Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File: dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier: 6xD56Hota3TFNI3+1uc41Ze2jkZ3S7T68oPzq3wE8Mk=
Subject key identifier: F6:60:01:C2:0C:7F:7F:77:07:DF:7D:EA:F1:99:86:C2:CA:CB:0F:CF
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 01A13E5CD90ACD1E1A6E292E4066EFE0B771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 07:00:34 +0000
Manifest this update: Thu 15 Oct 2026 07:00:34 +0000
Manifest next update: Fri 16 Oct 2026 07:00:34 +0000
Files and hashes: 1: PgUrSIC9VZIEAZAbzS3jonr68QU.roa (hash: 9aI4vQahlWjZFs2Tm+F0vRoH/2f981aEB9UaeXyLxMc=)
2: UjQ5_8P-tgBJJ1sJwKgrCTSAhHw.roa (hash: hSVwua4gNpTICWykb8bpfvs1YDj+/tR6yuNNGb31SDc=)
3: YFl0dNeZwCdbfQ3WGJ1MIOQDpdo.roa (hash: 1mP71yZ3Cuf0zDsZ+9/tw2WORdFZj0h4UY03Wvub7b8=)
4: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: IQbRlMsEzxYhm1oy5hH5xHwEE7tAcSzyyeLL3+UvhTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:d9:0a:cd:1e:1a:6e:29:2e:40:66:ef:e0:b7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Oct 15 07:00:34 2026 GMT
Not After : Oct 16 07:00:34 2026 GMT
Subject: CN=f66001c20c7f7f7707df7deaf19986c2cacb0fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:ee:87:51:7b:6a:c5:4c:8f:af:75:4c:c4:
f9:88:57:9d:44:dd:04:95:52:df:42:40:12:e0:80:
27:8c:b7:00:fc:90:c2:5e:99:54:fa:db:c3:cf:dc:
e4:9a:1f:82:d2:15:37:f7:39:25:7c:3e:e4:00:9f:
c2:88:11:b6:f4:ed:d6:1a:27:72:20:2f:c1:59:92:
cd:f2:87:f3:a3:84:41:aa:c8:4a:e0:c1:9c:4e:6e:
dc:66:c7:da:cd:76:bb:e5:0b:45:44:62:8c:bf:37:
34:03:17:be:dc:44:5d:95:81:e7:05:02:71:81:0b:
8b:15:1f:65:25:5c:35:87:f5:db:55:c7:b3:e6:1d:
51:d1:7e:d1:ea:5f:28:10:4d:12:47:68:ba:b3:b5:
ee:57:89:62:3f:eb:b3:c4:c1:01:2c:af:db:a4:a0:
5b:b7:3c:51:e5:ed:5e:78:39:d3:25:57:e3:af:c3:
eb:ce:1f:68:32:72:2f:19:17:32:cd:c3:d2:97:ad:
81:eb:e3:5f:14:2d:01:b5:7d:0c:a3:6b:85:9a:e0:
69:e2:57:93:79:0f:fb:a1:7f:04:ba:df:7d:ea:0f:
e1:54:05:ee:2e:59:59:65:64:b6:d9:ef:95:46:14:
15:8a:88:69:4d:fa:65:fc:3c:18:9c:71:6f:53:76:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:01:C2:0C:7F:7F:77:07:DF:7D:EA:F1:99:86:C2:CA:CB:0F:CF
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e8:26:6a:c6:c5:12:23:5e:66:34:9d:ed:41:7c:c5:d0:ee:
fb:e8:73:ea:1b:e7:71:b2:21:45:a5:c6:0b:c1:1a:58:c4:0e:
37:b4:4a:6a:e9:d8:63:d6:d9:ff:87:d1:e4:78:aa:ca:49:ee:
63:6b:bd:ec:00:42:8d:96:cb:6e:4c:d8:db:a7:55:31:f3:f5:
8f:ac:96:2e:ec:7a:36:32:4b:b8:08:46:20:6d:63:78:e0:6b:
9f:c4:7e:7f:05:55:81:ac:6c:bf:38:12:b5:a6:f4:00:84:d7:
10:55:12:42:05:f2:89:a6:4a:20:6d:64:68:7b:59:e9:c7:94:
8e:72:61:62:6c:7f:26:8b:2a:ee:00:17:34:54:d6:9b:19:3d:
59:f0:ec:b3:36:43:16:2a:15:ce:0d:50:c4:cd:c1:07:bd:b3:
c8:28:ee:da:2e:7b:48:4d:de:98:a1:03:3d:90:f3:68:b3:81:
6f:96:c7:db:03:a7:3a:94:06:b4:98:59:2f:57:22:26:44:88:
94:b0:00:9a:c9:3a:4c:0d:8a:00:c7:c9:c3:3e:ee:ea:41:c6:
97:c7:ca:29:31:5e:0a:b5:c2:36:26:33:5a:fb:ef:5b:ce:ec:
05:69:c0:8c:e2:e1:5a:05:ae:5e:ee:47:36:65:3f:a6:49:ef:
b7:25:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:24 2026 by rpki-client