Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: eCHYoaRhV8O44Q6+FO7n7+n/OmeNd/cpn9whWHDNd5M=
Subject key identifier: 8B:2B:95:1D:2A:EB:44:0F:11:49:DD:12:E3:D4:66:FB:08:D7:B5:92
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 01A1076F2B874E33F7520F68457DDB65ADF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 1729
Signing time: Sun 04 Oct 2026 15:01:28 +0000
Manifest this update: Sun 04 Oct 2026 15:01:28 +0000
Manifest next update: Mon 05 Oct 2026 15:01:28 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: JDeUKy4l+zBdITJqWG/YigimApdf38IODtgq0CEwNdY=)
2: hnmnA26xKXY54jFPUcSN_0PAckk.roa (hash: iZnIOMbwxqj7gdSqvCeT/1vFVrhvoJ0Z39/9nmcH68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:2b:87:4e:33:f7:52:0f:68:45:7d:db:65:ad:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Oct 4 15:01:28 2026 GMT
Not After : Oct 5 15:01:28 2026 GMT
Subject: CN=8b2b951d2aeb440f1149dd12e3d466fb08d7b592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:d4:fd:e6:c9:c0:f7:d2:db:fd:e7:ba:f9:
a0:c0:5c:f4:d9:b1:cc:65:46:fa:22:35:3a:a9:11:
08:cf:7c:a8:df:19:c6:aa:2c:f8:3a:ac:d9:e5:e8:
5b:07:42:85:af:72:da:06:09:87:bb:74:fa:66:a2:
d6:a2:18:2c:69:f6:c2:1d:2a:92:1d:34:37:b8:6b:
40:25:82:5c:e4:c8:66:2c:31:04:3f:c5:99:71:2d:
17:b6:b9:9c:d9:78:1b:f3:03:79:d1:47:c5:e0:bc:
9c:76:c5:b7:51:02:90:8e:e1:49:99:82:43:c7:82:
e3:f6:05:c1:cb:e0:c4:7c:8f:2e:94:43:da:36:e3:
37:57:d6:bc:60:c8:a5:2c:2e:cb:03:b4:a2:09:33:
df:d2:1d:da:05:44:ef:7a:b2:98:6b:b8:2e:7e:78:
24:51:a0:ad:d4:c1:79:df:7e:85:24:fd:a2:36:e4:
56:15:16:11:ca:59:e3:01:4e:df:fc:a6:2d:25:c0:
ee:11:af:ea:fb:57:11:3c:b3:80:b6:6a:04:48:28:
ed:4f:5c:91:25:7e:05:88:ce:c3:df:5c:ae:1d:19:
47:7c:18:e1:84:4b:8a:48:4b:53:a2:a0:12:a3:a9:
17:db:ee:99:1e:da:4e:b6:45:a1:77:ee:fe:61:49:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2B:95:1D:2A:EB:44:0F:11:49:DD:12:E3:D4:66:FB:08:D7:B5:92
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:df:8b:c2:20:2c:0b:4a:03:38:14:a8:cf:61:f1:b7:a3:18:
c4:9a:52:64:6a:ac:6f:4f:c2:9e:c4:36:99:e1:fc:56:12:9a:
0c:5b:33:68:41:71:bc:eb:5a:36:37:68:46:eb:4d:c7:08:0f:
be:c8:f7:ac:98:2d:53:01:45:9a:59:8e:f7:e7:d9:26:92:f8:
9d:ed:90:da:10:8a:b7:4b:4b:e8:97:4f:48:de:9c:ea:5f:c7:
de:86:d4:00:65:4d:19:23:67:b2:17:d5:95:45:cf:ae:8a:9d:
f3:90:d7:13:1e:60:40:7f:3c:a6:ef:bf:ed:98:21:0d:cc:48:
71:16:7a:59:cb:d6:a6:2f:7c:19:39:52:63:df:c1:08:51:50:
8e:34:10:1b:d9:59:29:f3:61:b7:91:61:cf:43:e0:2e:34:25:
ca:1d:5c:81:bd:90:07:63:ae:49:5a:d0:e1:0e:f6:1d:d1:f8:
fe:74:0f:5d:fa:80:59:72:6e:4d:e9:fc:b8:13:51:7e:cf:d1:
f6:59:28:1b:ec:9d:73:38:31:cc:30:81:62:d3:56:0c:34:16:
4a:59:f5:ee:82:55:39:76:c4:da:76:eb:e6:38:af:84:4a:38:
ce:12:5b:98:c0:8f:b0:85:9b:73:8a:11:b6:54:69:b9:2b:36:
d4:7a:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:05 2026 by rpki-client