Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: bhGLCaIeWC1Tfq3muftkDwlTRaArW1BBsw9BqT6q38Q=
Subject key identifier: 71:60:BE:ED:A0:3D:B4:EB:B7:6C:FB:4D:CD:E3:4F:5D:D0:0D:66:EC
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 01A16C485A379BABC474C5966FE54D53E70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1AC0
Signing time: Sat 24 Oct 2026 05:00:43 +0000
Manifest this update: Sat 24 Oct 2026 05:00:43 +0000
Manifest next update: Sun 25 Oct 2026 05:00:43 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: CB4VlHZeW3Z7ExVcwJfjrixoHudfaqNgaoq05fn3Qw0=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:5a:37:9b:ab:c4:74:c5:96:6f:e5:4d:53:e7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Oct 24 05:00:43 2026 GMT
Not After : Oct 25 05:00:43 2026 GMT
Subject: CN=7160beeda03db4ebb76cfb4dcde34f5dd00d66ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:e0:d9:23:4d:a7:d7:e8:29:56:0a:db:04:
22:39:18:1b:51:65:21:bf:75:c6:28:c2:ad:ee:8d:
8b:b5:69:e5:5f:37:15:fe:69:0a:61:59:ee:c0:d4:
13:42:2b:ee:62:7f:5a:15:7d:d8:25:58:e9:03:ee:
f0:be:98:5f:56:df:c1:e7:92:a3:75:8b:32:73:86:
16:13:f3:bf:be:e5:29:d7:f5:c9:56:f4:a2:95:85:
59:14:75:12:8c:21:78:1e:10:a7:84:30:0f:09:6e:
64:72:b6:12:c8:a8:66:86:8f:44:2d:21:6e:72:5d:
21:ae:bb:28:a1:b2:13:f1:84:b2:29:c7:00:e9:92:
fd:af:ba:d6:62:ca:51:77:9b:43:54:2d:11:08:67:
f5:0c:82:1d:f9:fd:19:d1:40:df:e0:ef:7e:7a:28:
6e:4e:52:fd:7f:f4:c1:76:c8:9d:a7:75:34:85:98:
0f:15:18:ab:72:af:75:27:25:d6:b8:2a:c5:e8:59:
38:0c:ec:f9:61:4e:f7:47:ff:58:7c:db:85:f3:de:
9d:7c:6a:00:14:c1:74:6e:0d:ff:d3:1e:78:ac:2b:
2b:64:38:dd:76:f7:af:29:c9:d3:45:b8:e8:14:21:
99:8b:b1:1a:db:a7:03:8e:f9:8c:10:7a:2a:df:35:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:BE:ED:A0:3D:B4:EB:B7:6C:FB:4D:CD:E3:4F:5D:D0:0D:66:EC
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d2:a0:7f:0d:af:cf:c7:f4:34:58:45:05:af:9f:ef:59:c4:
5d:04:ef:3c:b0:d1:4f:0f:b1:2f:f3:9a:85:4c:5a:0d:9d:1e:
4d:df:10:db:b6:47:ed:1d:61:7b:7d:9b:79:10:82:6c:57:97:
14:d9:f4:a3:30:9e:6e:44:00:a4:2d:a0:dd:47:24:f4:a6:57:
bc:ce:2d:5b:4b:cb:80:d3:93:e0:5e:5f:4f:01:c7:d3:cb:09:
49:24:4b:55:72:b8:59:32:80:d4:d3:0e:13:0c:38:55:4a:c4:
d0:51:94:65:76:f0:32:af:d8:b0:6b:1a:80:51:18:be:c5:f9:
ef:8c:6f:da:8e:09:20:5b:d9:d6:5c:ca:81:cb:18:2b:a4:7d:
7c:4b:60:6e:ed:a7:94:46:bd:58:29:48:d5:77:c3:c7:a3:e7:
6e:e4:fd:b6:82:f0:a8:a5:33:b2:57:4c:30:16:83:8a:20:31:
2b:0e:58:13:f9:7b:f7:bc:dc:7f:9c:e1:2f:d1:53:f8:2d:9d:
25:54:8b:11:6d:09:d6:83:fd:bc:4a:57:ed:51:70:92:76:0e:
e5:04:c1:82:a3:86:6b:2d:ae:3b:2c:5e:c4:72:00:7b:12:21:
1f:64:f3:6f:b5:4f:4f:82:37:40:99:6e:e0:20:7e:a1:0e:69:
cd:42:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:32:57 2026 by rpki-client