Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: Yo9qzxjk4zpCZ/wa37ihj6xNXFH2n04949NWRKUhJO8=
Subject key identifier: 91:99:29:4C:14:F8:6B:0E:C4:88:25:0B:59:D4:ED:59:99:63:96:FD
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 01A0BE79AC1C7AC0E46B7F5B6267D7E5652A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 1202
Signing time: Sun 20 Sep 2026 11:00:39 +0000
Manifest this update: Sun 20 Sep 2026 11:00:39 +0000
Manifest next update: Mon 21 Sep 2026 11:00:39 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: 0iT0q+tP1sWAvX5NN7Ttm/mbiKDcABLfidHd+hj731M=)
3: v6M5ib-nqVd93in2ll5RNT1MfYM.asa (hash: qr60aoODIC+z5g67bZbeuAziczqZFFdUc4K7PrAUEj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:ac:1c:7a:c0:e4:6b:7f:5b:62:67:d7:e5:65:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Sep 20 11:00:39 2026 GMT
Not After : Sep 21 11:00:39 2026 GMT
Subject: CN=9199294c14f86b0ec488250b59d4ed59996396fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:12:cb:f6:2e:10:3e:49:37:7b:b5:32:2f:
05:55:f1:58:d0:0d:60:50:9a:1d:13:5c:c1:59:7d:
3e:9f:fa:e1:d9:bb:12:11:7f:6f:bb:37:66:95:32:
a3:b7:4b:17:27:ea:6f:8e:1f:d0:ca:03:44:db:26:
69:19:04:64:11:3f:3b:e6:77:ca:f9:a0:c0:3c:a3:
37:6c:c0:a3:76:22:16:c7:40:a1:98:25:7a:4d:bb:
5f:f8:fe:b1:ef:32:09:73:8d:3a:23:b3:2c:90:94:
2a:eb:cd:21:9f:c2:9e:67:ab:f5:d2:c4:30:73:d1:
78:87:ab:f5:d7:ca:f9:8f:32:3d:e5:01:86:c3:3d:
15:c5:c7:a4:ad:17:b5:c4:2f:dc:4e:03:32:23:3e:
39:29:2c:87:8d:46:61:d4:57:d8:78:e9:9a:10:e4:
67:8f:fe:a8:a4:a8:3a:35:fd:d1:85:e9:18:39:8e:
a6:c7:29:83:64:91:af:2e:fd:8c:c2:ef:1a:b8:80:
66:fb:ad:e6:38:2c:e4:d7:d3:58:27:96:5a:23:d9:
01:49:70:4e:d1:2a:28:0e:83:dd:03:b2:1d:5b:65:
0e:f1:a7:eb:1f:37:31:0e:70:17:f7:55:ad:7b:68:
b0:a7:f6:56:a9:e7:70:2e:2f:78:e6:68:4e:a2:84:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:99:29:4C:14:F8:6B:0E:C4:88:25:0B:59:D4:ED:59:99:63:96:FD
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3a:3c:da:ed:bc:9f:76:e5:6d:bc:94:ad:12:f3:8f:70:f1:
5c:af:9d:2a:80:75:05:68:be:25:7c:96:d9:46:78:b1:76:7a:
3d:e3:b1:98:59:c8:f4:05:9e:6f:81:4c:4f:d7:a1:75:87:71:
db:2a:49:c7:7c:3e:42:34:71:e3:79:12:d3:85:e6:87:df:73:
ce:24:6b:46:bd:49:43:b5:aa:57:1c:b8:37:12:17:71:70:df:
40:08:40:03:5f:17:b5:96:84:3e:ac:40:0f:eb:ee:95:3a:3b:
e8:fa:78:ef:6b:ce:f1:57:4a:fe:70:20:7d:cc:b9:a2:66:38:
6f:55:e2:f3:f7:a9:ba:91:e3:d0:0f:0a:75:71:8e:f1:62:83:
e5:c7:40:5c:55:29:06:1e:11:34:bc:41:ec:f4:b0:ab:a2:c5:
2b:06:1a:76:c8:2c:bc:b5:92:4a:63:6e:c2:02:ca:40:bf:48:
d3:16:48:c0:25:7c:ad:76:01:48:3e:3f:18:1b:63:8d:d6:e1:
5b:17:dd:a5:c8:3d:18:25:e0:8a:e9:4a:12:aa:a1:ad:e8:bc:
9b:fc:09:0c:f4:5e:cb:3b:51:ba:35:b4:e2:44:fa:cf:5d:da:
dd:18:20:93:fd:88:c3:18:8e:cb:44:7d:89:e6:0f:95:80:37:
e0:79:1e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:48 2026 by rpki-client