
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: y60Ndt5/PNkYuI50hBMpYd6Rma89IywD5Sh4Dm/87QM=
Subject key identifier: 37:29:49:4D:53:9E:92:84:C6:93:05:16:DD:7B:D2:B3:3D:54:4D:E9
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 01A1569CBDED3357452693A598A59D2FC798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 08FE
Signing time: Tue 20 Oct 2026 00:01:15 +0000
Manifest this update: Tue 20 Oct 2026 00:01:15 +0000
Manifest next update: Wed 21 Oct 2026 00:01:15 +0000
Files and hashes: 1: 3ikFkz22nnfnGP5hBgt33RenFhw.roa (hash: US6DxVZfyMhjP4KTe/oYRgElRLqid9PGBdLialNLJ/g=)
2: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: ctl91JF6rV0g9lxnlsUqGhTqcDjMV39vqkhrQlfb5aY=)
3: kYfIEsvVk_BOJEOYO8dzHl3yBqw.roa (hash: DJXKuUPzcXdeE6GAzh9NmYNgIzihSsE64bR0VlSG96A=)
4: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (hash: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9c:bd:ed:33:57:45:26:93:a5:98:a5:9d:2f:c7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Oct 20 00:01:15 2026 GMT
Not After : Oct 21 00:01:15 2026 GMT
Subject: CN=3729494d539e9284c6930516dd7bd2b33d544de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:3f:14:b8:d1:e9:8e:59:76:de:64:98:ea:
10:e3:91:86:4f:48:9d:a8:33:16:e5:bf:2b:d8:68:
09:1f:80:7f:a9:05:53:ca:38:17:cf:cd:0f:b4:05:
28:5b:99:a9:84:25:1e:13:a8:22:dc:9d:b0:8d:58:
67:d6:47:4c:7f:63:e5:40:e4:f4:dc:44:70:5d:4f:
39:c6:71:19:96:c7:94:5b:6d:42:2e:3c:bc:95:5c:
97:1a:50:24:fb:aa:b0:7b:ae:a3:95:e6:dc:d6:4a:
e8:30:3f:36:16:85:ae:47:1b:47:fe:5c:f8:5f:90:
2c:70:d9:93:09:12:f1:1b:86:59:9f:66:89:42:f8:
6d:bd:8f:b9:c0:d5:db:ad:51:d7:53:46:9f:e4:a0:
42:71:2b:3f:6f:8f:d3:b6:84:ce:c0:ed:f7:c5:69:
ad:9a:20:25:44:db:37:88:5b:20:8b:e9:f0:d7:dd:
12:35:c4:6b:88:8b:21:9f:ab:23:c5:bc:e6:3d:40:
77:23:32:a0:c0:8c:86:84:6b:52:20:17:fb:55:57:
17:e9:38:07:3a:86:0c:09:ed:2a:9f:44:46:24:65:
fa:56:2a:b4:91:02:f3:f3:c9:d8:9c:4e:f2:51:31:
8d:4c:d6:d7:e1:4d:9a:b2:be:b2:87:9b:12:8c:e1:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:29:49:4D:53:9E:92:84:C6:93:05:16:DD:7B:D2:B3:3D:54:4D:E9
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4d:bf:24:ae:87:03:61:08:97:a9:cf:fd:99:22:1a:e7:9f:
4e:92:c1:bb:19:cb:85:02:34:36:64:7e:b2:f1:c9:44:b0:cf:
db:75:91:3b:24:6f:2f:4c:f6:1a:8d:30:4b:c9:e3:29:1e:68:
7b:fa:27:74:92:24:4d:23:dc:c0:67:79:4f:e8:b7:ef:5d:35:
e1:98:77:38:7c:1b:ec:aa:dd:f4:16:64:db:08:eb:bb:83:5c:
9a:4b:19:95:28:7c:29:62:d1:94:4e:ae:a8:16:55:f8:d2:68:
6a:b5:4c:46:99:4e:5e:0e:60:0d:d5:5b:8e:71:f6:cd:1b:1f:
43:7d:17:dd:17:8c:aa:be:94:34:83:11:33:1b:98:2f:21:1f:
4c:f4:ae:18:09:16:6e:31:23:45:7b:91:88:aa:72:18:5b:29:
4c:70:ab:3f:52:98:10:da:e4:9c:6c:11:ac:22:0a:f0:ba:ab:
a2:c4:fa:89:76:ba:00:86:e9:aa:d0:31:7e:4d:17:62:24:3a:
52:8c:0f:73:f8:cb:98:30:ef:00:25:55:c3:b4:c5:67:62:6f:
27:9e:4d:17:d4:c6:44:e5:c0:11:f0:68:11:64:34:14:53:64:
ab:ce:99:4f:70:c1:31:d0:6e:46:87:67:57:54:62:2b:f3:3f:
60:80:cd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:03:08 2026 by rpki-client