Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: H225+5rWDFFfSMKAoe73IeOr+Hx0EVk/5gCzK3gIHUA=
Subject key identifier: 3F:6B:CA:B2:21:D9:0B:7B:EC:66:78:44:47:87:A4:AE:30:B2:68:2B
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 01A13E26BD901584A6931E8CDCD6B7F13960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 06:01:28 +0000
Manifest this update: Thu 15 Oct 2026 06:01:28 +0000
Manifest next update: Fri 16 Oct 2026 06:01:28 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: DXDFFaZDMJdQJRVRTzrVAdfM2wGadePuO1rBlwKpaX0=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:bd:90:15:84:a6:93:1e:8c:dc:d6:b7:f1:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Oct 15 06:01:28 2026 GMT
Not After : Oct 16 06:01:28 2026 GMT
Subject: CN=3f6bcab221d90b7bec6678444787a4ae30b2682b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:ec:34:b0:b5:70:c0:c9:95:b9:be:7d:15:
dd:5d:32:28:ae:7c:09:9a:8c:e9:70:14:23:74:49:
04:f0:04:8c:f1:26:16:cd:4e:b6:cf:b6:94:d2:87:
ff:82:86:ee:87:e3:6f:24:f4:51:3b:ba:92:90:ad:
09:94:39:c6:c7:bb:a4:18:c4:bf:b9:52:71:60:8b:
6e:90:60:d6:08:77:1f:c5:50:f1:cc:38:ee:d7:32:
1a:18:35:09:83:ed:75:ea:d2:9a:fb:25:bc:b5:0f:
7a:0c:13:21:69:b8:7e:43:81:0e:1f:15:b0:95:cf:
86:e8:c8:14:8a:3a:cb:a8:88:09:8b:79:d5:be:2b:
e8:42:c3:2f:ca:5c:37:36:de:e9:f9:e6:19:fc:27:
81:41:b1:e5:7f:94:29:8f:0a:ab:68:c1:fe:6a:44:
97:db:8e:d3:6f:9e:76:35:6d:ad:83:2c:26:3e:fd:
de:44:0a:08:e7:0b:4e:77:7d:db:6d:86:2b:5a:6a:
ab:d1:ec:93:92:04:8d:b2:dd:73:e1:4a:00:66:44:
4e:5a:7e:f8:69:3f:71:04:69:c9:b1:1b:a6:b4:b0:
07:40:3b:96:87:3f:53:4d:57:f3:52:76:4a:b7:48:
2a:e8:07:a2:45:5a:7a:1b:50:8c:a3:31:cf:06:2f:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:CA:B2:21:D9:0B:7B:EC:66:78:44:47:87:A4:AE:30:B2:68:2B
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:e8:97:64:15:29:ba:00:ba:c4:e2:ab:03:ba:4e:9a:c0:
e5:d6:5e:5b:a3:76:d5:1d:cb:bb:bb:56:ae:a6:eb:61:10:ef:
aa:79:24:65:fd:e6:0e:ea:7e:05:08:4b:39:a5:20:0f:30:66:
45:96:5e:d1:68:a7:46:61:1f:b0:99:db:54:24:b4:91:4b:d5:
d3:25:08:08:5d:3a:a8:41:c3:a9:6f:1a:10:c4:31:23:82:82:
d5:2b:e2:ca:ed:77:d6:c3:a8:b6:65:ee:b2:0a:96:c8:3a:a7:
a6:80:fb:1a:06:e7:b4:97:d4:f2:b4:ad:14:10:fc:5b:7c:40:
80:b6:80:04:7b:d9:bd:bc:f3:c2:5b:c2:1a:16:c2:58:ab:1e:
b3:4e:55:82:8c:8b:69:c7:27:45:50:5a:08:1d:ff:fa:99:a5:
fc:45:31:ab:59:ab:42:3d:75:56:43:bb:6c:88:4b:c3:45:4d:
a2:a3:ed:bd:b8:32:1d:1c:6d:10:78:4d:00:47:75:34:9c:c0:
79:47:28:60:6a:3f:f9:5d:2d:68:f4:87:e6:10:7a:01:af:2b:
de:f3:a1:eb:45:8b:c6:50:5c:32:48:91:4b:36:57:20:ea:f2:
d9:dd:af:58:f1:64:77:ca:8f:5e:77:fc:39:21:07:df:80:da:
47:ae:50:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jr2QFYSmkx6M3Na38TlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODViNmU5ZDg5ZmIwMTAzNjk5NzFlZDg4ODU3MjA1OTg1
ZDQ5MTgwHhcNMjYxMDE1MDYwMTI4WhcNMjYxMDE2MDYwMTI4WjAzMTEwLwYDVQQD
EygzZjZiY2FiMjIxZDkwYjdiZWM2Njc4NDQ0Nzg3YTRhZTMwYjI2ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PnsNLC1cMDJlbm+fRXdXTIornwJ
mozpcBQjdEkE8ASM8SYWzU62z7aU0of/gobuh+NvJPRRO7qSkK0JlDnGx7ukGMS/
uVJxYItukGDWCHcfxVDxzDju1zIaGDUJg+116tKa+yW8tQ96DBMhabh+Q4EOHxWw
lc+G6MgUijrLqIgJi3nVvivoQsMvylw3Nt7p+eYZ/CeBQbHlf5QpjwqraMH+akSX
247Tb552NW2tgywmPv3eRAoI5wtOd33bbYYrWmqr0eyTkgSNst1z4UoAZkROWn74
aT9xBGnJsRumtLAHQDuWhz9TTVfzUnZKt0gq6AeiRVp6G1CMozHPBi9+GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9ryrIh2Qt77GZ4REeHpK4wsmgrMB8GA1UdIwQY
MBaAFNSFtunYn7AQNplx7YiFcgWYXUkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMt
N2FjNjgwZWQ1ZGQ3LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMtN2FjNjgwZWQ1ZGQ3
LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba3ol2QV
KboAusTiqwO6TprA5dZeW6N21R3Lu7tWrqbrYRDvqnkkZf3mDup+BQhLOaUgDzBm
RZZe0WinRmEfsJnbVCS0kUvV0yUICF06qEHDqW8aEMQxI4KC1Sviyu131sOotmXu
sgqWyDqnpoD7GgbntJfU8rStFBD8W3xAgLaABHvZvbzzwlvCGhbCWKses05VgoyL
accnRVBaCB3/+pml/EUxq1mrQj11VkO7bIhLw0VNoqPtvbgyHRxtEHhNAEd1NJzA
eUcoYGo/+V0taPSH5hB6Aa8r3vOh60WLxlBcMkiRSzZXIOry2d2vWPFkd8qPXnf8
OSEH34DaR65QgQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:15:24 2026 by rpki-client