Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: OUoBvkiBn7PcYd2ilZZzajMe6kSnQu6StM/igUxhUJE=
Subject key identifier: FA:16:72:AC:BD:7D:03:02:E5:24:E3:72:40:03:9E:61:F9:8A:A4:33
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 01A0CB903E813772CA227C49A65E90C90C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 1A40
Signing time: Wed 23 Sep 2026 00:00:23 +0000
Manifest this update: Wed 23 Sep 2026 00:00:23 +0000
Manifest next update: Thu 24 Sep 2026 00:00:23 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: MhuUDSI2yGHShJieBQwfle8qF8rSfZf1DbJ7gHMwqaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:3e:81:37:72:ca:22:7c:49:a6:5e:90:c9:0c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Sep 23 00:00:23 2026 GMT
Not After : Sep 24 00:00:23 2026 GMT
Subject: CN=fa1672acbd7d0302e524e37240039e61f98aa433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:07:ee:52:e6:25:f9:90:d9:61:a2:8e:69:
ca:0c:56:7c:1f:81:36:53:30:e0:31:96:94:50:02:
c2:63:f8:49:35:5d:c1:8a:2d:21:85:03:35:a6:85:
a4:3e:d8:a3:7c:2d:aa:ad:a3:52:7d:3b:7f:46:a0:
b9:79:ea:08:be:de:37:85:c7:27:0f:ee:85:99:0e:
5e:83:25:ba:64:7c:79:6f:d2:4b:37:31:ed:ff:c5:
08:69:67:de:f3:35:32:6c:46:d9:7a:9c:b3:90:c5:
13:a6:04:98:c8:37:bb:4e:31:de:f8:3e:c2:78:30:
e1:e7:22:6c:9a:6a:aa:47:83:73:ce:09:21:70:28:
c2:3f:ee:ea:eb:90:c9:09:f1:de:36:75:9f:6d:92:
9c:31:a8:ef:41:a7:37:f8:ee:e9:e4:ee:24:64:27:
65:5e:cb:00:d6:d3:a0:12:e0:da:de:3a:23:30:1d:
0d:e4:27:6f:62:98:6b:5b:0e:2d:3b:c2:02:85:a0:
5b:be:a7:35:c2:dc:13:78:99:2e:2c:da:81:79:fe:
a6:76:4b:ef:1e:7b:5a:ce:e1:16:86:8c:5b:97:44:
df:81:d4:dd:c0:1e:41:63:1f:fa:de:ac:ab:d6:84:
b0:e7:72:2b:bf:93:d7:36:9d:46:a7:6e:89:4a:e5:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:16:72:AC:BD:7D:03:02:E5:24:E3:72:40:03:9E:61:F9:8A:A4:33
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:61:fa:c5:7a:b5:ed:1f:cf:37:5a:f4:4c:bd:74:62:b5:
51:f7:42:d4:00:53:6e:3b:82:f7:fd:9b:54:06:56:bb:29:c4:
7c:a2:59:b0:a2:a3:3f:ad:c9:3b:a4:57:9c:25:1a:d6:75:fd:
05:6b:fe:cf:8e:be:b6:86:0e:5b:71:b3:85:5d:31:16:e5:f9:
90:f5:28:16:68:69:03:66:9a:c4:26:13:ac:72:15:59:d1:48:
8a:f3:6d:f8:20:84:09:92:00:e2:84:5b:0e:14:79:f6:02:3c:
99:a2:56:61:06:3d:87:fe:1b:b8:4a:37:76:92:5d:43:0c:81:
9b:08:d3:0b:b0:5c:01:58:e6:7c:c8:05:ee:98:40:ba:04:0c:
4e:0a:a2:a5:b9:4e:86:29:3a:25:d2:6e:85:fd:c8:22:55:5e:
40:df:94:9d:1f:62:6d:7f:07:6d:9c:36:f9:d6:12:99:03:d1:
2a:67:9a:76:a7:be:0c:1f:3e:ef:45:f3:c8:21:65:1a:d4:55:
88:d6:e4:c1:f8:0f:e4:2a:a4:86:f5:3b:54:1d:a4:e5:0e:a4:
bd:3c:c5:c9:6b:6d:28:17:ca:63:cf:8b:d5:9a:aa:3c:2a:62:
0e:03:a5:92:7c:a2:27:bf:c8:82:b6:55:44:4c:fd:a5:10:c6:
fe:31:32:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:03:09 2026 by rpki-client