Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File: iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier: YJjmbB0x43MdcDSCLQX0kpqIfR0PL1xUnmCkCrOluYU=
Subject key identifier: B0:FF:7D:74:A0:4D:CE:77:C0:7F:4B:A2:78:56:A5:E3:75:EA:5E:96
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 01A0BE428BA1DB58DD9E2B7BC525242142E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number: 060A
Signing time: Sun 20 Sep 2026 10:00:27 +0000
Manifest this update: Sun 20 Sep 2026 10:00:27 +0000
Manifest next update: Mon 21 Sep 2026 10:00:27 +0000
Files and hashes: 1: Bu84RhuemJnWYuQuYDWAPY6eUcM.roa (hash: HW6yRnsl3nokN3GyGFBi+j2pUsGdKkc/tn9uxXaGfzs=)
2: CJHjJvBxO_A1o29RU77bYDobb1Y.asa (hash: OiQ96AcIrfdWv9rYq7YRunMZUUkm1k1hxiflexmUSCE=)
3: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: R5eLLWmOAsRv3Ygt/ZaGpXY7yPI8LWuVk1dGP4MGMDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:8b:a1:db:58:dd:9e:2b:7b:c5:25:24:21:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: Sep 20 10:00:27 2026 GMT
Not After : Sep 21 10:00:27 2026 GMT
Subject: CN=b0ff7d74a04dce77c07f4ba27856a5e375ea5e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:c0:3a:90:a6:43:12:84:bf:a9:46:6b:6b:
0e:9e:f4:2e:3d:03:00:c6:d4:ba:35:ae:9e:d4:83:
82:95:10:48:60:4b:d1:90:d2:59:88:fe:f9:16:b6:
96:5b:c8:d9:f9:34:23:15:d7:e4:a5:49:b0:92:b6:
e7:6e:35:9f:5b:f8:63:d0:c4:ac:6d:1e:51:7f:64:
48:f7:42:51:86:8b:27:ec:7b:7c:5b:a3:03:95:48:
79:29:81:f3:ad:d1:bf:7a:6f:f2:81:de:b5:c5:e9:
04:d3:e1:f6:86:77:93:04:68:c2:ae:1e:d4:43:ef:
11:1e:b5:1f:73:ce:01:e9:05:bf:4f:b7:e3:c1:a7:
cf:80:21:52:1a:f8:35:dd:4a:63:ae:33:bc:11:1b:
4e:ef:25:df:df:03:e0:a1:97:b4:27:5b:de:44:12:
fd:c0:1f:c1:64:d7:ae:cc:7d:22:5b:88:22:05:7a:
a4:c4:54:9b:89:f8:b1:a9:70:6e:4f:e9:bd:16:2f:
58:5a:73:80:69:a2:24:de:5f:99:29:5c:ce:e2:19:
45:b4:09:32:59:17:f5:fe:e7:ce:46:2b:a7:53:60:
fd:6b:08:d7:25:82:b0:7e:04:f0:37:f9:aa:7a:a8:
0e:7c:d1:41:ba:64:af:c0:a3:58:cd:cd:98:b8:e0:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:7D:74:A0:4D:CE:77:C0:7F:4B:A2:78:56:A5:E3:75:EA:5E:96
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a5:7f:96:c3:7a:9e:13:9b:78:31:d1:e9:36:2e:63:07:41:
51:7b:41:fe:3f:93:b4:a5:e2:0c:ce:fc:5b:ea:fa:dd:a1:29:
3b:8b:76:50:85:e1:70:92:30:52:fd:2d:c3:10:5d:26:20:5b:
f9:ac:9d:a9:1b:29:ed:4c:f0:11:6c:57:8a:70:16:fe:04:d0:
98:16:7c:d5:68:3d:72:de:d1:02:46:4d:76:bc:ae:80:55:b5:
01:52:59:5e:d4:e6:2e:f7:ec:42:17:9a:fe:01:75:05:ca:aa:
bd:42:39:af:be:bc:ec:19:50:ee:85:0e:75:79:75:81:a2:6c:
45:44:9f:c5:cb:68:63:e1:b1:a8:dd:77:43:6c:61:97:7b:a9:
84:d6:96:aa:ec:96:bd:27:19:8c:26:fb:ff:31:9e:c4:e9:dd:
92:7b:6c:00:8f:dc:2f:fb:cf:01:62:77:f4:d4:05:e1:2d:bc:
f3:26:73:45:43:7b:06:e4:93:94:02:9c:53:3c:8f:4c:52:d4:
ae:c5:47:00:ee:5a:33:f5:ce:a7:9f:33:e9:0b:f4:0e:9e:c9:
2f:f0:86:1e:91:70:cb:59:8c:66:9f:1e:b7:c6:77:4f:25:af:
5c:35:49:f3:54:81:4f:8c:2f:bb:a6:2e:2f:d7:d6:81:9d:64:
e8:b5:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:11:53 2026 by rpki-client