Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: 0uNGl3kO8yYGhwV0KNDFIRmx0vjzBA8bDZEnq2GRR54=
Subject key identifier: 8F:6C:15:B3:47:1C:22:8A:E4:90:77:ED:01:04:DE:EB:BC:48:E1:94
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 01A0E174E283CF9E86A5BEB72A6747FFFD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 154E
Signing time: Sun 27 Sep 2026 06:02:08 +0000
Manifest this update: Sun 27 Sep 2026 06:02:08 +0000
Manifest next update: Mon 28 Sep 2026 06:02:08 +0000
Files and hashes: 1: 19kTeJepP8HkpIg63hHdZMuI5pU.roa (hash: rYKL3pXSi0W4E3AFcHleDUG0Z3vGSYXA5D+E17BmR8U=)
2: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: HujKXRxZT9gjZlHbDB7HFyruBfZHvEFYw5oQ3PUuUJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:e2:83:cf:9e:86:a5:be:b7:2a:67:47:ff:fd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Sep 27 06:02:08 2026 GMT
Not After : Sep 28 06:02:08 2026 GMT
Subject: CN=8f6c15b3471c228ae49077ed0104deebbc48e194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:a1:21:20:03:96:fd:56:85:3f:56:79:bf:
e4:bc:1a:11:88:9c:0c:d6:e3:a5:5c:86:23:2f:95:
47:76:87:71:d3:72:9c:aa:66:4e:58:d6:a5:fd:da:
ed:a0:b1:7f:2b:45:e0:80:1f:fa:1b:32:83:d9:eb:
80:fd:ce:be:2a:31:f4:15:2b:cc:8c:cb:d7:86:27:
9a:c2:1e:87:d0:a4:d2:96:d8:88:79:bb:d4:8f:84:
3d:ce:b8:01:95:14:e5:d5:9e:d1:84:fc:89:f8:80:
a5:12:64:6e:0e:1c:9f:ff:32:fb:89:bd:0f:2a:c3:
58:0b:dc:31:e1:7c:11:7e:20:d8:f4:02:bd:9a:f8:
c0:10:82:6e:a5:01:c0:17:bc:ee:56:97:c4:12:77:
a1:69:88:4d:1e:4c:2a:68:1c:fb:3d:3e:33:ff:7f:
c8:57:e5:79:83:81:1e:cb:7c:0e:40:ac:ee:5a:98:
bf:78:b3:6e:28:29:8e:3d:a7:50:c6:c3:4e:7c:f5:
6c:cc:27:f7:80:8d:60:59:5a:e7:c4:fc:52:4e:fb:
9e:00:9b:3b:fe:c8:e5:3d:78:f7:ed:3c:90:e3:2a:
50:88:56:e4:26:ac:22:07:d7:a7:af:32:92:58:81:
cf:97:4f:4c:2a:62:ee:c8:57:15:8b:35:c8:0d:e7:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6C:15:B3:47:1C:22:8A:E4:90:77:ED:01:04:DE:EB:BC:48:E1:94
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:19:cd:7f:c3:bd:c1:ee:44:44:f7:dc:97:6a:ab:d9:5b:35:
01:26:84:f7:3b:42:0a:dd:f3:f4:94:0e:27:f9:f0:39:41:a5:
50:b8:c2:27:96:90:4d:17:c8:6a:fe:6c:5f:92:a1:1f:e8:e4:
52:2b:1f:2c:92:d7:d5:14:01:cc:40:9d:7e:e2:97:28:54:a4:
6c:7c:63:10:57:c5:89:f2:68:90:c0:f5:ce:97:02:27:0e:ea:
c2:47:55:62:b6:44:e9:b6:c9:43:88:78:04:7e:8b:51:58:2e:
06:e4:be:06:d8:27:32:b5:98:69:b0:a5:dd:90:f2:56:35:1b:
4b:75:2b:7b:0b:71:cc:6c:48:ac:39:98:36:88:a5:8c:11:c2:
f4:bf:49:00:a3:cd:54:a0:ca:43:d3:58:88:66:4d:26:4b:cf:
88:e9:e8:ce:9f:bc:6a:e6:86:fb:87:71:c7:13:c5:13:e2:b3:
4c:0c:f9:69:7f:e8:fa:4a:69:0e:c1:23:73:63:33:91:30:36:
ef:d1:42:8e:54:b3:71:a2:4a:e1:75:33:f2:10:8e:c5:6d:24:
f8:66:a6:3d:cf:76:16:f5:1b:7d:87:cd:8b:45:0e:29:33:f0:
e2:1c:a7:e6:ec:4b:1c:1c:28:82:96:ad:bd:c0:9a:5b:15:ad:
de:47:0d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:25 2026 by rpki-client