Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: Ukosr69yyDGlMeaLept4LA/g1iPAkuVGODCPBkndiQA=
Subject key identifier: F6:C7:23:B8:42:9F:EC:05:DC:E3:52:C3:CF:4C:3E:EA:4F:A6:40:AF
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 01A0ED7895E5B5812EA5B3B77FEF9C732208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 19D4
Signing time: Tue 29 Sep 2026 14:01:37 +0000
Manifest this update: Tue 29 Sep 2026 14:01:37 +0000
Manifest next update: Wed 30 Sep 2026 14:01:37 +0000
Files and hashes: 1: OEVAvwrSHNV-uvr55oxdFx7xxxQ.roa (hash: tRxB0SccSN5sh50OIxV7iRImD06pzo5OWnyES6cYcyc=)
2: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
3: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: hgFkvIGNgoTUlc7zN913R5pW0cKW7V1dS9rqHpF0uZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:95:e5:b5:81:2e:a5:b3:b7:7f:ef:9c:73:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Sep 29 14:01:37 2026 GMT
Not After : Sep 30 14:01:37 2026 GMT
Subject: CN=f6c723b8429fec05dce352c3cf4c3eea4fa640af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:00:53:a3:4c:86:b9:6d:80:ea:9f:b1:d0:
7d:8a:02:4f:e1:b2:e2:a4:9f:3e:16:fb:a8:b7:f6:
cf:88:eb:56:2f:d3:4a:50:16:81:c8:29:3d:7c:00:
eb:9a:21:3c:3b:75:7e:2d:78:c9:5c:2b:69:99:f1:
db:60:55:6b:c0:6a:39:8b:b5:e9:53:fd:e4:b0:e0:
16:36:bf:41:0a:f2:be:9f:ab:16:f3:bc:61:d6:85:
e9:5e:4d:bb:bd:8c:13:10:3e:76:fe:57:5c:3b:37:
cd:2c:4b:2f:00:2a:9e:55:b9:b7:89:7c:4a:94:a2:
80:00:cd:f6:45:c7:ef:82:9a:63:3a:40:8c:2b:62:
1b:8a:ed:cc:cf:f5:6b:82:24:69:89:c3:4f:f0:da:
2c:35:73:a0:da:dc:79:ea:b4:ea:66:45:bc:34:75:
7d:ee:a3:fb:6f:6d:9e:18:21:9a:2e:3b:9a:8b:95:
63:e6:cb:d1:43:29:f9:ea:ec:76:bc:74:fa:ec:7f:
49:f0:d9:42:ca:de:79:a5:cd:b6:cd:c6:36:ca:c8:
7d:8e:64:c4:e1:bd:74:37:c4:e9:05:9c:77:f2:ed:
24:b8:36:8b:f5:22:7b:02:25:df:e4:55:44:3f:4d:
12:a1:ec:83:b9:a9:35:19:7b:59:bc:1f:d7:60:60:
7f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C7:23:B8:42:9F:EC:05:DC:E3:52:C3:CF:4C:3E:EA:4F:A6:40:AF
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c0:83:11:bb:a9:8b:f1:77:96:ae:95:d8:43:a8:5e:da:43:
06:a8:01:30:e6:79:f7:30:6f:be:68:63:4f:ed:84:0a:51:2d:
db:d4:3c:83:fc:3b:ac:e7:41:ae:a9:04:0c:62:1f:11:f7:2a:
02:d1:99:23:c8:e8:bb:cf:77:2c:2f:0d:23:e2:f8:b9:97:ae:
9b:a1:72:dd:d3:f7:16:7a:98:1a:de:2a:49:7f:9d:a2:c2:4e:
37:8c:ee:e1:ce:2f:9c:c5:4b:26:9c:03:4c:d6:4c:14:fe:c4:
2d:88:5f:29:e1:df:ac:9e:df:bc:e8:d3:c4:f6:f5:3f:b7:53:
96:1d:73:5c:08:5f:bb:35:64:aa:dc:e1:41:f7:46:ce:18:48:
89:d1:9a:d3:5d:75:88:40:22:e7:f5:13:4f:8d:57:b8:33:f5:
8d:a6:b2:8d:30:0b:fe:29:d1:a6:2e:db:d0:e1:ca:7c:f4:a2:
dc:b9:90:35:ee:83:d7:e7:44:a9:fc:f3:79:7c:fe:28:37:26:
b9:0c:3a:e0:6a:db:59:04:3d:e2:be:6a:6e:0d:15:20:3d:73:
9e:df:8b:2b:64:21:17:c9:eb:2d:59:6a:20:0c:3b:2b:f1:68:
8b:4b:55:f5:5f:03:db:09:23:17:74:52:f9:dc:5e:e5:49:10:
01:9f:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:08:18 2026 by rpki-client