Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier: gZyXMUH+Du+pY1GxVrdPywjIkBNTk4N8brbjQMf6Z4U=
Subject key identifier: A1:68:5C:B0:9B:51:02:0F:C6:E2:30:60:DA:44:73:B0:86:E2:5A:25
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 01A0F90EF3B67AE3EC19116526297491F25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number: 1072
Signing time: Thu 01 Oct 2026 20:01:41 +0000
Manifest this update: Thu 01 Oct 2026 20:01:41 +0000
Manifest next update: Fri 02 Oct 2026 20:01:41 +0000
Files and hashes: 1: MPdIoBhSamsoceGH97ZrbeY-7Y4.roa (hash: xk+VO+lT2ZL0Nzt8GYWzkONFJ8wXFr2d45kNV/RsFNQ=)
2: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: l+WYvhojSKbiE2MYC8a6T59cLkcfq3pRzSP1Q7lEBOw=)
3: lYJDRXWPAACOBIGtN5SoMpmELk8.roa (hash: +/i7PrD75ms6DLzi7NKAcmr/vu2swer4LejKpfAFxnA=)
4: uUrDuBilHzuoCgA80rJqPJxqSNQ.roa (hash: 77BWKMeC9pAnIWkDSdffjc6huYPIszzufpj7ouuEVAY=)
5: vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa (hash: LDklYITUv8QycRGMLTw4zqVIBgqTAfoD6STDQphVOWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0e:f3:b6:7a:e3:ec:19:11:65:26:29:74:91:f2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Oct 1 20:01:41 2026 GMT
Not After : Oct 2 20:01:41 2026 GMT
Subject: CN=a1685cb09b51020fc6e23060da4473b086e25a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:fc:52:f3:da:6c:b3:e8:54:ed:67:c4:b8:
e4:d1:e6:0f:00:eb:f7:d4:1c:be:43:61:cf:09:ae:
14:46:18:ca:80:61:b3:8a:c9:b6:02:5d:48:45:b4:
b8:a5:dd:bb:8f:68:d9:00:ad:80:c9:d6:f5:d9:a1:
3e:58:d1:3b:47:ee:e5:b6:2a:53:26:09:94:06:53:
c8:03:3c:0a:28:98:50:17:5b:f4:cc:86:6d:d7:9d:
d0:74:fa:69:27:7c:59:b8:a7:62:d2:7d:00:95:fd:
72:1e:46:72:24:d1:2c:7d:6d:5f:43:b7:a8:62:ce:
6b:00:c8:ce:07:20:a1:c4:72:ed:89:15:53:66:e7:
1b:fe:95:a9:e0:d9:08:8b:26:8f:ab:87:cf:f7:60:
06:a7:fd:bb:b8:ac:44:44:4b:68:b0:20:1a:1a:6c:
0a:d2:34:4a:12:c4:ed:db:33:99:3b:12:e8:67:08:
ed:4a:ad:17:5c:7f:84:d2:e5:63:ff:b3:31:cf:98:
44:cc:41:03:81:af:56:4e:4d:07:0f:10:8c:41:00:
38:67:ce:2f:e6:f1:30:d7:ee:3c:27:e6:4c:38:94:
5b:18:2b:ff:2a:ab:30:96:ca:02:2d:29:9b:a1:46:
d1:a4:8a:dc:ea:f6:d4:99:09:42:6d:58:9c:19:a3:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:5C:B0:9B:51:02:0F:C6:E2:30:60:DA:44:73:B0:86:E2:5A:25
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:41:e3:c6:5b:1b:a7:43:90:58:16:78:f6:c4:b1:c5:e8:94:
57:d9:ce:ff:bd:07:6e:3b:0f:83:9f:08:f8:28:48:ed:91:69:
83:18:cd:e7:db:ea:a3:ea:75:c5:93:24:f9:cf:16:64:96:5d:
6c:a6:da:08:d7:b4:de:b8:0e:ab:41:d7:b4:71:74:04:b6:ef:
ee:80:99:59:5b:f6:05:73:d1:2b:e1:69:bc:8b:f4:40:55:d1:
46:6a:e7:e9:02:37:b4:62:93:3c:82:9a:0f:84:8e:bc:d5:43:
43:06:83:1b:f8:c2:95:b4:46:49:be:1b:80:96:54:bb:75:5c:
01:28:e5:ea:7d:36:4e:cf:fe:80:0b:30:1b:65:7f:f7:0e:26:
17:2e:5a:1b:54:36:39:28:22:29:2c:fc:a3:a2:ce:a4:9e:4e:
bb:d1:6e:b0:d0:0b:22:e7:c2:48:b9:16:d5:65:a9:e8:91:15:
e2:0c:50:3d:3d:6e:31:7f:70:e6:5c:d1:cf:cb:96:36:c3:ae:
d2:47:6b:37:2d:63:9b:82:fe:ce:aa:98:3e:cf:dc:be:cb:f8:
26:0d:5b:05:1e:af:d6:d5:31:ff:d8:da:60:52:1a:55:0a:4e:
ce:49:a4:bb:68:07:36:9a:46:ca:55:fc:53:d6:fa:da:3b:9a:
ae:72:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:38:05 2026 by rpki-client