Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: s2HB4oaTd6jMKmdxmnkHy398zvEv076Td0bktX+Q39w=
Subject key identifier: 5F:AB:25:CB:B5:A0:9F:A7:A7:FD:D3:81:9C:9E:68:94:BB:BB:9F:2E
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 01A08B9F2FAA21B9D6E7767115095DF49158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 14:01:00 +0000
Manifest this update: Thu 10 Sep 2026 14:01:00 +0000
Manifest next update: Fri 11 Sep 2026 14:01:00 +0000
Files and hashes: 1: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (hash: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: azbVzmQyMiRVmWc8Oarq4YhtWl7rr5e5OOQnXoqVSUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:2f:aa:21:b9:d6:e7:76:71:15:09:5d:f4:91:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Sep 10 14:01:00 2026 GMT
Not After : Sep 11 14:01:00 2026 GMT
Subject: CN=5fab25cbb5a09fa7a7fdd3819c9e6894bbbb9f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:8a:3c:25:ad:a5:c2:06:27:c7:de:74:f0:
53:95:6c:74:e5:ef:2d:3d:0f:1a:52:8d:9f:d9:7c:
13:15:2c:79:0d:5f:79:b6:72:ec:a6:3f:15:e2:38:
7a:20:6e:29:0a:60:dc:6d:cb:a1:c1:b0:3e:5e:d3:
e4:ea:0f:b8:f2:f9:96:4a:80:1d:99:19:3e:69:56:
c6:c6:90:d2:84:4a:10:38:c8:12:42:dc:32:9c:c6:
f8:df:2c:fa:d0:9d:ac:a6:30:7d:0a:49:29:6b:85:
35:e3:97:f5:63:ac:46:ea:58:23:cd:d6:9a:7d:25:
5d:c3:cf:2d:93:5d:da:9d:f6:0a:fd:5e:30:37:67:
17:6b:73:a9:40:c2:85:ec:ad:b6:f9:01:56:cb:8b:
d4:62:2c:08:44:39:6c:b2:24:c8:59:1c:04:30:b0:
ab:23:c2:87:10:30:7e:fe:4c:c2:93:db:1c:d1:ba:
8d:72:0d:56:a6:a2:cb:fd:ce:2f:a2:cb:39:77:cd:
76:3e:ee:3b:cf:f7:d9:16:d7:e9:aa:0e:ed:58:cd:
4e:22:48:ff:80:87:07:de:91:7a:6e:dd:3a:21:93:
d0:00:d1:8b:5b:eb:58:bf:b7:9d:1e:78:fa:33:5b:
28:2d:0e:66:0d:e3:25:59:15:98:e3:f9:40:39:8c:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AB:25:CB:B5:A0:9F:A7:A7:FD:D3:81:9C:9E:68:94:BB:BB:9F:2E
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7b:90:f6:55:af:ca:07:9d:7b:12:ba:5a:9d:f2:77:46:9c:
47:e9:94:6e:eb:aa:65:5f:5e:59:11:0e:21:7c:ae:2d:17:cd:
0a:33:1d:84:f4:3e:81:0a:5b:d7:f7:8b:d9:e5:94:51:88:40:
b9:9a:a1:39:50:ed:c8:1b:07:ea:02:93:c7:49:69:67:fb:2b:
af:36:55:49:52:99:6c:d7:06:d8:71:13:d5:67:6a:26:93:10:
11:d2:27:10:a3:f6:0e:c8:61:81:e0:0a:38:14:f2:9d:b0:1f:
40:4f:51:6f:cb:e5:13:8b:0b:07:ae:27:77:7a:32:1d:b7:7a:
b3:d1:fb:4d:81:bd:f8:81:ad:2d:be:74:89:eb:8d:1a:28:15:
e1:85:06:d2:90:7f:b2:c9:fa:f0:f4:17:bd:dd:7a:f1:b7:bf:
aa:43:ba:d8:ab:3a:62:0d:4e:18:a9:ba:c7:82:22:c5:5c:ee:
47:d9:96:0d:f4:f9:74:9f:7d:cb:d3:8c:59:5a:c6:15:ab:21:
2e:e4:cc:4b:8f:63:dd:93:2b:8d:38:0b:2c:13:44:36:fa:bd:
1d:8b:12:c2:a2:5b:75:75:c8:09:5a:1f:f1:c0:32:2b:d1:59:
08:69:0b:7a:27:02:2a:8e:8a:b8:54:e9:07:24:d0:3e:f9:41:
85:d0:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:20:31 2026 by rpki-client