Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier: 4yxmgzRkO58U1G28VMhvQmstxSO4o1O4I73NcZ6MEB8=
Subject key identifier: E9:3A:99:F1:84:75:97:6D:22:D1:18:2F:17:26:F6:5D:5D:D1:B9:A9
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 01A18676B66487965F233D53F015C61B0EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number: 1325
Signing time: Thu 29 Oct 2026 07:01:29 +0000
Manifest this update: Thu 29 Oct 2026 07:01:29 +0000
Manifest next update: Fri 30 Oct 2026 07:01:29 +0000
Files and hashes: 1: ea_FcR8oSzWDCeMxrNhO2E40pkI.roa (hash: 5Y4/kc8eZcdfX1i5OXOAX6HvK4BEfWtdSIjWkgc/rvI=)
2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: Om8YlHrht3CN2p2847h2GWDoJ96jGhjN9i3M4PlYG7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:b6:64:87:96:5f:23:3d:53:f0:15:c6:1b:0e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: Oct 29 07:01:29 2026 GMT
Not After : Oct 30 07:01:29 2026 GMT
Subject: CN=e93a99f18475976d22d1182f1726f65d5dd1b9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:63:37:2d:23:fd:e6:e0:93:9f:16:f9:9f:
63:8f:dd:4c:db:18:da:f7:08:77:39:f2:05:ec:03:
65:9e:15:25:e3:f4:df:67:25:a8:d9:a5:b8:75:22:
e8:ba:af:e8:c7:10:36:1c:cd:81:17:a8:0c:e0:60:
51:4a:75:3b:e4:2f:2c:d3:5b:9d:24:60:e6:d5:0b:
6b:90:ca:f1:f2:80:b7:cc:f2:2f:6f:34:33:31:6c:
0d:97:d9:44:83:52:15:06:e3:fb:86:37:eb:52:e6:
9a:4a:8a:9d:10:7d:cf:44:84:15:08:4d:d4:f4:c0:
87:2e:f1:b5:19:e0:62:91:fb:a7:e0:99:0e:d4:4a:
be:96:fb:2f:39:88:2e:a3:6b:4c:e6:16:35:61:1f:
8b:35:01:96:c9:5e:5c:d4:cb:d8:fc:2d:50:74:2a:
a0:a5:63:ae:95:da:92:dd:6f:21:95:ae:db:f8:35:
f1:3d:15:47:f2:8a:97:5a:9f:77:2a:31:58:97:e4:
49:36:b3:2e:bb:fc:d6:dd:38:0e:c1:ce:a1:37:90:
1f:eb:6a:1e:a0:a7:3f:9d:6c:ba:b3:fd:b9:8a:3d:
d5:ce:23:3c:05:3a:bb:64:24:a3:0e:3f:89:18:0e:
da:19:4d:f5:b6:4d:dd:e0:15:db:66:e6:24:46:c2:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:99:F1:84:75:97:6D:22:D1:18:2F:17:26:F6:5D:5D:D1:B9:A9
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a9:6d:b1:7a:b4:2d:93:62:56:51:6c:04:04:a7:21:85:51:
b8:3c:7a:5a:19:41:5a:b7:91:af:16:bd:dd:1e:74:69:79:6d:
c8:66:50:74:7f:ca:62:11:f3:e4:ff:4d:7b:83:4d:7d:a1:58:
87:4f:62:ef:73:f3:39:3f:f4:b4:c8:e4:ed:0c:1f:ad:b1:30:
5b:9c:94:85:d7:53:22:02:c6:a5:95:db:74:82:6f:20:fb:4e:
15:53:2a:58:f4:3e:35:da:f6:e7:32:84:55:c6:44:1d:89:0a:
b8:26:df:07:ad:4e:f8:a3:59:88:10:89:ab:91:a6:6b:87:68:
e2:dc:6e:56:7c:61:ce:5a:3f:13:5b:80:73:b5:bd:50:d1:20:
24:ca:0a:8a:0d:21:e6:58:fc:a6:83:55:f6:8a:1a:5a:e3:2d:
d8:d9:d7:1a:2f:30:6d:ce:17:74:2e:15:76:e5:34:7a:f3:68:
e0:b7:25:89:f2:43:7c:cb:bd:2b:ab:6d:42:4e:f1:62:76:3e:
ce:aa:5f:e8:87:4a:7c:72:f6:3a:15:d8:16:65:e2:c0:f9:a6:
89:d3:e3:32:90:5f:77:20:11:3a:b7:bf:c1:54:14:72:2d:ae:
fa:b3:4a:5d:4f:ce:38:f2:41:bc:5b:55:c4:11:40:b5:3e:07:
04:de:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:48 2026 by rpki-client