Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: nPYzDSmWUylkuU9tyn7xO+znGKY+zsTeDaAHjwxmuj0=
Subject key identifier: 5D:FB:67:C1:77:3F:A7:D9:41:C5:9E:7C:E4:2E:D6:B5:18:F5:F3:B1
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 01A151E441C41F1961B34E5A911870464232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0E49
Signing time: Mon 19 Oct 2026 02:01:15 +0000
Manifest this update: Mon 19 Oct 2026 02:01:15 +0000
Manifest next update: Tue 20 Oct 2026 02:01:15 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: npReLhIxpacONyeCgmE856rl1BUMHM4X12OmpWsXumc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e4:41:c4:1f:19:61:b3:4e:5a:91:18:70:46:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Oct 19 02:01:15 2026 GMT
Not After : Oct 20 02:01:15 2026 GMT
Subject: CN=5dfb67c1773fa7d941c59e7ce42ed6b518f5f3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:1a:cc:5e:16:d8:c8:6e:65:e7:21:74:33:
38:8b:d0:4f:16:30:ce:08:81:dc:96:d2:b8:4a:92:
ba:de:3f:83:ec:06:70:8a:78:94:ce:43:d3:bf:5f:
fd:57:2f:d1:21:82:00:a7:1e:21:75:d7:0d:ed:d8:
57:bb:86:01:6b:ca:0b:7c:90:2d:1b:93:56:ae:1c:
4b:d2:6b:23:7e:4e:75:be:4b:6b:d5:2a:b4:86:ad:
1b:0b:6a:3b:f0:ab:1c:ae:36:83:da:29:56:a9:d3:
d8:1e:f9:76:a1:5b:89:1f:d3:ec:43:99:60:86:2b:
7e:26:0d:b6:37:ef:37:07:11:72:5f:28:5d:74:d8:
2b:f7:59:4b:0f:85:23:e0:cc:ed:c0:61:f8:f1:63:
52:e3:97:9f:16:8d:34:67:4d:1f:7c:8f:be:d8:e3:
ec:03:74:9e:4a:1a:f3:58:ee:42:a7:9f:0b:ba:1e:
9d:39:12:45:d8:ec:01:43:eb:89:18:e0:b0:22:57:
bc:e5:da:d2:f0:b8:13:21:ef:c8:ec:68:fc:c3:5f:
92:a6:2b:49:b9:15:a1:82:f2:51:58:79:7e:bc:ea:
0d:25:e9:49:98:c2:77:59:d8:5f:38:5e:24:43:58:
4c:70:02:46:cb:62:74:86:44:1d:62:5c:39:3a:38:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FB:67:C1:77:3F:A7:D9:41:C5:9E:7C:E4:2E:D6:B5:18:F5:F3:B1
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:54:a5:93:ae:ee:e2:97:51:a7:97:84:66:43:93:f1:7f:c5:
35:63:ed:81:6c:5b:9a:56:b2:0c:8d:13:05:9b:75:ae:f4:39:
1e:44:6c:2c:b5:98:df:7e:03:c6:de:2e:92:32:27:89:35:da:
47:af:d6:82:1c:81:7c:85:ef:f3:54:18:d7:02:ad:46:43:16:
cb:44:0b:74:e0:09:18:dd:74:10:fd:d6:b3:22:bb:24:ef:a6:
6e:ac:6f:79:8a:d2:44:d9:20:51:d3:e3:5b:60:00:7b:ac:fe:
64:c0:4b:c4:79:97:94:d9:06:05:1b:4e:96:57:05:08:e0:39:
0d:72:9c:20:a4:6f:2f:9d:47:2d:ca:73:05:63:2f:33:df:4d:
ff:ae:51:b8:65:3f:08:92:71:b8:46:d2:49:b2:b5:c6:cd:ff:
ec:f3:3a:fa:94:77:a2:bf:4b:5a:ef:87:61:48:cc:30:b5:4d:
0d:1e:e1:69:4c:0b:bf:d9:33:08:1e:75:6e:c8:ce:2d:27:6c:
5f:11:f1:dc:82:5c:5b:0a:1c:e4:f8:d9:21:00:64:91:c7:16:
9c:f5:b2:20:ff:e4:93:36:a5:7d:f2:3f:b1:f7:eb:1f:5d:bd:
05:f9:84:9b:14:ae:fa:20:12:de:7e:57:da:db:84:31:b5:63:
b0:31:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:27 2026 by rpki-client