Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: rfpKUGAjwc4yCwMQFK7a72kzQiK11e0HspI6uDad8aM=
Subject key identifier: E6:16:F4:42:8D:25:BA:B1:5A:3E:AD:B9:B6:E1:53:33:27:30:2E:5B
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 01A1AA15193E9335705B36AFBD6986A35DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 127C
Signing time: Thu 05 Nov 2026 05:01:11 +0000
Manifest this update: Thu 05 Nov 2026 05:01:11 +0000
Manifest next update: Fri 06 Nov 2026 05:01:11 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: tzImVXuGNgD4RsF7F9OpvvnXGHDTlMpYuhosc82RNBE=)
3: v6M5ib-nqVd93in2ll5RNT1MfYM.asa (hash: qr60aoODIC+z5g67bZbeuAziczqZFFdUc4K7PrAUEj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:15:19:3e:93:35:70:5b:36:af:bd:69:86:a3:5d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Nov 5 05:01:11 2026 GMT
Not After : Nov 6 05:01:11 2026 GMT
Subject: CN=e616f4428d25bab15a3eadb9b6e1533327302e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:d3:3e:e7:be:cc:e4:a7:d5:dc:6b:83:7f:
1b:62:b2:9f:0e:30:4c:32:6c:eb:f5:35:0f:fe:9d:
7e:67:03:bf:05:1b:91:de:b2:8f:1e:d5:6a:74:9f:
7b:2c:4d:c2:8d:32:ce:da:5e:7a:e2:d5:a1:ec:57:
11:f8:b2:97:5a:dd:5e:97:b2:10:71:1b:93:15:db:
f2:5c:97:72:14:c9:43:b4:4a:bc:0d:5b:ee:11:e5:
cd:98:28:c6:09:ce:09:57:7e:91:b2:79:3b:fb:57:
17:01:a7:5c:87:50:d8:d8:44:49:36:f1:18:28:90:
b9:fd:5f:3c:55:28:a6:02:48:60:70:ae:98:f3:69:
4a:1d:09:12:9e:3d:9a:e8:a3:c5:ae:95:79:e2:64:
5e:89:df:d3:bf:00:c8:ad:2b:71:e6:34:01:a9:5e:
bc:71:e6:90:53:f1:b9:96:1d:5a:9e:30:b2:b9:8d:
6d:0c:bf:45:d7:be:c8:75:ce:2c:52:5e:52:49:06:
02:42:e3:41:1b:fc:a5:be:f1:7e:68:4f:9d:12:2e:
ca:f2:f6:86:1d:39:d3:7c:c9:15:3a:da:db:20:ec:
25:ad:f3:5b:73:05:c6:c2:97:1d:5f:a6:3a:99:8d:
2c:13:52:6d:f2:74:9f:f2:86:e6:3f:0d:29:f0:85:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:16:F4:42:8D:25:BA:B1:5A:3E:AD:B9:B6:E1:53:33:27:30:2E:5B
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fa:3d:e0:7e:13:fd:97:63:ba:b7:a3:6d:c1:3a:5f:06:fe:
1c:24:dc:b2:fe:87:19:61:55:1e:65:cf:89:d5:e1:d0:b1:ea:
04:61:4e:2e:ad:f5:e7:af:e9:6f:76:05:f7:90:57:16:f7:cb:
6d:6d:a1:ca:aa:f7:bf:37:1a:85:7b:05:4e:c9:f7:88:6c:33:
3c:02:23:64:9f:1f:d1:07:3f:24:9f:bb:ca:54:5c:fc:79:2e:
47:e8:c0:0a:20:9e:fc:5d:a4:76:5f:41:cf:5c:e4:5b:6f:10:
08:04:9d:d6:87:a3:89:ac:66:c6:19:f1:ad:fd:fa:68:3a:ad:
66:8c:1c:1b:68:51:f0:59:19:39:ce:39:cb:ac:b4:f5:a3:37:
7a:74:55:f8:2b:22:af:7b:a6:61:be:8d:a7:55:3a:d0:38:36:
64:6b:4f:b8:ab:80:ff:d3:7c:a6:d6:2a:e1:35:3a:9c:98:d7:
51:eb:b7:c8:1a:e3:be:7e:75:14:73:8f:14:ec:7c:22:82:9e:
40:64:0f:78:7d:e1:05:a8:be:03:3e:e3:1c:25:27:6e:89:16:
a2:98:66:db:7f:4b:d9:4d:0b:ae:0a:2b:70:ed:d3:69:6b:47:
47:49:92:ee:22:f0:5c:e4:43:06:c8:d3:19:c6:1b:5c:3a:c4:
1f:d1:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:21:38 2026 by rpki-client