Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: AX9QjzbfwvM7NkvGMkMX+ZABBNevFyfRy+cxqtR22VA=
Subject key identifier: A3:A2:B0:B3:6F:50:1F:0C:50:22:1C:74:BE:74:6F:2F:5C:E4:7F:10
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 01A18A52C2B223D07C94A4AD90AD2763FE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 183D
Signing time: Fri 30 Oct 2026 01:00:41 +0000
Manifest this update: Fri 30 Oct 2026 01:00:41 +0000
Manifest next update: Sat 31 Oct 2026 01:00:41 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: OhTTNrIuoRRZxgcAUiEZknRTcVI38/YhNK2zWXkaAjQ=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:52:c2:b2:23:d0:7c:94:a4:ad:90:ad:27:63:fe:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Oct 30 01:00:41 2026 GMT
Not After : Oct 31 01:00:41 2026 GMT
Subject: CN=a3a2b0b36f501f0c50221c74be746f2f5ce47f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:7a:bf:72:b4:3d:be:99:0c:57:60:4f:60:
b9:c9:98:5e:46:75:8d:75:69:0e:3c:85:18:c4:8c:
c3:2d:59:7a:84:23:7c:43:89:00:09:67:a3:fa:59:
59:da:2d:55:06:4c:0f:d1:bc:d0:a5:7a:51:be:a8:
16:d2:c7:8e:81:a2:11:dc:09:fb:69:6a:91:e7:e5:
71:59:0a:e8:51:8f:b0:29:62:36:5e:6b:83:20:04:
6a:54:7a:8b:22:24:8d:16:28:03:0f:17:3d:82:9e:
83:d3:e8:dc:d7:66:87:a2:a4:a4:ad:8c:5a:26:25:
e5:1c:66:2f:68:11:20:97:d7:3f:0c:35:a1:d8:7f:
9a:45:49:bb:d4:df:77:60:f7:6b:9a:90:8a:72:1c:
98:19:48:08:fa:6d:62:cb:a4:03:0e:b2:36:d5:79:
e2:ba:0e:77:81:5a:22:93:60:10:96:11:b7:d2:ea:
6f:a3:6e:6d:99:2f:cc:63:84:5a:15:9e:0a:e9:7f:
5e:06:18:ba:41:d5:10:d7:75:7c:43:e0:2d:4b:73:
60:2f:8a:61:11:f4:f5:13:3b:7c:ca:5d:02:93:e3:
17:01:1b:d2:25:40:23:ff:a4:1a:c5:c6:2e:9f:e6:
9e:41:05:40:39:c6:f4:51:9d:a5:23:d1:5d:1f:ee:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A2:B0:B3:6F:50:1F:0C:50:22:1C:74:BE:74:6F:2F:5C:E4:7F:10
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b1:9b:b6:f1:ad:1b:d2:7e:0e:93:32:09:cb:34:68:c0:b0:
7e:7c:c7:12:4a:7d:ce:f7:d7:b1:a0:be:f7:89:a3:37:cf:79:
d0:06:4a:76:7b:5f:ee:05:da:b2:7b:6f:e4:02:f3:d6:fa:88:
86:08:32:e9:83:34:e3:4f:ac:9a:8b:af:a9:cc:19:5f:63:77:
b8:62:28:7c:5c:4e:f9:84:ec:68:01:af:44:c1:65:eb:a8:c7:
b9:6a:1a:38:ae:b5:8d:93:a5:ba:0c:7a:82:c3:e3:67:3a:b8:
9d:c3:d1:76:a8:7c:63:7a:59:5b:55:5f:2a:d3:83:30:42:d5:
32:81:bf:77:62:02:4a:8c:7c:83:d7:51:20:7c:09:1d:01:ef:
a1:fc:4a:e1:1a:8c:eb:22:07:f8:d3:c1:9b:30:f2:81:fd:97:
f4:d0:98:ff:d3:aa:bf:31:30:9c:0d:1e:2a:2f:c1:36:01:28:
10:33:bb:d1:8a:14:bd:e1:8b:32:77:2c:67:bc:d5:95:61:e5:
c5:fd:28:73:93:78:1f:b5:73:15:75:7c:c3:96:c2:77:5c:96:
dc:fb:f0:85:af:87:a0:b2:db:9e:cc:fe:fa:6a:7c:f1:3a:0f:
90:20:d1:dc:f2:b7:87:f7:da:8f:b4:f7:9d:96:f8:70:f4:b2:
bc:91:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:08:34 2026 by rpki-client