Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: DfYPz2G/mALhki7ERRL5gsgnewSEONnWdvXJa6tRs/8=
Subject key identifier: D6:13:E3:35:85:07:DF:68:C4:59:39:21:75:2C:26:27:7F:17:21:3A
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 01A0C368D1914FDE351CAC88221365D4F225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 10:00:21 +0000
Manifest this update: Mon 21 Sep 2026 10:00:21 +0000
Manifest next update: Tue 22 Sep 2026 10:00:21 +0000
Files and hashes: 1: FzaSctWTm436xTaHu7cLIoR3zuI.roa (hash: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: Oi+e9ocHqzJYLwTKkBRaSVnySCiTypeA0T90huZxLFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:d1:91:4f:de:35:1c:ac:88:22:13:65:d4:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Sep 21 10:00:21 2026 GMT
Not After : Sep 22 10:00:21 2026 GMT
Subject: CN=d613e3358507df68c4593921752c26277f17213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:ec:1a:07:c6:20:74:aa:5a:2a:43:5e:aa:
ae:dd:6d:f7:d0:d3:e9:28:1d:cd:e6:8b:10:a3:8d:
8e:a9:de:4f:c3:5c:ed:5e:32:32:d5:0c:88:a5:b1:
aa:de:1a:03:ee:a4:20:58:aa:bb:f3:3a:a9:79:c6:
28:84:17:00:8b:90:6e:88:a5:e4:27:1c:c7:b3:ca:
76:59:a2:e8:a0:b2:09:2a:42:e0:0b:e2:af:78:51:
a1:5a:5e:5b:1c:46:4d:bc:08:a9:2d:fa:f7:94:7b:
98:48:f5:61:fd:41:45:7f:fa:76:bb:5b:98:7c:d6:
8f:d9:5a:2c:ac:45:82:74:df:31:94:7f:9a:6d:a2:
c0:f8:5d:49:74:21:3b:96:17:e0:46:f4:60:08:58:
ed:c6:e3:8f:da:4e:61:8b:78:88:c7:88:c0:06:f2:
54:87:bf:a0:65:05:8a:5f:6c:8a:5e:e0:c9:12:e0:
43:e1:d9:7e:68:27:8f:a5:6f:fd:f2:14:56:c2:4b:
c7:61:b7:9e:82:50:73:8b:98:30:3b:f8:53:8d:90:
61:6d:ac:86:9f:ac:cc:b1:1e:42:f7:3c:03:a6:eb:
68:3f:63:41:b2:6b:a6:09:d9:97:bd:c0:b5:54:df:
0c:eb:bb:9b:43:b0:0d:25:2b:54:9a:80:78:81:6e:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:13:E3:35:85:07:DF:68:C4:59:39:21:75:2C:26:27:7F:17:21:3A
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2d:cd:25:02:76:52:3a:73:c7:5a:7d:e8:f6:bd:94:b1:52:
5e:f4:fb:3a:2e:2a:3e:99:9f:a9:b6:2c:a5:a5:5c:eb:3d:96:
88:f8:ea:ff:2a:23:db:60:17:cb:63:02:1c:f4:96:91:4d:a2:
9d:a0:94:4a:aa:72:17:6b:13:2f:86:04:78:df:14:ad:44:1d:
6f:bd:42:49:6c:3d:f6:5c:66:52:4d:4d:fb:50:c0:f8:13:11:
b6:e5:e6:12:e1:13:b9:a9:c3:b3:c3:79:13:01:02:77:a2:97:
f5:03:33:b1:6a:74:71:0a:77:4f:8b:b0:cc:0c:fe:aa:90:1e:
33:5b:77:47:f8:34:36:c0:04:e2:b7:17:d4:e0:53:15:45:84:
f4:13:20:4e:1d:cb:3b:3e:ec:e6:20:a3:75:18:33:c3:6f:dc:
ad:9b:4f:8f:fe:50:3b:76:82:48:39:9b:a5:3b:1e:a5:ec:b1:
4f:b0:a7:03:cb:5f:3a:64:bb:95:eb:df:13:e6:9a:c5:83:bc:
7e:9a:e5:bc:26:74:d5:4a:0e:44:ff:25:09:af:1a:cb:e4:ec:
f3:86:49:ab:03:0c:55:7b:59:cc:eb:82:15:80:e5:dd:4f:c2:
eb:a0:43:2c:63:d1:e7:de:bd:7f:97:24:2a:5b:c2:3e:d2:a4:
45:58:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:00:17 2026 by rpki-client