Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File: iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier: zh3Rn7I9nd/nfKVYWMBIoA8Qkt1oH9zO3L+PbRXYLyM=
Subject key identifier: E9:B1:73:AE:65:33:6F:C7:99:93:A1:DD:07:76:52:C2:51:99:41:7C
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 01A0C6D7CA21323A2B24C5A6BDBB5743C7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number: 018C
Signing time: Tue 22 Sep 2026 02:00:25 +0000
Manifest this update: Tue 22 Sep 2026 02:00:25 +0000
Manifest next update: Wed 23 Sep 2026 02:00:25 +0000
Files and hashes: 1: 1-HnWZOSfYzfMpkdHQKgKNZ13rPI.roa (hash: PKBAPXzgnWazEIllaNoOetp38i7rE9un2IC2xSXTZlQ=)
2: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (hash: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=)
3: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: bPAbwnVCwVX56ODXi+jqTBIjcXGt/ruZFAga2nHnq74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:ca:21:32:3a:2b:24:c5:a6:bd:bb:57:43:c7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Sep 22 02:00:25 2026 GMT
Not After : Sep 23 02:00:25 2026 GMT
Subject: CN=e9b173ae65336fc79993a1dd077652c25199417c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:47:64:6e:52:c3:84:a6:7a:3f:2f:bc:16:
9d:27:63:0f:73:df:4b:28:78:10:d3:63:b0:18:7e:
01:09:d2:d7:32:22:55:2d:00:05:2f:a3:40:9a:6d:
32:0e:99:9b:e6:10:64:1f:d9:d3:52:a3:e1:5e:50:
b2:65:b9:1b:98:c7:cf:3d:d7:c8:cf:56:47:c8:b6:
ad:8e:35:65:f0:50:4b:fa:52:12:83:32:22:6e:0e:
b5:3a:2d:0e:6a:c8:0b:35:31:94:50:06:40:3c:69:
c5:47:90:6b:4b:f4:eb:fa:6d:32:bc:7d:91:4d:79:
ea:03:49:68:04:89:11:68:e3:be:4e:86:00:6b:a7:
e8:d2:dd:db:47:1c:32:c1:ff:c2:59:6d:dc:6d:78:
77:15:ab:16:12:d1:21:81:45:bf:58:78:36:86:0d:
ce:51:9a:06:91:dc:0c:2e:cc:60:6c:d9:24:6f:c6:
7f:42:58:0e:a8:4a:21:27:09:21:af:7a:e5:c7:eb:
ed:ac:d2:9b:d0:51:79:71:c1:fe:8d:2a:ca:8d:d8:
07:74:08:34:52:e1:7d:cd:8f:0e:64:bf:12:41:fd:
35:a5:c9:25:d6:5e:f6:a7:e6:ea:e2:38:95:19:2b:
70:86:99:0b:74:22:e1:6a:00:8c:0b:ff:6e:3e:5c:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:73:AE:65:33:6F:C7:99:93:A1:DD:07:76:52:C2:51:99:41:7C
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:ed:3a:52:76:d3:53:81:f7:8c:36:2c:ee:78:24:98:55:
9a:e4:55:78:36:92:c8:10:9c:d0:d8:30:b8:4b:f5:c3:77:84:
85:35:13:27:7c:e8:e2:3a:fa:7c:78:2c:2a:42:d1:ae:69:29:
b3:69:c7:15:72:46:a4:72:99:82:58:24:47:ff:f5:e6:3d:17:
f6:e6:bd:3e:7a:fe:47:07:9c:36:7c:78:00:7e:71:bc:0c:d1:
83:2b:6f:64:84:3d:a8:e9:96:b6:29:53:c5:f5:b7:96:19:47:
77:60:99:eb:28:5b:5a:b9:bb:cf:51:ff:b5:67:62:08:20:4d:
e0:ce:f8:25:e8:39:d0:77:14:64:e3:26:b9:e3:46:93:87:82:
88:81:7b:b7:7e:88:55:d9:d5:be:7e:02:f2:02:e1:8a:0a:0c:
30:ad:06:ac:c8:17:47:ab:bf:e6:51:f0:ec:b4:e6:1d:84:a1:
5d:82:8f:ca:3b:32:3c:ac:29:ee:6a:6d:4e:12:9d:2e:31:ee:
1a:2e:25:06:cc:61:1a:4d:64:87:18:2a:9e:46:b6:e4:c3:fb:
71:18:38:22:d0:87:30:2c:dd:5c:7f:30:d4:e5:01:a6:f1:ee:
4b:03:ba:9f:c0:de:fd:75:38:76:83:da:95:e2:8a:74:0c:f7:
f7:22:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:12 2026 by rpki-client