Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: 0vUXhnGokhP5QvNvzxO9PzePjiVCgUFM7bN7cWKF5NE=
Subject key identifier: 99:9E:FF:02:0A:0B:C3:6E:DC:83:BF:A5:AE:2B:63:C3:2D:22:1B:54
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 01A17E4F671107B8A5C109AC9B2AC46B871F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0FEF
Signing time: Tue 27 Oct 2026 17:01:35 +0000
Manifest this update: Tue 27 Oct 2026 17:01:35 +0000
Manifest next update: Wed 28 Oct 2026 17:01:35 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: 9C2tiHIvGSkAU0lCJDIwlIg8C2SQonmQLRu06Kp1XA4=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:67:11:07:b8:a5:c1:09:ac:9b:2a:c4:6b:87:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Oct 27 17:01:35 2026 GMT
Not After : Oct 28 17:01:35 2026 GMT
Subject: CN=999eff020a0bc36edc83bfa5ae2b63c32d221b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:37:48:8b:21:73:29:df:f2:2d:d0:a1:cd:cc:
0f:24:b2:1f:63:53:d0:0f:c8:29:a4:1a:e2:68:26:
83:ac:5c:a8:88:f6:02:90:92:90:a1:a4:97:af:54:
cb:ff:a6:2f:f2:a0:58:80:29:35:b3:55:97:1d:fe:
17:78:b5:30:43:ee:ad:6c:a0:8f:b3:77:3e:a0:43:
36:00:fe:b4:4d:d2:b1:31:79:05:4f:f5:f4:e6:b3:
de:f5:ba:a5:ab:11:f0:ab:1b:30:ae:cc:6e:ae:55:
a8:da:10:20:84:a6:ae:37:0d:7f:58:c4:ee:a4:23:
29:a4:0a:c7:2d:21:f1:bc:fd:cd:ff:83:95:95:6e:
23:37:5e:c3:dd:b6:21:04:9f:c5:79:51:c6:db:12:
bf:8b:a3:4c:8f:72:1e:04:af:02:0e:5f:af:99:4f:
1c:80:9c:fa:2e:bc:b0:ae:e5:84:a7:f4:6d:29:a9:
11:1b:07:71:f6:92:22:86:44:0b:95:bf:e6:bd:5e:
f7:6c:1b:35:df:9b:63:a7:2c:1c:c8:75:92:4b:08:
c2:8e:87:72:e8:8d:19:14:50:dd:7e:19:ce:2a:45:
c4:5a:02:21:f5:ff:f5:17:5b:6b:07:b9:32:d2:8f:
e3:75:ee:a5:86:d3:9a:8b:24:fa:54:07:94:b1:d9:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:FF:02:0A:0B:C3:6E:DC:83:BF:A5:AE:2B:63:C3:2D:22:1B:54
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:31:ee:23:cf:7a:1f:64:2b:64:a6:4c:3d:58:fd:95:38:79:
d1:89:ae:69:6e:f4:57:99:06:10:21:f7:a3:c0:f5:73:3c:b6:
c5:c0:cd:a0:75:a6:36:34:7c:8d:09:19:5f:c5:b3:43:1e:50:
49:3e:37:2c:05:45:6c:5a:52:f7:5a:6c:86:1e:d4:36:06:7e:
2f:37:35:d6:b4:ff:00:6c:e8:93:a8:93:fd:5a:8f:58:9d:ca:
01:66:1b:b3:1e:5d:78:b5:76:19:4b:49:df:82:2d:4e:ef:52:
40:79:49:9c:a9:70:19:e7:59:ca:4d:c1:47:43:41:c5:f6:4d:
ec:38:99:fa:37:4d:28:3b:70:ef:8a:b9:20:af:18:76:e2:a2:
7b:6d:48:d0:fa:cf:60:83:e4:a0:cd:3a:eb:2c:b0:32:0e:41:
9a:b6:b1:dd:2b:05:b5:77:8a:09:7b:97:41:5c:17:34:0f:d9:
8f:bc:34:45:62:e0:ab:fd:66:4c:ff:c8:75:59:47:c5:16:00:
41:42:58:c9:83:32:7a:15:d6:6f:4f:ae:ac:8a:3e:70:27:ad:
e0:cc:ca:3b:44:1d:b7:0b:be:8d:1a:2b:a0:39:af:4b:13:68:
69:82:c1:44:22:88:23:9b:a0:58:4b:9c:5c:9d:72:2d:11:d9:
6d:2a:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:47:44 2026 by rpki-client