Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
File: IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft (raw, json)
Hash identifier: mS/1ilR/XrEuIwbO9ffhXnIcOqyp4CKV3KFgPgTWQn4=
Subject key identifier: 87:84:DA:26:81:3A:BF:5A:9B:D7:27:30:E4:57:BE:D8:29:B5:FF:D1
Authority key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
Certificate issuer: /CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Certificate serial: 01A17C609B7AFECC8F55E6D1D0B4C893E584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
Manifest number: 0452
Signing time: Tue 27 Oct 2026 08:01:08 +0000
Manifest this update: Tue 27 Oct 2026 08:01:08 +0000
Manifest next update: Wed 28 Oct 2026 08:01:08 +0000
Files and hashes: 1: IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl (hash: +SJdexOVdDDlgfCNvJtN3FgpBUG3rHBuKxVp5XrkNR0=)
2: TJBNoqDJuDXadUHCaSsBuATOWto.roa (hash: gJS3wY/oZsaAW7+2UEGNOUq9JEb/eTtIedw6FlGOizU=)
3: l8MRszfSe4qexC-9JyLTk4XoVgk.roa (hash: 9EV7cJFTRMkileOYn43dLtuQWD4NKNC4K7WAWUwzDvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:9b:7a:fe:cc:8f:55:e6:d1:d0:b4:c8:93:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Validity
Not Before: Oct 27 08:01:08 2026 GMT
Not After : Oct 28 08:01:08 2026 GMT
Subject: CN=8784da26813abf5a9bd72730e457bed829b5ffd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:5d:67:7e:91:97:62:27:33:c2:e8:3d:d4:
a9:b0:35:e2:e7:64:07:c9:3b:52:d9:7b:b8:a8:82:
ce:9c:57:a1:1d:5b:fc:35:48:4a:b2:d2:dd:91:16:
bd:6c:71:13:ac:ec:57:c4:2f:01:6b:02:88:72:cc:
b8:4e:8b:e3:21:e1:b4:d9:86:11:ad:36:10:69:ad:
5d:a8:60:ca:31:e4:7e:77:9b:99:c1:82:be:82:49:
12:f3:b5:1f:7c:9d:9b:d4:62:c9:9b:ed:04:17:f7:
ff:5e:34:b3:d9:42:df:81:ed:70:b7:dc:32:47:f5:
78:e3:31:42:96:47:4d:bf:22:a7:34:28:e3:e9:3f:
95:5e:75:d0:a4:1d:9d:d4:92:95:d7:5b:6b:be:6a:
16:f1:db:d1:30:60:99:c3:9d:ff:1c:2f:ea:fa:2c:
f3:10:25:1a:78:2f:d5:bf:fd:fc:0d:78:ef:a5:87:
d1:25:b5:cd:4e:03:e1:3b:cc:d6:54:20:2b:c8:05:
30:87:71:89:dc:20:85:75:e3:1a:7c:65:1b:96:56:
12:ce:04:57:94:f7:30:d1:c8:71:f3:2b:5a:70:30:
5f:ae:6f:11:8e:7e:b7:30:97:74:93:9d:b5:e9:4c:
82:a8:03:28:93:65:f3:c3:71:91:ba:18:84:70:ea:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:84:DA:26:81:3A:BF:5A:9B:D7:27:30:E4:57:BE:D8:29:B5:FF:D1
X509v3 Authority Key Identifier:
keyid:21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e4:63:9d:ff:d7:73:5d:f4:19:2d:17:6d:50:11:17:4b:9d:
