Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: fzLdIiWsmzbhMZA6Ckk7i+ibL9vPASzvYZxXwc1TSLQ=
Subject key identifier: C2:A3:11:FE:CC:06:A8:4E:15:6E:94:A8:7B:9A:0F:EF:4A:BE:E5:07
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 01A146F2A7A8DA206627D88FE6C54B5A1D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 0A17
Signing time: Fri 16 Oct 2026 23:01:10 +0000
Manifest this update: Fri 16 Oct 2026 23:01:10 +0000
Manifest next update: Sat 17 Oct 2026 23:01:10 +0000
Files and hashes: 1: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: wEspJ+vVUDoWPOc3jg2Ii1qu62MbgAa3kXmth9A2QK8=)
2: yAy7dhfnf5ztz8zG2y2BYT0K2Nc.roa (hash: Yhi2sxhWb+ZdylE1qzvoU8mFvZlrRwD3FR8dKXylg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:f2:a7:a8:da:20:66:27:d8:8f:e6:c5:4b:5a:1d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Oct 16 23:01:10 2026 GMT
Not After : Oct 17 23:01:10 2026 GMT
Subject: CN=c2a311fecc06a84e156e94a87b9a0fef4abee507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:d2:9e:e9:91:0b:b5:da:68:d9:88:9f:2d:
b1:75:31:19:4a:af:eb:44:ae:a0:74:f6:18:78:3d:
88:1b:7e:c7:c1:60:09:25:04:2a:3d:89:6e:15:41:
ba:c4:bf:53:11:40:e3:ab:c1:7d:17:07:27:f1:49:
4f:22:8b:a4:b3:ac:01:21:bc:10:02:59:be:6b:1a:
60:1a:63:41:d6:97:b2:e1:e1:e7:22:34:4f:82:2a:
5f:c2:a6:b1:06:36:1d:31:18:78:e7:dd:a2:cd:d7:
97:b0:5d:43:72:86:d4:bb:94:4a:a1:f1:16:f6:f5:
89:47:ec:f8:cb:c8:25:95:8a:e4:40:48:e5:5b:6b:
62:94:21:ab:a4:43:61:cb:d7:a3:15:fa:52:b6:6d:
64:ee:69:65:9b:0a:b7:79:27:79:0b:76:ec:f6:c5:
57:b6:18:48:e3:c9:fe:6e:06:c8:0c:50:db:f8:88:
77:ea:29:51:da:fa:27:82:8f:ee:5a:82:07:84:50:
bc:f7:27:67:49:d6:b3:3c:58:83:cc:21:28:e1:6a:
d1:93:a8:1f:8f:17:e2:38:ed:c9:d7:49:79:91:ee:
0c:3f:83:2f:03:44:6f:b5:84:50:f0:5a:e7:a2:1d:
73:22:ab:2c:57:00:b2:ea:0a:91:e3:0c:d9:ab:ff:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:11:FE:CC:06:A8:4E:15:6E:94:A8:7B:9A:0F:EF:4A:BE:E5:07
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d3:b9:1b:53:f4:f5:94:cb:22:5f:d2:ef:5c:88:13:e2:82:
c4:b8:fa:9b:23:5e:f3:00:56:1d:ed:59:8b:5f:75:ac:0d:c0:
70:5c:82:d3:94:87:6e:70:66:fb:b6:c4:ca:d5:0b:b7:84:25:
4a:79:c8:a8:2e:77:bc:a2:e9:33:0d:7c:94:2d:e7:f5:7a:45:
7e:9c:54:e1:b0:9c:e8:3c:7a:93:fd:fe:e8:a9:17:0c:5e:33:
66:d4:52:50:83:05:f2:1b:18:80:25:e9:00:fd:41:b9:6b:18:
b0:3d:b1:15:5a:b9:9c:c1:06:eb:cf:a3:d6:d6:d2:0c:3a:e7:
d9:c5:f7:21:29:99:b6:1f:f6:2b:65:6c:9e:f1:d7:12:89:04:
08:5a:81:9a:52:05:27:de:c7:3c:fa:51:de:81:b6:2c:86:44:
dc:39:fe:2c:ff:33:42:80:f8:92:c6:3f:2e:9f:55:5b:30:b6:
9b:be:ab:a5:19:d1:5a:da:d4:94:95:37:31:f6:20:3e:a0:d2:
8a:23:66:9b:47:41:a4:65:4c:c8:8b:1d:d3:da:a6:49:8d:5f:
fa:32:3a:e2:4d:72:df:96:4d:a5:8a:a1:1d:38:a8:91:0c:c1:
ee:ad:30:f9:1a:ae:60:ce:ca:c1:97:ac:a6:b2:d2:59:64:b7:
14:c6:7f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFG8qeo2iBmJ9iP5sVLWh0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDVjODBiMzU4NzMyY2YxZWNlZWNmMmY1YmRjOGFiM2Rj
MTgxYWUwHhcNMjYxMDE2MjMwMTEwWhcNMjYxMDE3MjMwMTEwWjAzMTEwLwYDVQQD
EyhjMmEzMTFmZWNjMDZhODRlMTU2ZTk0YTg3YjlhMGZlZjRhYmVlNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aPSnumRC7XaaNmIny2xdTEZSq/r
RK6gdPYYeD2IG37HwWAJJQQqPYluFUG6xL9TEUDjq8F9Fwcn8UlPIouks6wBIbwQ
Alm+axpgGmNB1pey4eHnIjRPgipfwqaxBjYdMRh4592izdeXsF1DcobUu5RKofEW
9vWJR+z4y8gllYrkQEjlW2tilCGrpENhy9ejFfpStm1k7mllmwq3eSd5C3bs9sVX
thhI48n+bgbIDFDb+Ih36ilR2vongo/uWoIHhFC89ydnSdazPFiDzCEo4WrRk6gf
jxfiOO3J10l5ke4MP4MvA0RvtYRQ8Frnoh1zIqssVwCy6gqR4wzZq/88YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKjEf7MBqhOFW6UqHuaD+9KvuUHMB8GA1UdIwQY
MBaAFIjVyAs1hzLPHs7s8vW9yKs9wYGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYt
OWEyZjc5NmM5NDc3LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYtOWEyZjc5NmM5NDc3
LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtO5G1P0
9ZTLIl/S71yIE+KCxLj6myNe8wBWHe1Zi191rA3AcFyC05SHbnBm+7bEytULt4Ql
SnnIqC53vKLpMw18lC3n9XpFfpxU4bCc6Dx6k/3+6KkXDF4zZtRSUIMF8hsYgCXp
AP1BuWsYsD2xFVq5nMEG68+j1tbSDDrn2cX3ISmZth/2K2VsnvHXEokECFqBmlIF
J97HPPpR3oG2LIZE3Dn+LP8zQoD4ksY/Lp9VWzC2m76rpRnRWtrUlJU3MfYgPqDS
iiNmm0dBpGVMyIsd09qmSY1f+jI64k1y35ZNpYqhHTiokQzB7q0w+RquYM7KwZes
prLSWWS3FMZ/jA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:10:02 2026 by rpki-client