
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
File: iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft (raw, json)
Hash identifier: 6nfFegDEZuyEdXRyJntvTsy8XTjhUhCpU7iw8sILuWc=
Subject key identifier: 9C:4D:CF:E3:90:44:30:5B:AD:32:81:90:E0:2A:AD:D9:AB:FD:DD:07
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Certificate issuer: /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial: 01A1859AF46A40DE3935930180B813E7E074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
Manifest number: 057D
Signing time: Thu 29 Oct 2026 03:01:27 +0000
Manifest this update: Thu 29 Oct 2026 03:01:27 +0000
Manifest next update: Fri 30 Oct 2026 03:01:27 +0000
Files and hashes: 1: 3IMviFqKeTkgcM4hJ3DCovEJPT4.roa (hash: PJ8bbhBGDwD8QZsH/L9/+WbI+Jn53tual+W0DILWDvw=)
2: iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl (hash: 71BzbN6MeRTnAhSrmvS7Bs6PJv88hR9zrp2g6MpWj1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9a:f4:6a:40:de:39:35:93:01:80:b8:13:e7:e0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Validity
Not Before: Oct 29 03:01:27 2026 GMT
Not After : Oct 30 03:01:27 2026 GMT
Subject: CN=9c4dcfe39044305bad328190e02aadd9abfddd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:66:96:48:16:e4:ea:44:34:35:e0:f6:f5:
db:a2:a8:aa:ea:60:31:1f:07:c8:58:4e:2d:d2:96:
57:6a:03:4e:09:ac:18:11:80:13:04:53:97:ee:55:
2e:c5:ef:92:94:63:46:e9:a1:a8:3a:33:ef:05:98:
b2:06:63:82:bf:6e:83:18:91:9e:11:ff:9d:97:b0:
62:53:64:3f:ac:37:de:29:29:41:f2:6c:0f:38:ad:
eb:b6:0a:b0:68:9e:e8:5d:9d:ee:a5:6a:a3:e3:69:
c1:be:90:27:de:2c:4e:95:ed:0a:19:03:f1:2d:74:
dc:ad:9b:ca:51:dd:81:23:c4:5b:2d:47:35:d7:39:
a9:10:38:2d:83:e0:b0:be:a8:f8:78:2e:60:a5:d0:
37:3d:d3:a3:36:2f:f8:12:df:87:15:48:11:58:62:
c9:95:ef:0b:25:5d:2b:fd:6a:76:cf:df:e5:22:a2:
f3:74:68:c8:57:0c:bc:33:39:f6:88:f8:0c:f9:cf:
b0:88:b9:ca:38:55:ad:b2:f5:7a:2d:f4:29:43:0e:
83:cd:cd:e6:8c:d9:50:74:71:e7:d7:8b:62:e2:f1:
56:5a:51:a3:fa:c8:a1:5c:ee:f3:36:72:99:83:01:
e8:12:16:95:69:03:cc:5e:f7:46:af:94:10:55:d0:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:CF:E3:90:44:30:5B:AD:32:81:90:E0:2A:AD:D9:AB:FD:DD:07
X509v3 Authority Key Identifier:
keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8c:cc:0f:c1:88:09:33:bd:e0:ae:aa:b7:df:76:fc:79:75:
7e:6f:c8:d6:ed:ef:f3:f3:bb:2c:83:f0:df:3d:e9:5b:6a:22:
62:bc:f9:a3:14:40:28:aa:4f:aa:28:f7:17:9d:6d:e2:a2:51:
8a:18:e0:8b:21:14:bc:8e:d7:13:44:57:52:da:b0:0c:bd:be:
1b:2e:86:b7:37:f9:88:d7:62:39:12:92:94:53:bb:ec:ee:e8:
ea:bf:d0:f8:a8:f6:68:87:9c:1a:c4:da:9e:94:98:fd:2a:5a:
16:ca:b9:5b:ab:cd:4b:2b:eb:ea:66:ef:85:68:f7:d3:d5:7a:
a7:37:79:6a:ee:a8:83:2f:8c:24:cd:66:69:95:5f:15:25:39:
1b:66:65:0a:4e:37:cd:e1:5d:41:ef:20:b2:ad:5e:bd:ff:16:
e7:65:52:84:6d:fd:fb:aa:53:7d:97:d2:b5:8a:51:e8:49:e2:
fa:32:a4:5f:35:bf:c9:4a:43:b6:02:a7:b7:78:53:12:07:d1:
32:0f:52:90:21:1b:7b:3d:79:9d:46:0c:bf:62:3b:c0:78:86:
ba:0e:72:7d:e6:ee:88:66:3b:f1:a9:0a:2f:bb:0a:6f:e3:f9:
dd:11:3b:b3:fe:68:ec:a5:13:88:67:05:e5:02:77:63:89:c1:
0f:16:21:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFmvRqQN45NZMBgLgT5+B0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWMwOTUyMmY2MzVmY2FmYTI5YmNlYmFjNzJjODk0ZTRm
ZmVlZDIwHhcNMjYxMDI5MDMwMTI3WhcNMjYxMDMwMDMwMTI3WjAzMTEwLwYDVQQD
Eyg5YzRkY2ZlMzkwNDQzMDViYWQzMjgxOTBlMDJhYWRkOWFiZmRkZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWBmlkgW5OpENDXg9vXboqiq6mAx
HwfIWE4t0pZXagNOCawYEYATBFOX7lUuxe+SlGNG6aGoOjPvBZiyBmOCv26DGJGe
Ef+dl7BiU2Q/rDfeKSlB8mwPOK3rtgqwaJ7oXZ3upWqj42nBvpAn3ixOle0KGQPx
LXTcrZvKUd2BI8RbLUc11zmpEDgtg+Cwvqj4eC5gpdA3PdOjNi/4Et+HFUgRWGLJ
le8LJV0r/Wp2z9/lIqLzdGjIVwy8Mzn2iPgM+c+wiLnKOFWtsvV6LfQpQw6Dzc3m
jNlQdHHn14ti4vFWWlGj+sihXO7zNnKZgwHoEhaVaQPMXvdGr5QQVdBDnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxNz+OQRDBbrTKBkOAqrdmr/d0HMB8GA1UdIwQY
MBaAFIhcCVIvY1/K+im866xyyJTk/+7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDct
ZjgzYjhkMDQwODdjLzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDctZjgzYjhkMDQwODdj
LzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4zMD8GI
CTO94K6qt992/Hl1fm/I1u3v8/O7LIPw3z3pW2oiYrz5oxRAKKpPqij3F51t4qJR
ihjgiyEUvI7XE0RXUtqwDL2+Gy6Gtzf5iNdiORKSlFO77O7o6r/Q+Kj2aIecGsTa
npSY/SpaFsq5W6vNSyvr6mbvhWj309V6pzd5au6ogy+MJM1maZVfFSU5G2ZlCk43
zeFdQe8gsq1evf8W52VShG39+6pTfZfStYpR6Eni+jKkXzW/yUpDtgKnt3hTEgfR
Mg9SkCEbez15nUYMv2I7wHiGug5yfebuiGY78akKL7sKb+P53RE7s/5o7KUTiGcF
5QJ3Y4nBDxYhtA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:45:57 2026 by rpki-client