Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
File: IXQgn8IZLnORZveuTf_D1MmCNUk.mft (raw, json)
Hash identifier: tc0UnsDfR2uUd87B0sXyCoNvqmLHYL4VyPMzblJpJ+o=
Subject key identifier: ED:55:A5:0C:FB:A9:23:AC:08:56:74:F8:F9:25:03:0F:04:22:47:02
Authority key identifier: 21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
Certificate issuer: /CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Certificate serial: 01A17439489927B0F7B52C92EF3B51F2B05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:01:13 +0000
Manifest this update: Sun 25 Oct 2026 18:01:13 +0000
Manifest next update: Mon 26 Oct 2026 18:01:13 +0000
Files and hashes: 1: IXQgn8IZLnORZveuTf_D1MmCNUk.crl (hash: faxmcBAXOHyxCkUKr18yXVovYvGv4hFeR1dVaOUxbp4=)
2: VAcK6NMH8xpL2oToeLqPNjo0NLo.roa (hash: zpMhbSc5hEPY0bWxxVazj4TyRRANMBWAian/WhduIMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:48:99:27:b0:f7:b5:2c:92:ef:3b:51:f2:b0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Validity
Not Before: Oct 25 18:01:13 2026 GMT
Not After : Oct 26 18:01:13 2026 GMT
Subject: CN=ed55a50cfba923ac085674f8f925030f04224702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:d6:0f:8f:ef:69:92:d8:13:b3:15:f1:04:
35:64:e4:39:dc:03:d7:c6:c5:fb:db:70:d5:ee:ae:
87:e6:c5:46:cd:74:cd:aa:c3:09:e2:eb:02:3d:1e:
43:7b:d9:ff:91:c1:1e:32:e8:3b:f0:4f:2f:a0:be:
48:7b:f2:14:1f:66:c1:a6:11:35:50:cf:39:17:67:
ab:d9:16:5b:95:b7:49:a0:fa:a3:15:4f:7e:98:7f:
a4:98:da:5a:a7:0e:88:8c:4a:41:8c:62:d2:82:44:
47:3c:84:a9:2d:f6:74:10:9a:ed:f1:51:50:ba:ee:
66:03:91:df:bd:20:6d:7a:67:dd:02:2b:b4:ea:17:
45:bf:be:64:8c:7f:22:6a:fe:19:d2:96:9c:36:c9:
af:c2:f6:f7:98:7f:6b:df:58:75:e2:cd:59:80:b6:
b9:a5:b7:e1:29:09:4f:54:5d:11:13:86:07:19:89:
0c:8e:87:1c:e3:fd:6c:2c:90:93:4e:45:11:e1:6f:
39:d1:f9:7a:11:c4:7b:dc:17:c1:9f:54:cc:aa:87:
c0:23:fb:49:6d:d5:2b:4b:e1:d8:a6:bf:13:04:8b:
66:6f:8c:74:76:08:77:b7:35:f5:d7:bb:d4:74:b7:
51:0e:7f:66:be:55:b8:c9:49:b0:31:90:36:55:c3:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:A5:0C:FB:A9:23:AC:08:56:74:F8:F9:25:03:0F:04:22:47:02
X509v3 Authority Key Identifier:
keyid:21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:88:05:af:a2:8e:5a:f4:7e:d3:f2:59:ff:8e:9d:2f:f1:8b:
dd:8d:5e:4c:b8:8f:e7:c1:40:80:71:06:db:34:c7:55:81:d9:
68:dc:62:3e:68:92:2c:87:64:e6:2a:c0:b7:02:30:44:9f:d8:
14:bf:43:96:a8:d2:b0:f2:7f:69:25:b2:a2:fa:dc:36:27:42:
2c:b0:f3:dc:87:d8:d4:98:d3:37:b5:4c:b7:dd:56:84:cc:5c:
46:c8:a2:db:38:50:b3:aa:a1:2e:dc:fa:1c:c4:9c:6d:5a:e9:
17:68:42:53:13:1d:47:91:7c:d4:d2:cb:f8:e2:0a:a3:f2:d3:
7d:59:14:88:09:70:91:6b:56:d2:85:0e:27:e8:0f:23:41:53:
a2:13:74:4b:e4:dc:fd:71:e7:b0:24:df:db:60:65:54:7c:51:
26:a0:59:b2:69:a4:45:00:f0:bc:99:32:19:49:03:4c:ee:ff:
c7:89:94:a6:78:b7:31:12:1c:22:24:9c:0f:06:c2:6e:5c:01:
42:1f:e5:3f:cd:af:9a:7d:9f:60:d1:bc:ad:ba:a4:35:5a:5e:
77:8e:57:38:0c:a2:92:bc:47:10:45:5e:f2:07:05:f6:a0:d3:
46:3b:38:48:f9:25:f5:e9:f7:87:8c:94:ec:87:7e:c4:61:80:
a3:1b:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:21:59 2026 by rpki-client