Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: QUgYP012Kl116AfxHkZYKQCJcwY8pYXXqxJ8eM2ldmI=
Subject key identifier: 5E:DA:B3:00:04:CA:17:43:69:91:A8:87:22:45:3B:64:F0:57:3A:24
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 01A124D4728F8B6E90A72986236FC0704F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0F0D
Signing time: Sat 10 Oct 2026 08:01:05 +0000
Manifest this update: Sat 10 Oct 2026 08:01:05 +0000
Manifest next update: Sun 11 Oct 2026 08:01:05 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: qLZ7waApoLS93ZryA78jaqHd270ivKoPKYxT2mWuWpw=)
2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:72:8f:8b:6e:90:a7:29:86:23:6f:c0:70:4f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Oct 10 08:01:05 2026 GMT
Not After : Oct 11 08:01:05 2026 GMT
Subject: CN=5edab30004ca17436991a88722453b64f0573a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:b2:63:49:23:a7:a7:a1:82:9c:63:5d:b5:
ca:e0:f3:0a:18:3f:52:46:36:75:00:00:c9:2b:bc:
c2:1d:26:0e:b4:f3:f4:f3:d4:70:51:4e:47:7f:28:
27:4b:4b:37:98:f9:d6:8b:80:c1:06:26:89:a2:19:
99:3a:cf:74:a1:88:3a:57:18:92:ac:82:1b:f3:c0:
90:62:d9:18:55:11:bf:94:04:38:a8:73:3c:4a:e5:
ae:a6:ed:61:16:2a:92:40:2b:0a:5e:a1:92:ab:21:
e1:f4:6d:e3:7c:df:85:86:49:36:72:b4:5e:1b:b2:
73:e1:e8:26:5e:22:84:23:74:f1:ff:45:5d:94:c3:
c3:6f:cd:25:b2:a3:99:ca:cf:41:d5:19:8e:85:3b:
0c:b2:b5:04:c0:fb:a9:f6:5a:49:d1:1f:48:a2:71:
16:fd:3f:2c:db:70:7d:40:06:d6:eb:b6:16:c4:42:
03:7e:61:45:35:1c:35:d5:7c:73:4d:95:11:fb:4a:
83:a0:41:52:a7:ba:59:e0:63:68:fe:c8:86:11:1f:
a5:fc:54:51:32:3c:09:56:34:8d:c2:7e:d5:ef:92:
8e:62:87:ed:e8:81:d8:65:db:70:b3:6a:7c:25:83:
7f:18:68:68:0b:36:f3:f8:85:97:74:10:84:6f:0a:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DA:B3:00:04:CA:17:43:69:91:A8:87:22:45:3B:64:F0:57:3A:24
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c6:2d:73:bf:65:33:35:af:90:f3:b8:d3:15:57:50:6f:c3:
bd:75:d6:7f:40:53:03:96:16:bc:22:1a:10:7d:1e:be:dc:82:
a8:81:46:28:44:65:c9:dc:0b:5d:58:20:fc:c7:2a:5d:85:b2:
7e:2e:37:c2:d7:4f:a5:2b:57:b6:d9:f3:27:fc:ad:76:4c:65:
49:4b:7c:78:78:e7:b1:f9:17:05:63:bf:2b:26:d4:d3:df:3f:
33:19:7d:81:e3:44:ce:6b:25:16:42:be:99:b7:1d:73:b9:c6:
a5:c3:21:cc:e4:13:02:0f:71:9b:a5:06:f3:87:20:ea:3a:cd:
df:dc:7e:5b:bd:05:41:dd:85:d3:0b:11:03:1e:a3:49:f7:5b:
78:dc:b0:e4:8d:be:de:fc:a1:93:4a:ee:95:e5:79:49:ee:0f:
0d:d6:9d:9d:62:72:0c:0b:24:4c:c8:4c:8e:1b:35:42:dc:c3:
0f:41:42:e4:55:c0:e4:f7:0b:ec:cc:f0:c9:80:6e:e7:13:20:
d9:ff:34:f0:0e:6a:3a:cf:c1:44:8f:1f:eb:32:4b:01:3f:b3:
95:a7:7a:7e:3b:71:78:dd:3d:c0:aa:00:dc:49:ea:65:76:08:
d7:af:20:a9:bf:00:79:04:70:74:b4:5f:0d:1b:49:54:5b:53:
a5:f1:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:05:48 2026 by rpki-client