Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: JOtWcGXuL1R3RuN2kdtErj88sEpUZrbT7yBjc23U3cw=
Subject key identifier: 08:05:36:58:D3:80:22:3A:E0:7A:A0:32:83:42:64:C4:F7:E1:C3:B6
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 01A1773A4787A1962FC1375AB0033C989C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 08:01:10 +0000
Manifest this update: Mon 26 Oct 2026 08:01:10 +0000
Manifest next update: Tue 27 Oct 2026 08:01:10 +0000
Files and hashes: 1: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (hash: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: NeIcDGFrx50D4UBwmJ6OkXfDyKoazlomLra595zOE/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:3a:47:87:a1:96:2f:c1:37:5a:b0:03:3c:98:9c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Oct 26 08:01:10 2026 GMT
Not After : Oct 27 08:01:10 2026 GMT
Subject: CN=08053658d380223ae07aa032834264c4f7e1c3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:fa:64:98:8a:5e:e7:2d:f2:67:e5:08:91:
d9:d9:73:60:26:f0:9b:c0:3b:8e:0f:6a:4f:0e:06:
32:e7:b3:4e:7e:5d:59:f0:2d:82:31:63:5e:2c:3d:
6f:d7:9c:d2:e2:9e:5a:02:b5:f2:df:70:6c:68:21:
28:d3:fe:2d:b0:aa:e3:d6:a4:a9:d0:6f:d0:f6:28:
66:db:9b:c6:04:63:6c:63:5b:76:32:20:58:7c:d4:
0b:83:1b:2a:91:71:d1:8e:df:47:7c:ce:d5:67:e1:
6d:fe:09:30:c5:88:6c:39:5d:51:79:c6:0e:23:c9:
33:3a:5d:f5:00:db:13:96:f4:79:45:9e:f9:63:46:
b5:0e:5c:3e:0a:cd:71:07:4e:fe:e5:96:8b:8d:5b:
a6:8a:90:8a:44:a2:97:0b:e8:b2:62:fa:a4:8a:8b:
7b:03:01:ea:6e:04:f2:64:d3:28:f6:97:a0:5f:d0:
db:18:7f:3c:da:2e:1f:ea:21:bc:02:0b:40:6c:d6:
14:34:68:cc:92:e8:fd:27:20:b7:73:24:39:be:c3:
8b:17:83:eb:64:d9:0c:52:6f:dc:18:a9:3a:09:ca:
1d:c0:c6:95:27:8b:22:b1:45:47:f2:0a:fa:ab:e1:
70:60:30:95:18:e8:09:93:6c:92:19:40:32:73:96:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:36:58:D3:80:22:3A:E0:7A:A0:32:83:42:64:C4:F7:E1:C3:B6
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:f3:04:76:7c:af:01:0b:71:b4:0a:cc:31:4b:f0:ac:74:
9d:48:1c:5a:3b:2c:92:91:da:49:78:9a:a9:93:26:90:02:da:
b5:58:d0:15:70:00:71:45:17:88:f1:77:16:fa:f7:02:53:78:
e2:c5:7f:49:30:10:32:61:88:42:ef:c1:77:c5:0e:29:dc:19:
bc:f0:08:d0:25:4b:9f:0c:78:f4:a2:5a:89:4a:af:ef:80:97:
92:34:7f:f5:57:7d:f5:60:c4:1c:cd:19:d8:03:27:7c:42:2b:
2d:4f:0c:14:21:68:38:65:9b:e1:88:1d:69:36:d2:9b:36:55:
45:94:ab:7f:78:fe:1c:ae:fc:8d:c6:4c:a3:a7:cb:86:18:9e:
8b:ee:db:6b:7c:b4:2b:7e:44:7d:69:7f:b7:d2:68:65:2d:34:
7a:ef:43:3d:02:5b:e2:ab:ed:36:a2:9c:e7:44:18:c0:37:2b:
8d:55:83:8c:b0:4d:66:b2:e1:10:86:f8:a1:98:fe:f5:b4:9c:
c5:2d:1a:9c:6b:80:07:43:41:81:f0:20:8b:3c:f9:cc:99:9b:
46:51:b8:32:b9:b4:63:23:e3:24:09:b7:d4:28:87:4e:72:b6:
ae:70:4b:3b:fd:16:eb:51:66:b7:30:ad:62:d8:bf:ee:75:90:
ea:e3:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:20 2026 by rpki-client