Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: qS5EfJOBsRN4uIq3obihJk5iAyIpm+r65+KPD+OcyCk=
Subject key identifier: 15:F0:C4:A9:77:C0:B4:DE:CE:2F:70:5E:BE:36:F3:9F:15:10:64:2F
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 01A0CB226106095FAA2469BCF95C6B8C57B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 22:00:22 +0000
Manifest this update: Tue 22 Sep 2026 22:00:22 +0000
Manifest next update: Wed 23 Sep 2026 22:00:22 +0000
Files and hashes: 1: FzaSctWTm436xTaHu7cLIoR3zuI.roa (hash: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: f7e7FSJ7ETVjU1SHMq4QI5WFHuYb/wNdGBDBipsLBMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:61:06:09:5f:aa:24:69:bc:f9:5c:6b:8c:57:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Sep 22 22:00:22 2026 GMT
Not After : Sep 23 22:00:22 2026 GMT
Subject: CN=15f0c4a977c0b4dece2f705ebe36f39f1510642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:11:37:fe:8e:76:b2:94:f7:48:c7:5d:d8:
f6:4b:08:31:3b:80:10:92:71:8c:26:f5:06:aa:dc:
b4:14:0b:c9:b6:a6:fb:79:28:79:97:b8:ee:f1:da:
86:ea:d3:5a:2a:16:27:34:3e:aa:1f:09:d0:0a:92:
a8:14:ab:90:13:21:d3:0d:ea:93:26:9f:0b:9d:f2:
5a:1c:f1:85:d0:37:b7:56:ac:ca:07:fa:d6:a1:4e:
79:dd:a3:36:61:7c:73:dd:52:24:0e:0c:c4:49:06:
07:63:8a:39:c7:6f:e3:5e:49:cf:0a:c9:2a:90:d3:
a7:c5:d1:a2:d3:54:c8:8d:aa:d8:d1:12:ec:1e:de:
21:ee:57:b3:c9:b0:20:79:d8:fe:d4:32:b0:e8:75:
e5:d6:07:a3:f7:f0:d3:aa:b3:a4:2c:cf:ca:00:86:
d5:ed:5e:62:28:55:17:93:c1:8b:f9:6b:05:6a:c9:
57:cf:57:a2:71:8d:31:b1:21:a9:e5:19:e9:87:f3:
ae:ae:d1:91:7a:87:d5:32:68:b2:86:6b:fb:96:f5:
ee:f4:bb:df:87:ce:3e:95:a1:e9:76:18:d8:c9:63:
cf:f5:e7:94:6c:56:7c:8a:44:3b:35:cc:d2:ca:e4:
d8:42:e6:48:ad:5a:98:bb:9b:49:f7:43:5b:7a:97:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F0:C4:A9:77:C0:B4:DE:CE:2F:70:5E:BE:36:F3:9F:15:10:64:2F
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:69:f3:0b:cd:0f:a9:df:cb:48:01:87:86:16:58:0e:8e:8d:
43:ee:11:c4:59:75:96:0e:88:24:e2:4d:29:4d:10:e0:7b:42:
0c:07:61:0c:64:d9:77:0e:2e:81:04:ed:da:0a:1c:34:24:eb:
4c:59:31:35:f6:88:71:e6:00:a9:f0:6f:9f:8d:24:ba:92:45:
26:2d:84:d7:6d:23:f3:21:2b:6e:6b:be:02:5d:a7:42:8c:bb:
31:fa:fe:da:77:7e:eb:7f:12:42:9c:ef:a0:e2:23:28:af:ee:
2c:7c:9c:09:27:de:70:58:85:3a:18:44:d6:ed:6b:ef:4c:a9:
8e:6d:03:85:9d:cc:d5:6e:fb:74:8a:b5:12:55:73:7e:7b:00:
05:2a:bf:ef:8f:91:cc:a3:7e:d6:10:7b:2a:e2:f9:49:fb:f7:
9f:7b:04:f2:87:87:10:97:3a:04:0a:63:71:7d:fd:1c:f4:e2:
40:4f:c6:6f:ea:a1:6c:1b:55:7a:5a:1b:f8:7e:96:be:1d:72:
ab:fa:46:cc:99:01:a3:22:35:1b:6e:fb:6e:e5:5f:f8:a3:d0:
d9:9a:9f:c8:39:c9:7e:5b:11:78:49:57:fd:a9:04:4f:37:4f:
6c:b1:9f:4d:8d:07:86:7b:83:99:e2:0a:59:6c:9b:08:27:fa:
21:45:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:30:31 2026 by rpki-client