40:f2:7e:c0:01:d9:a7:8f:b4:32:0d:df:
47:ce:2b:b8:c5:ad:a4:74:b1:69:bc:d1:46:9b:e6:39:0b:97:
08:1f:a9:d1:04:d4:7d:51:16:c9:24:de:de:50:e2:a6:59:b5:
7e:7e:50:e7:e3:b6:e3:64:fe:8f:3f:28:7b:c4:b8:ef:10:06:
1b:0f:e2:d1:ae:90:92:8f:23:4c:94:b2:86:b8:63:6a:a3:d9:
2e:c9:3d:92:f0:72:61:68:0a:43:af:ed:19:b6:7b:c4:57:d5:
51:28:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 15:27:15 2026 by rpki-client