Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: nvqVKrZjhr8drGFOFA66Dtr+Ifx4931LsSFh2XFO6Mk=
Subject key identifier: A5:D4:C6:27:88:D1:E8:2F:F6:A8:9C:92:98:97:3D:FB:FC:01:3C:82
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01A10436D0CF981B3E0F0F286E5C753A8B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 1AE5
Signing time: Sun 04 Oct 2026 00:01:03 +0000
Manifest this update: Sun 04 Oct 2026 00:01:03 +0000
Manifest next update: Mon 05 Oct 2026 00:01:03 +0000
Files and hashes: 1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
3: EDn6jQwDUb3_g3td9FsRuFag4vc.roa (hash: odWjY9IlQTpSIG4MhA9Jlqnd2G5ltLMnoOP98UOiafU=)
4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: tGAsqt5CPO4c9+YR3KhrOmLAc2oK9Ewni7vJ78Djotg=)
5: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (hash: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=)
6: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
8: xOkTZSLsa771caq28USEEIkXpes.roa (hash: NwIcfsi68DSP9V21cWD03wWREzD0An2kgwljZOmrIf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:36:d0:cf:98:1b:3e:0f:0f:28:6e:5c:75:3a:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Oct 4 00:01:03 2026 GMT
Not After : Oct 5 00:01:03 2026 GMT
Subject: CN=a5d4c62788d1e82ff6a89c9298973dfbfc013c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:dc:15:34:14:5c:eb:e3:4a:74:44:48:84:
55:75:7c:36:8c:c8:52:ca:20:f6:98:ae:e8:99:12:
06:13:12:cb:d5:40:51:5a:c8:f5:fa:cb:2e:1f:81:
4c:ab:2a:b7:77:b1:5a:c1:b2:80:76:ca:f5:b0:ec:
7c:17:c3:15:8c:41:79:18:db:9c:d6:4a:bd:55:6d:
97:72:36:06:f6:3f:53:60:00:cb:43:e2:28:84:1a:
54:dc:c2:c6:fb:46:8e:76:30:aa:a1:a4:cd:04:4b:
5c:4f:df:8c:58:65:1f:ae:73:0b:6a:f9:66:1a:e8:
1b:20:59:e0:d3:b1:21:64:62:c4:72:62:f8:31:29:
0d:b3:e8:4e:fa:c2:2e:aa:d0:4e:c8:b9:7b:68:a8:
17:b6:26:91:c4:33:81:0c:a6:b9:b4:7b:d6:3e:04:
c4:7f:23:1b:d6:4a:01:4f:42:f4:c5:2c:06:7b:48:
3b:7d:2d:c0:e9:72:b0:f7:50:e2:6f:b2:e5:10:86:
6f:8f:8c:77:03:0d:db:14:40:17:1e:a7:ab:8a:09:
95:09:c3:dc:f3:07:d2:a1:31:4d:02:0d:07:21:50:
b2:7c:8b:39:ec:14:83:c5:8d:f2:61:bc:cf:67:16:
e1:fd:ae:ee:b5:5b:90:3b:c5:af:80:fd:58:47:2d:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:C6:27:88:D1:E8:2F:F6:A8:9C:92:98:97:3D:FB:FC:01:3C:82
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f2:cb:99:61:06:6f:6a:5f:d1:a9:d4:e3:a2:10:bc:a7:33:
9b:ae:b8:a0:cf:79:45:64:4c:aa:e0:35:8a:8c:e7:95:1c:f1:
74:e5:da:cf:24:84:4d:b2:5c:a5:c5:f0:96:c7:ec:f1:f2:59:
a2:52:1c:e1:c8:d7:86:cd:73:86:64:3a:21:c7:1e:74:2d:be:
70:3d:9a:5b:0e:2e:61:86:3a:d7:24:22:d0:43:cb:8e:6f:04:
12:ca:db:79:1a:40:6b:d1:bf:01:c0:42:43:4e:8d:0d:dc:e1:
11:9e:7d:15:10:dd:11:98:9d:66:1d:67:d0:a5:7c:53:5b:a8:
15:3f:ec:1f:4e:5d:2c:ac:ee:f3:ab:d1:dc:d0:ee:e7:5b:15:
7a:d5:31:b3:b2:67:6c:4b:4a:0a:b7:40:0e:06:65:6c:b3:73:
df:f0:85:c2:0f:f0:2d:e2:97:8c:e3:fd:e7:fd:52:c1:c4:36:
c7:5b:d6:61:03:f3:e4:93:d0:33:d0:b1:9e:f2:7a:07:13:04:
7f:99:9c:5a:44:e1:53:f6:66:da:7e:2f:9e:8a:0a:19:64:6a:
05:f7:82:74:ac:d9:de:28:f8:40:76:9c:d1:e1:91:df:2b:c4:
69:45:2d:6d:b8:ca:1d:7b:96:22:d1:8b:78:0c:08:99:3d:4c:
38:ff:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:02:31 2026 by rpki-client