7c:e2:ff:75:14:fc:16:e0:c8:76:15:93:62:16:2d:e6:2c:d7:
f6:a6:45:5f:f1:ec:e6:e3:a1:d4:9c:74:6c:a4:2e:43:ab:43:
83:a2:3a:d3:05:df:4b:f7:55:b2:f6:8b:3f:d5:50:7b:0f:4e:
38:b5:15:84:1d:f3:13:97:d1:49:32:29:ec:3a:0d:92:84:bd:
25:38:bc:ac:28:7f:79:19:31:32:58:40:65:e6:2a:bb:aa:10:
4e:56:b0:2f:09:29:1c:19:02:46:6d:fb:46:9f:17:27:af:84:
9e:66:93:de:c6:f8:3e:22:6e:ef:e6:b9:0a:03:2f:0f:cd:3c:
9f:06:28:17:c3:21:3b:0a:fd:a0:d1:b8:bf:3e:23:3c:55:71:
d2:4d:65:a4:15:7c:6c:9a:ef:93:96:68:f2:c3:1b:b0:7b:38:
8e:4c:6e:8b:c0:ab:71:e3:bb:ad:2d:25:8d:79:ae:cb:85:95:
bb:bf:d8:68:73:7e:16:5d:4f:80:fd:3c:7f:53:23:71:74:db:
b7:f8:b6:73:c6:8b:8b:e3:5f:af:1e:20:6d:79:73:77:f9:b2:
cc:4e:d0:63:30:af:b3:76:2f:16:6f:a5:5a:d6:c8:1e:07:d7:
ac:68:79:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8YJt6/syPVebR0LTIk+WEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODFjNWIzY2I3ZWViMWU0OTU4MjE1NWExOTE4ZWM2MTJm
OTVhYzYwHhcNMjYxMDI3MDgwMTA4WhcNMjYxMDI4MDgwMTA4WjAzMTEwLwYDVQQD
Eyg4Nzg0ZGEyNjgxM2FiZjVhOWJkNzI3MzBlNDU3YmVkODI5YjVmZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNNdZ36Rl2InM8LoPdSpsDXi52QH
yTtS2Xu4qILOnFehHVv8NUhKstLdkRa9bHETrOxXxC8BawKIcsy4TovjIeG02YYR
rTYQaa1dqGDKMeR+d5uZwYK+gkkS87UffJ2b1GLJm+0EF/f/XjSz2ULfge1wt9wy
R/V44zFClkdNvyKnNCjj6T+VXnXQpB2d1JKV11trvmoW8dvRMGCZw53/HC/q+izz
ECUaeC/Vv/38DXjvpYfRJbXNTgPhO8zWVCAryAUwh3GJ3CCFdeMafGUbllYSzgRX
lPcw0chx8ytacDBfrm8Rjn63MJd0k5216UyCqAMok2Xzw3GRuhiEcOrQswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeE2iaBOr9am9cnMORXvtgptf/RMB8GA1UdIwQY
MBaAFCGBxbPLfuseSVghVaGRjsYS+VrGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlIRnM4dC02eDVKV0NGVm9aR094aEw1V3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kY2QxNWUtZWIxMi00NjMxLWIyMjAt
MDIyNmQ0NWE3NTMyLzEvSVlIRnM4dC02eDVKV0NGVm9aR094aEw1V3NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kY2QxNWUtZWIxMi00NjMxLWIyMjAtMDIyNmQ0NWE3NTMy
LzEvSVlIRnM4dC02eDVKV0NGVm9aR094aEw1V3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuRjnf/X
c130GS0XbVARF0udfOL/dRT8FuDIdhWTYhYt5izX9qZFX/Hs5uOh1Jx0bKQuQ6tD
g6I60wXfS/dVsvaLP9VQew9OOLUVhB3zE5fRSTIp7DoNkoS9JTi8rCh/eRkxMlhA
ZeYqu6oQTlawLwkpHBkCRm37Rp8XJ6+EnmaT3sb4PiJu7+a5CgMvD808nwYoF8Mh
Owr9oNG4vz4jPFVx0k1lpBV8bJrvk5Zo8sMbsHs4jkxui8CrceO7rS0ljXmuy4WV
u7/YaHN+Fl1PgP08f1MjcXTbt/i2c8aLi+Nfrx4gbXlzd/myzE7QYzCvs3YvFm+l
WtbIHgfXrGh5kA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:41 2026 by rpki-client