Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
File: ido1Hh4yCS63YfLI6ix1oZcALUs.mft (raw, json)
Hash identifier: GBYsah79o5VfBcGMFTfZLkTIiuMnIlbnMY51wyqpE60=
Subject key identifier: 6B:E7:38:D9:96:7B:32:F4:0D:16:76:F9:3F:14:D1:D2:6B:1F:D2:95
Authority key identifier: 89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
Certificate issuer: /CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Certificate serial: 01A16E6DB69D11E846755FFA0337F9E4B23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
Manifest number: 0137
Signing time: Sat 24 Oct 2026 15:00:45 +0000
Manifest this update: Sat 24 Oct 2026 15:00:45 +0000
Manifest next update: Sun 25 Oct 2026 15:00:45 +0000
Files and hashes: 1: TTj59N_k0baRYBbpMvwMER52UMA.roa (hash: Qb/eGpeDdebAZbVO1qCzlupreg9p5z6Eu1FINEUZOCw=)
2: ido1Hh4yCS63YfLI6ix1oZcALUs.crl (hash: g9ngWkRdXalGu8xiEt1N/clzgUR9MtwRJYZYCLVdQP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6d:b6:9d:11:e8:46:75:5f:fa:03:37:f9:e4:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Validity
Not Before: Oct 24 15:00:45 2026 GMT
Not After : Oct 25 15:00:45 2026 GMT
Subject: CN=6be738d9967b32f40d1676f93f14d1d26b1fd295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:0c:6e:79:3b:e4:44:3a:ee:47:35:8d:a5:
36:2a:d1:b4:6c:b9:06:0e:6a:c7:87:92:f3:f0:e0:
1c:79:27:7b:d0:03:e4:76:27:bb:e8:b2:aa:77:1d:
95:73:96:2b:61:11:3a:d6:8b:fe:e6:c8:a0:3f:f5:
48:31:09:40:aa:0d:97:4d:e3:60:af:6d:1c:ba:c9:
fc:01:d0:42:e1:ba:b3:53:14:37:21:4e:55:a3:09:
e3:2d:85:db:b4:5f:4b:19:26:d4:8d:a4:1f:55:80:
97:2c:de:89:bc:72:09:ec:a4:04:cb:8d:ae:03:d4:
7b:be:e4:c2:ec:ed:3a:4d:60:91:d3:03:c1:1e:56:
c4:63:23:a8:15:c6:7b:22:fa:09:79:01:45:97:7f:
f4:ee:8b:d2:0f:bc:f3:b9:30:b3:6f:eb:f8:81:bd:
fc:9e:ea:e6:7e:4e:03:23:52:fb:c2:30:81:2b:f7:
c7:b9:f4:c5:a8:f5:2e:87:7d:d3:71:78:62:81:95:
55:9e:28:44:f3:0e:b9:0c:de:11:70:ab:04:15:39:
70:e1:53:2b:e2:28:81:4e:a7:c9:b5:d3:fc:85:be:
1f:13:3c:ac:9a:c3:fe:d3:0c:c0:2d:09:ac:69:f2:
64:32:06:17:35:84:c1:e7:65:47:28:4b:e9:69:bc:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:38:D9:96:7B:32:F4:0D:16:76:F9:3F:14:D1:D2:6B:1F:D2:95
X509v3 Authority Key Identifier:
keyid:89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bd:bf:8d:3f:4d:8b:2e:2d:64:95:03:03:d6:f0:be:df:89:
c8:46:7f:1d:6a:fc:1b:5e:13:e6:4c:53:0a:45:f6:69:a9:0e:
76:4d:98:52:12:ec:0d:a7:29:8c:9b:56:28:99:7e:59:87:3d:
05:df:5d:99:09:b7:2f:6e:a2:c9:c7:78:c4:57:1a:61:93:06:
0f:2a:54:b7:23:ab:60:45:0b:66:4b:4a:c2:c0:13:61:fe:88:
99:0f:1e:19:fd:29:84:52:15:51:03:11:b3:7a:76:18:8a:5b:
8a:28:b7:15:f5:49:22:5c:f9:9e:95:f5:98:88:77:db:a9:1a:
64:81:40:43:7d:c2:cf:3c:6b:ef:fc:bc:0d:5e:de:3f:83:a7:
77:6c:f9:7a:a6:2c:df:c0:d0:9b:05:b3:5a:1e:bf:9c:9f:dc:
92:01:7b:11:f8:48:11:6e:89:2a:4b:74:9a:c7:2d:ce:91:8b:
4a:21:18:0d:18:df:fa:b0:a5:9a:8a:e1:c2:92:e5:89:d5:0f:
1b:85:e8:70:75:12:3e:0b:8d:98:8b:5e:5e:0f:45:6a:ab:ef:
32:ab:d2:82:37:53:ca:92:40:1b:23:7c:8a:89:a2:80:57:d9:
60:e1:2d:02:b8:e1:6d:7d:00:b6:b4:26:5b:1f:12:9f:cd:e8:
dc:c4:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:39:50 2026 by rpki-client