Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
File: iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft (raw, json)
Hash identifier: 5+rJIrvjiw6ITTk5nSUqZTiLoGqMo5wzWOPtrnu/43U=
Subject key identifier: F9:95:99:8F:D2:1C:C3:23:C3:F1:C5:31:D8:F3:07:B3:FF:8E:A6:93
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Certificate issuer: /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial: 01A06D959451CEB465297DACE150D2A73783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
Manifest number: 04EC
Signing time: Fri 04 Sep 2026 18:01:54 +0000
Manifest this update: Fri 04 Sep 2026 18:01:54 +0000
Manifest next update: Sat 05 Sep 2026 18:01:54 +0000
Files and hashes: 1: 3IMviFqKeTkgcM4hJ3DCovEJPT4.roa (hash: PJ8bbhBGDwD8QZsH/L9/+WbI+Jn53tual+W0DILWDvw=)
2: iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl (hash: q5CAvTOxyOyBieorcnoBS3kwYkbsM9+XOjclgulgYSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:94:51:ce:b4:65:29:7d:ac:e1:50:d2:a7:37:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Validity
Not Before: Sep 4 18:01:54 2026 GMT
Not After : Sep 5 18:01:54 2026 GMT
Subject: CN=f995998fd21cc323c3f1c531d8f307b3ff8ea693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:b3:e1:97:ce:f6:a7:c8:67:99:65:3e:e2:
1f:9c:45:7d:a3:c6:f7:f2:dd:a6:55:d8:80:9f:33:
1d:82:47:8d:e4:4a:5f:07:6a:ac:58:14:1a:9b:23:
49:95:d7:26:0a:06:4f:a1:3f:69:c5:7b:d5:c9:7a:
d7:dd:0e:fa:af:46:5d:57:d9:d8:a4:c7:ce:87:bb:
e7:89:68:48:36:9f:69:3b:5a:a9:5d:58:9d:fa:23:
88:f1:57:20:9b:8e:ec:de:39:de:81:7f:09:7f:87:
ed:96:79:a2:ae:29:56:6f:de:bc:ec:d2:d3:5f:f6:
cf:ab:68:89:72:d2:fd:12:57:44:bf:8b:0b:f0:6a:
63:4d:0c:e3:be:6f:9c:7e:77:1b:76:40:4f:0d:d5:
c6:c1:75:d6:0b:08:3c:ef:ba:63:39:35:ca:a7:f5:
90:53:33:a0:8f:b0:23:58:d8:ea:77:e9:dc:ef:b3:
58:ff:c7:09:86:4e:9b:ef:d2:4d:ee:bd:e9:9f:d9:
1d:4d:d4:5b:19:da:ee:7a:69:1b:d6:c7:6c:76:58:
06:52:b8:ed:0f:2e:c0:af:f7:b7:fe:6c:37:5f:c5:
1a:af:58:ea:44:19:e9:ed:b1:e8:97:4d:66:45:ad:
ce:44:50:b8:c3:fa:33:81:8f:1e:67:e3:34:55:18:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:99:8F:D2:1C:C3:23:C3:F1:C5:31:D8:F3:07:B3:FF:8E:A6:93
X509v3 Authority Key Identifier:
keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:24:4f:36:74:a0:19:a9:e5:e7:cb:6f:64:26:ec:83:20:db:
a7:1e:ae:7f:91:c0:3d:23:ac:8d:ee:57:4b:8e:a2:84:d5:c8:
11:0b:3c:ee:59:6c:53:08:1e:28:75:4d:d5:23:c1:50:bc:80:
09:15:78:bd:cb:f8:c9:93:0c:ea:1f:a2:41:bd:51:8c:bf:7c:
23:8d:00:8c:f6:8a:95:2b:d7:3b:70:42:c1:ca:d4:16:e2:d1:
5a:d0:db:50:99:94:66:ec:c2:3e:13:02:84:35:2c:4e:13:d2:
b4:17:fb:0b:c4:e5:4e:a2:5b:00:60:a6:fa:cc:11:3a:94:aa:
f2:36:f1:9a:da:13:6e:8b:ce:1b:75:07:7b:1e:b0:8b:0a:6b:
94:d0:4a:89:5c:cb:b4:57:49:78:0f:57:d1:53:67:b9:1d:0d:
de:8b:cf:fc:e8:ab:c0:4c:2e:5e:c9:a5:35:7b:69:72:12:1b:
c1:6d:c0:15:ab:d5:3c:1b:a3:4d:44:ec:e8:56:d0:84:bd:31:
52:25:a6:35:e7:59:b1:5c:d6:98:29:f3:e9:2a:a1:8f:c2:c7:
1e:5e:c0:9d:26:08:ed:b0:57:11:65:c1:86:8e:95:01:2a:f3:
50:f4:e8:61:7a:8f:a7:e3:6d:a0:fc:d8:d1:00:24:a7:5e:f8:
15:e5:f8:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlZRRzrRlKX2s4VDSpzeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWMwOTUyMmY2MzVmY2FmYTI5YmNlYmFjNzJjODk0ZTRm
ZmVlZDIwHhcNMjYwOTA0MTgwMTU0WhcNMjYwOTA1MTgwMTU0WjAzMTEwLwYDVQQD
EyhmOTk1OTk4ZmQyMWNjMzIzYzNmMWM1MzFkOGYzMDdiM2ZmOGVhNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+2z4ZfO9qfIZ5llPuIfnEV9o8b3
8t2mVdiAnzMdgkeN5EpfB2qsWBQamyNJldcmCgZPoT9pxXvVyXrX3Q76r0ZdV9nY
pMfOh7vniWhINp9pO1qpXVid+iOI8Vcgm47s3jnegX8Jf4ftlnmirilWb9687NLT
X/bPq2iJctL9EldEv4sL8GpjTQzjvm+cfncbdkBPDdXGwXXWCwg877pjOTXKp/WQ
UzOgj7AjWNjqd+nc77NY/8cJhk6b79JN7r3pn9kdTdRbGdruemkb1sdsdlgGUrjt
Dy7Ar/e3/mw3X8Uar1jqRBnp7bHol01mRa3ORFC4w/ozgY8eZ+M0VRi0MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmVmY/SHMMjw/HFMdjzB7P/jqaTMB8GA1UdIwQY
MBaAFIhcCVIvY1/K+im866xyyJTk/+7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDct
ZjgzYjhkMDQwODdjLzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDctZjgzYjhkMDQwODdj
LzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayRPNnSg
Ganl58tvZCbsgyDbpx6uf5HAPSOsje5XS46ihNXIEQs87llsUwgeKHVN1SPBULyA
CRV4vcv4yZMM6h+iQb1RjL98I40AjPaKlSvXO3BCwcrUFuLRWtDbUJmUZuzCPhMC
hDUsThPStBf7C8TlTqJbAGCm+swROpSq8jbxmtoTbovOG3UHex6wiwprlNBKiVzL
tFdJeA9X0VNnuR0N3ovP/OirwEwuXsmlNXtpchIbwW3AFavVPBujTUTs6FbQhL0x
UiWmNedZsVzWmCnz6Sqhj8LHHl7AnSYI7bBXEWXBho6VASrzUPToYXqPp+NtoPzY
0QAkp174FeX41A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:52 2026 by rpki-client