Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: WMoYw1rnDYO69NLzrh9f8F2qYVw0GBonfWJPNJPyS2g=
Subject key identifier: 69:66:00:A2:AA:EE:9A:C7:F9:24:65:E8:CD:80:45:09:A6:71:99:38
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 01A116737DEAB14CA73E1D5968AD5608E4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 1A90
Signing time: Wed 07 Oct 2026 13:00:29 +0000
Manifest this update: Wed 07 Oct 2026 13:00:29 +0000
Manifest next update: Thu 08 Oct 2026 13:00:29 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: P6wXt/JaSoKQ3lxj7yNdTqY11P/xXta/yzcPwGG9JE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:73:7d:ea:b1:4c:a7:3e:1d:59:68:ad:56:08:e4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Oct 7 13:00:29 2026 GMT
Not After : Oct 8 13:00:29 2026 GMT
Subject: CN=696600a2aaee9ac7f92465e8cd804509a6719938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:6b:11:8c:ce:7c:44:f9:64:b8:29:ab:d6:
d3:e4:5f:8a:21:9a:9d:54:93:fb:13:a7:85:16:aa:
8b:56:80:c8:cc:fd:2e:95:25:92:a9:8f:fe:22:20:
af:a9:56:49:3c:82:66:2d:b9:65:03:fe:f6:7f:70:
77:1b:35:96:1f:cf:08:e3:ec:7e:56:51:ea:7e:be:
be:2f:d8:19:09:4a:e8:cb:9e:11:63:e0:9b:32:94:
f0:8a:42:d9:ca:e5:31:74:75:da:05:5b:5a:11:11:
2a:ff:4f:10:0a:f5:cd:59:97:75:df:0f:41:ef:d7:
a5:fa:ca:9d:c4:80:ef:c6:32:49:f8:13:c5:8c:e3:
b4:53:06:a2:2e:11:74:91:43:6d:d8:dc:7e:1d:af:
80:35:f8:df:df:77:51:0e:a8:63:c2:b9:a6:49:07:
ba:e0:05:31:d4:d3:d1:5c:53:42:d4:5e:af:78:aa:
1e:a7:8f:d6:0a:cb:ef:3b:97:cd:8a:7e:81:a8:81:
03:1c:46:bb:3f:d1:6e:8b:52:d8:a9:b9:5d:cd:95:
b7:0a:c9:12:b8:6e:dc:b8:22:2a:3d:47:0e:60:61:
ae:b3:9e:5e:5d:b5:4e:37:d5:b9:3d:3b:f8:d6:ce:
20:f2:ba:83:4c:2d:67:24:1e:57:5f:70:57:4d:6c:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:66:00:A2:AA:EE:9A:C7:F9:24:65:E8:CD:80:45:09:A6:71:99:38
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4a:9c:3b:d2:a1:31:30:22:6a:a8:f5:13:e4:2b:69:c3:c4:
e6:98:72:14:41:c5:bf:b4:a1:27:d7:ec:4f:7c:70:c5:b7:10:
8d:a0:4b:b6:31:1d:57:c4:69:19:e5:11:36:d1:d8:90:95:ad:
18:3c:9b:7f:5d:4d:aa:31:56:29:92:0f:9d:4a:5b:4f:09:2d:
1b:17:5c:09:ed:34:b3:f0:e7:c5:b3:2b:10:57:37:c7:87:32:
78:54:16:5a:bf:91:2a:f8:d5:49:d2:40:93:ae:ec:9a:62:6a:
08:07:f8:d1:75:67:7a:4e:76:20:98:83:65:10:fd:44:0f:57:
c9:f9:1d:d8:c6:14:fb:6d:5e:ea:7d:14:87:af:fe:25:18:cb:
d8:09:60:b1:e6:88:62:62:ee:6f:f3:fe:41:7a:d5:85:3f:37:
db:4a:58:20:b9:42:a8:db:ad:dc:91:46:ec:7b:f4:74:f2:bc:
fa:56:11:8f:d8:c8:d1:86:61:fa:f8:77:38:8b:a4:90:81:cb:
f9:9c:7e:b8:6c:9f:fc:15:ab:98:bb:1d:08:df:1a:fd:97:f5:
b7:e4:ce:7d:50:78:e9:e2:ea:e3:0c:c6:ac:d6:29:e1:d2:8b:
0f:c9:c7:42:e4:a3:aa:1f:15:e6:70:4d:75:e5:dc:4a:f4:af:
ba:e1:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:24:09 2026 by rpki-client