Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: t5kf9XXBcrptvEgmqJnqOtI/zUibpEfC+kVnWMG3im0=
Subject key identifier: F1:AC:FD:6E:96:89:61:CD:4F:02:4A:0C:0B:86:CA:F7:92:7E:EF:4A
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 01A0016FBEFAA3F04AB638F68F6594125254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:01:35 +0000
Manifest this update: Fri 14 Aug 2026 18:01:35 +0000
Manifest next update: Sat 15 Aug 2026 18:01:35 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: idRt4kAQzxRsp/fJ9htIzOwQm4UH0YFsccolcxw8IWE=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:be:fa:a3:f0:4a:b6:38:f6:8f:65:94:12:52:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Aug 14 18:01:35 2026 GMT
Not After : Aug 15 18:01:35 2026 GMT
Subject: CN=f1acfd6e968961cd4f024a0c0b86caf7927eef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:35:4f:68:8d:26:c4:6c:1e:ac:b4:59:48:
d3:eb:f0:99:49:8d:d8:e7:b4:23:b9:c0:8e:70:e8:
3c:99:d0:8d:6f:b2:d3:3a:8d:fc:f4:6a:f7:a0:2d:
11:c4:7a:c3:74:cb:ca:af:3e:b0:4d:ec:8e:7f:60:
f7:0d:88:52:48:7a:ec:4b:11:6f:3b:08:7c:9a:d7:
bc:68:b3:af:32:cf:a7:71:19:43:dd:6a:76:b3:fa:
42:ac:d7:a9:68:38:a1:ff:b8:dd:cb:ad:e2:22:28:
28:0e:a3:80:8c:42:b8:9e:a4:ae:c3:ad:66:40:42:
e7:5a:48:6e:14:fb:ba:b2:3d:b7:60:3e:91:dd:ac:
49:6e:4a:d9:f5:3d:20:0c:f6:da:e8:0a:54:9f:5e:
3b:1a:eb:1a:6b:50:3c:c4:49:d6:f6:35:60:77:a3:
d3:6e:ec:39:49:23:86:9c:e4:d9:86:d4:f6:d2:d8:
cd:77:20:d8:48:02:b5:ba:b4:e4:b1:3f:6c:50:6f:
a0:23:fd:ac:a2:1d:63:4c:c4:1a:1c:59:0a:48:f9:
c9:ac:18:f7:d9:ec:6f:31:9f:85:fa:eb:de:2e:fa:
65:33:3e:6b:ca:a3:42:72:40:10:f5:20:e9:95:0d:
ca:1e:51:d0:30:5c:7a:33:00:a1:b1:5f:c9:ec:86:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:FD:6E:96:89:61:CD:4F:02:4A:0C:0B:86:CA:F7:92:7E:EF:4A
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:31:c4:ff:ed:93:5e:c6:cb:fe:95:4a:c3:7d:06:ec:1c:10:
d4:31:3f:a4:68:f1:22:61:4b:eb:bc:4c:e2:48:85:b2:bd:e4:
43:61:c9:e6:fc:0d:49:14:84:7a:5c:ed:82:84:3a:9d:18:76:
92:4d:ad:2f:ff:d7:8e:5a:e6:8f:da:52:df:d1:f8:0a:00:ec:
ed:2f:6c:00:59:09:4a:eb:70:ea:65:92:02:a4:12:fd:bd:81:
f0:94:98:c2:95:ef:d6:83:78:c1:4f:4a:b4:95:ab:f1:76:25:
6a:61:41:d2:5f:b1:74:94:10:19:4a:8a:c1:cb:f5:85:08:eb:
9a:f5:ae:93:0b:e8:43:1b:e7:38:cc:c7:90:50:af:92:84:b0:
c0:32:bd:96:da:4e:73:1f:4a:e7:8c:c3:ba:51:b2:a0:89:6d:
d7:a2:94:c2:06:59:17:a9:b4:5e:58:1d:c0:e9:e3:43:37:fc:
4b:0a:92:8d:e4:77:0c:53:bd:3e:51:66:2a:dc:c7:4f:b8:e0:
0e:10:70:48:22:68:2d:6f:f9:3d:dd:19:46:3b:93:a1:5c:74:
9f:ad:48:87:fc:c9:be:5c:e1:ca:90:38:7e:49:8d:63:5e:c5:
f2:16:2b:f0:ac:32:07:4e:ff:0c:3e:18:19:21:a7:eb:84:12:
88:d9:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:34 2026 by rpki-client