Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: 551q6KIEhzflS+VV/ePCNmUK7UUkJ4w8DXgvBwJD/fs=
Subject key identifier: 6F:FE:A6:1C:05:8B:E0:A6:F6:95:37:7D:61:B8:A8:39:35:D9:0B:17
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 01A17281A62D78FC6F9F82942D4C4D760AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1AC6
Signing time: Sun 25 Oct 2026 10:01:01 +0000
Manifest this update: Sun 25 Oct 2026 10:01:01 +0000
Manifest next update: Mon 26 Oct 2026 10:01:01 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: 2td2oRIxBGLiwCfsDpb5uRQHNT+WMYVnTp9hDY7ppuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:81:a6:2d:78:fc:6f:9f:82:94:2d:4c:4d:76:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Oct 25 10:01:01 2026 GMT
Not After : Oct 26 10:01:01 2026 GMT
Subject: CN=6ffea61c058be0a6f695377d61b8a83935d90b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:01:e2:b9:ef:be:7f:f8:0e:35:ac:d1:a5:
5d:40:94:b5:79:08:8e:13:36:9b:99:fb:1d:66:ac:
b5:7a:2f:f4:b7:5b:17:23:b7:d4:df:93:54:0f:35:
ee:0b:e8:86:f0:2f:ae:3f:30:79:8c:81:7a:a1:d8:
0f:d6:08:21:6e:12:30:32:d9:e4:95:d9:fd:29:3b:
31:8f:c4:7b:2f:9a:d8:f1:83:c9:2d:92:ad:d9:87:
58:ef:b3:05:29:26:96:ae:87:c5:1b:a4:c4:fb:f9:
12:db:26:be:65:35:52:d2:e2:99:0b:fc:b1:ac:72:
50:62:8a:a7:9a:0c:f8:89:5f:a5:0e:a1:d2:99:90:
ed:47:30:a9:af:42:f9:db:41:5b:35:9d:5b:89:d3:
03:99:3a:4e:16:ac:01:2b:97:f6:ee:5a:30:78:8c:
54:e6:66:b6:37:f4:56:9c:b3:26:24:72:05:1b:89:
ac:cb:c1:c3:e2:35:7f:47:37:8b:0e:c0:54:60:ce:
43:ef:78:a6:4d:0f:76:3a:d5:7f:4d:2b:d9:35:60:
21:62:95:b1:ea:24:8b:44:8c:e5:68:e4:4e:e2:78:
a4:1c:a3:bd:9f:74:a5:57:8c:6e:1b:7c:9b:35:4b:
fd:d6:7c:a0:86:2f:a5:89:98:d7:86:fa:2d:69:f1:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:A6:1C:05:8B:E0:A6:F6:95:37:7D:61:B8:A8:39:35:D9:0B:17
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e2:4c:d0:cd:8e:f6:a8:aa:5c:da:38:85:01:36:25:ea:f4:
3e:19:3f:20:ef:ee:5b:a6:88:0b:03:d6:20:1a:a0:2a:c6:45:
49:d3:0a:4b:b9:16:a2:9f:59:f0:9d:05:0c:33:dc:ff:d6:6a:
2e:d3:9a:25:2d:3a:ac:6c:47:b2:73:92:96:50:13:e5:f0:fb:
ac:76:a8:94:ef:63:14:2d:46:ec:59:2a:21:9b:fb:10:1f:9a:
e2:31:6e:c3:dc:35:a0:ae:00:04:10:68:fe:1d:fd:cc:b4:a8:
ef:b3:be:13:f8:b2:24:45:2a:0e:60:a4:be:81:01:67:9a:88:
60:86:7d:3e:f4:00:28:32:5e:26:7c:5f:36:cc:85:b9:2f:93:
8d:36:54:d4:23:6d:b4:b4:5b:94:80:9b:32:57:ff:02:cf:64:
65:d1:e0:2e:24:48:68:25:2b:b5:b8:ae:ce:4a:7f:78:78:79:
af:95:3f:02:c3:2e:2e:b0:ba:e7:06:44:d3:74:44:ad:35:42:
c7:6e:59:84:81:f1:09:6c:8f:22:42:f4:77:f9:26:46:6a:b8:
83:8a:36:a3:6e:4d:6c:ac:4a:3b:4e:c4:40:a1:4d:04:10:ba:
e6:38:db:f3:32:da:14:03:96:17:a0:c1:b7:90:69:01:91:6f:
aa:9e:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:57:23 2026 by rpki-client