Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: gWObdByEZOuIm+020BK+JG+XNmngayGQzQZ2scm1aq0=
Subject key identifier: 3E:4D:56:15:0C:1C:C5:32:E6:C0:C1:90:31:78:21:D2:45:1D:A6:81
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 01A13891D30CC2C73C392DF478BE18E1F9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 1AA6
Signing time: Wed 14 Oct 2026 04:00:43 +0000
Manifest this update: Wed 14 Oct 2026 04:00:43 +0000
Manifest next update: Thu 15 Oct 2026 04:00:43 +0000
Files and hashes: 1: 1-NHEE18msw7q_8UgXeghsH6Ald4.roa (hash: FF/Xn9sNxWe9/r1ReZ8kDWO+yRUG5kzbjIqNIkiEZMA=)
2: 85Ye01P3vYW2SoshWRnHI_PVVes.asa (hash: TACNBPEbUEiMrnvGz9yncx2/1KD78oen4u9nuec4q4U=)
3: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: 6VQrQ94d8M32BdC75DyOYLPSyRjI32X8MFSqKi7i2C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:91:d3:0c:c2:c7:3c:39:2d:f4:78:be:18:e1:f9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Oct 14 04:00:43 2026 GMT
Not After : Oct 15 04:00:43 2026 GMT
Subject: CN=3e4d56150c1cc532e6c0c190317821d2451da681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:71:36:a7:49:59:e5:a7:99:fb:7d:ae:92:
ef:4f:a1:c8:93:9c:16:84:2e:fd:03:dd:62:fa:43:
85:6a:cd:b1:41:27:23:b5:e6:b4:71:57:c7:f5:67:
bd:63:c8:12:e8:3c:c8:9a:af:e2:2c:7a:93:d5:de:
ec:37:e4:60:2e:e0:56:db:96:eb:96:87:63:35:f3:
86:05:c4:e5:47:f9:db:ae:b7:a6:83:87:7c:68:b3:
57:5d:8c:ab:73:43:53:69:74:42:a3:01:8e:31:b1:
4b:0d:6c:20:1a:dd:4a:82:81:fd:f5:31:61:c0:b3:
7c:44:ce:aa:9e:7c:fa:bd:4b:b0:ee:ed:bd:a3:d3:
9b:b1:05:fc:24:61:87:9f:b7:2a:82:13:1a:c8:c1:
14:f0:5c:a5:56:f6:06:fe:06:ee:98:10:f1:64:09:
8f:4d:ff:31:83:e8:62:16:ee:83:ab:51:15:62:28:
4c:bb:64:99:f3:60:be:7d:9c:46:f0:58:f2:da:9d:
bd:06:1d:f6:27:21:7e:cd:14:7f:de:14:d1:0c:68:
32:7f:a5:4d:ad:04:d8:4b:83:c4:e6:c5:ea:59:d8:
1f:6f:ee:50:4d:9a:3e:a4:e1:7b:d8:38:bd:18:9c:
b8:eb:38:cf:77:e5:39:af:8f:5a:37:56:d7:1b:6a:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4D:56:15:0C:1C:C5:32:E6:C0:C1:90:31:78:21:D2:45:1D:A6:81
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8f:4e:63:b7:92:17:86:5a:23:2a:6f:de:f2:37:bb:9e:d2:
1d:bb:f9:2c:7f:2c:35:41:40:aa:0f:97:27:f8:01:c2:8e:3a:
72:14:f5:b8:21:74:6c:7f:ae:77:c7:6b:da:ff:22:3e:69:b0:
3f:86:f3:5e:54:eb:71:9d:fb:22:20:09:ad:b5:fc:cf:e0:b8:
06:7e:0e:8e:2c:4f:4c:de:d9:2a:41:6f:78:8f:b1:ae:4a:75:
19:9b:03:00:4e:f0:2b:56:98:d6:c3:7b:89:70:9b:d7:3e:26:
6c:ed:c4:54:64:4c:f3:7d:3b:61:78:b4:66:19:f6:2e:9e:30:
26:82:ac:24:3e:9a:ab:ad:ac:e1:96:4c:f3:9f:95:4a:24:ce:
62:4f:1a:c3:66:b0:0b:d7:cb:9b:17:83:ba:37:25:27:19:b9:
65:1e:3d:b5:8a:5a:a8:a5:9b:80:72:01:6a:80:89:70:85:c1:
4c:13:e8:be:39:4f:28:47:83:2a:35:5e:8c:7a:74:d6:07:78:
81:42:4a:dc:a0:f3:e7:02:e4:6a:25:c2:54:4d:7d:f1:f3:04:
43:16:b5:a5:72:af:bc:60:a0:25:46:c6:28:e7:54:13:61:88:
7f:15:6a:79:77:7b:90:d2:23:96:c3:39:51:4d:84:72:89:fa:
f0:b3:18:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:22:09 2026 by rpki-client