Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
File: IXQgn8IZLnORZveuTf_D1MmCNUk.mft (raw, json)
Hash identifier: Wkstjbl4a9qaSXPmVzuD9gVCtbttCK9UR5CErtdSjuI=
Subject key identifier: 70:D9:B4:B8:C5:29:25:6B:6B:9B:81:D8:5B:66:A5:B9:80:75:30:3A
Authority key identifier: 21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
Certificate issuer: /CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Certificate serial: 01A176272AFCEFB1A1DE93938F6EDBE19D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:00:40 +0000
Manifest this update: Mon 26 Oct 2026 03:00:40 +0000
Manifest next update: Tue 27 Oct 2026 03:00:40 +0000
Files and hashes: 1: IXQgn8IZLnORZveuTf_D1MmCNUk.crl (hash: PBwJpjv9vvrA1ZxUzb63zmfyOIx/1X/Sj1/9hyUQaaU=)
2: VAcK6NMH8xpL2oToeLqPNjo0NLo.roa (hash: zpMhbSc5hEPY0bWxxVazj4TyRRANMBWAian/WhduIMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:2a:fc:ef:b1:a1:de:93:93:8f:6e:db:e1:9d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Validity
Not Before: Oct 26 03:00:40 2026 GMT
Not After : Oct 27 03:00:40 2026 GMT
Subject: CN=70d9b4b8c529256b6b9b81d85b66a5b98075303a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:8f:55:eb:f7:9c:74:fa:cf:a6:28:3f:26:
4b:5d:f7:ea:2e:44:6b:db:2f:0f:c1:2f:dc:ad:67:
3f:a2:00:87:cb:17:f5:25:38:b6:6e:ef:f5:fe:29:
cc:5c:81:1b:17:71:47:4d:d7:00:a5:93:ec:e8:de:
e7:43:74:c8:c1:37:c4:e4:d8:b2:fb:f6:27:e5:f1:
8a:98:f8:6e:b1:ce:02:55:fa:7e:67:b3:56:10:3f:
97:dc:05:fa:ec:f2:2e:3e:27:fa:f4:b1:52:53:75:
e7:81:8c:b8:07:25:e1:92:6b:32:57:90:55:f2:49:
83:07:71:98:1e:82:83:a8:5a:31:8a:d1:46:46:37:
ed:03:a4:9c:d6:e4:6c:fc:1d:48:98:7c:50:fb:1c:
79:d0:9a:5f:fb:43:fc:f4:10:d4:05:cc:f8:70:d5:
40:9d:94:94:34:29:59:a8:f8:80:9b:aa:c4:45:d3:
78:11:0c:86:e0:13:e6:a3:df:4c:30:8c:c0:f7:80:
a9:76:bc:7d:7e:13:71:2f:9f:a6:5e:3b:2e:31:c9:
bf:ea:6d:8d:74:4e:63:2c:fa:b9:6b:21:64:4f:ae:
eb:5f:1e:3f:8d:7b:85:f8:a8:40:8e:24:28:8a:c4:
21:5e:f7:62:06:9e:5b:93:6a:21:47:16:39:1b:0f:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:B4:B8:C5:29:25:6B:6B:9B:81:D8:5B:66:A5:B9:80:75:30:3A
X509v3 Authority Key Identifier:
keyid:21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0e:ce:72:0f:4e:0a:e9:6f:58:78:e5:5f:6c:e2:06:c9:ca:
14:c6:c1:05:4a:a4:21:70:b7:d5:bb:1f:b7:84:15:6c:49:9a:
14:ee:0c:6f:58:7e:d0:99:64:6d:dc:8e:23:61:83:3c:82:08:
96:9e:2c:eb:b0:4e:82:63:1f:b1:a9:bb:db:f2:8d:5e:6b:cd:
48:68:65:22:ed:49:1a:d5:1e:86:3d:62:28:1b:71:39:04:e8:
68:ac:1c:f8:9c:63:be:86:ae:cb:8c:45:c5:de:15:08:7e:7e:
06:c6:3f:2e:5b:c0:f0:e1:e2:2a:96:bc:10:47:a2:43:6f:07:
ab:19:13:f1:c5:e0:8b:a4:40:79:a6:3b:e2:25:5f:3b:dd:58:
ee:ab:6c:46:ab:7d:b4:35:e9:07:4f:50:6d:5a:35:c3:b5:c6:
a8:ce:e9:21:39:32:c1:f8:3c:79:b9:f8:73:d7:28:ca:57:6f:
d7:28:47:95:7f:3a:25:25:ea:69:81:2c:eb:1f:89:6c:7c:d0:
a0:d0:4d:71:42:88:ba:30:96:b3:4b:c5:b9:e2:fc:04:34:c8:
64:d4:2c:0d:ec:da:9a:52:b2:7f:6a:26:63:38:51:cb:34:d3:
34:63:1a:dc:ff:c6:a4:4b:b5:63:40:3a:29:0e:5c:a7:62:59:
02:2a:3b:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2Jyr877Gh3pOTj27b4Z1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNzQyMDlmYzIxOTJlNzM5MTY2ZjdhZTRkZmZjM2Q0Yzk4
MjM1NDkwHhcNMjYxMDI2MDMwMDQwWhcNMjYxMDI3MDMwMDQwWjAzMTEwLwYDVQQD
Eyg3MGQ5YjRiOGM1MjkyNTZiNmI5YjgxZDg1YjY2YTViOTgwNzUzMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xKPVev3nHT6z6YoPyZLXffqLkRr
2y8PwS/crWc/ogCHyxf1JTi2bu/1/inMXIEbF3FHTdcApZPs6N7nQ3TIwTfE5Niy
+/Yn5fGKmPhusc4CVfp+Z7NWED+X3AX67PIuPif69LFSU3XngYy4ByXhkmsyV5BV
8kmDB3GYHoKDqFoxitFGRjftA6Sc1uRs/B1ImHxQ+xx50Jpf+0P89BDUBcz4cNVA
nZSUNClZqPiAm6rERdN4EQyG4BPmo99MMIzA94Cpdrx9fhNxL5+mXjsuMcm/6m2N
dE5jLPq5ayFkT67rXx4/jXuF+KhAjiQoisQhXvdiBp5bk2ohRxY5Gw+QQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDZtLjFKSVra5uB2FtmpbmAdTA6MB8GA1UdIwQY
MBaAFCF0IJ/CGS5zkWb3rk3/w9TJgjVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGIt
MjBlNTljZjkyNjg2LzEvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGItMjBlNTljZjkyNjg2
LzEvSVhRZ244SVpMbk9SWnZldVRmX0QxTW1DTlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARw7Ocg9O
CulvWHjlX2ziBsnKFMbBBUqkIXC31bsft4QVbEmaFO4Mb1h+0JlkbdyOI2GDPIII
lp4s67BOgmMfsam72/KNXmvNSGhlIu1JGtUehj1iKBtxOQToaKwc+Jxjvoauy4xF
xd4VCH5+BsY/LlvA8OHiKpa8EEeiQ28HqxkT8cXgi6RAeaY74iVfO91Y7qtsRqt9
tDXpB09QbVo1w7XGqM7pITkywfg8ebn4c9coyldv1yhHlX86JSXqaYEs6x+JbHzQ
oNBNcUKIujCWs0vFueL8BDTIZNQsDezamlKyf2omYzhRyzTTNGMa3P/GpEu1Y0A6
KQ5cp2JZAio7Bw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:27:52 2026 by rpki-client