Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: F1/8RHlU5xPbos1Mm88emCpxMItr44Uo8C1OtuRfFVA=
Subject key identifier: F6:AF:7C:E5:07:49:16:CA:AC:28:7C:2D:31:68:77:48:31:F6:4A:13
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01A0BD2FC385D3497A8D54CF12A55BC13600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 19F4
Signing time: Sun 20 Sep 2026 05:00:19 +0000
Manifest this update: Sun 20 Sep 2026 05:00:19 +0000
Manifest next update: Mon 21 Sep 2026 05:00:19 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: 03C2kaN3HoA0pCIDHQrKq2R6NcLkcWEgqTSxGG1hwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:c3:85:d3:49:7a:8d:54:cf:12:a5:5b:c1:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Sep 20 05:00:19 2026 GMT
Not After : Sep 21 05:00:19 2026 GMT
Subject: CN=f6af7ce5074916caac287c2d3168774831f64a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:fc:3d:52:86:bb:54:67:a5:16:be:d7:b0:
fa:79:d5:e5:7d:8c:8c:cf:c0:92:fe:88:50:a6:d8:
02:24:1f:ec:90:2e:66:1d:a6:ec:6d:86:68:00:ea:
ab:90:3e:d0:f2:10:bb:04:fb:f5:d6:da:74:a5:68:
f4:31:80:18:f0:91:2b:fd:f0:ac:40:0e:0e:7f:be:
2a:c4:e4:56:42:ec:de:d4:da:0c:3a:13:e2:5a:8e:
2d:cc:2d:47:87:99:3d:5e:3a:1e:1c:6c:84:16:8f:
b8:58:f6:47:4e:c3:24:50:47:29:59:74:a0:31:54:
22:cc:d0:b2:c4:e7:de:4c:78:4f:93:0e:93:ff:50:
0a:19:62:96:93:db:0f:b4:65:60:d0:49:69:e4:7c:
be:39:a4:b9:18:4a:c3:af:28:91:5f:f8:47:80:35:
17:96:b6:87:9c:6b:22:db:25:ce:5f:fc:5a:05:15:
1c:aa:29:66:b7:6c:43:0d:89:b4:a5:da:5e:c3:28:
a8:95:fa:2f:85:9a:1a:2f:ce:ae:47:bd:85:24:ba:
ec:7c:32:e9:9b:7e:0f:a6:d0:46:dc:cc:bd:43:ea:
fe:6e:e6:55:66:97:03:cb:a6:d6:92:6f:bd:a4:d8:
19:c8:fb:0f:43:2e:4c:c4:d2:3e:91:f7:47:1f:dc:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AF:7C:E5:07:49:16:CA:AC:28:7C:2D:31:68:77:48:31:F6:4A:13
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:18:7d:fd:8b:eb:0d:b5:12:2b:46:66:50:85:08:98:ef:b7:
62:51:8e:cf:78:00:61:bd:d5:f2:b1:77:70:a5:9d:eb:8d:c9:
04:69:bd:f2:44:51:89:18:1f:27:c6:83:44:16:e0:27:7b:2e:
d2:37:77:9a:6a:1d:0a:d0:ea:c0:6c:6e:2d:3c:f8:06:42:14:
1d:1e:eb:7d:c4:91:94:a1:3f:7d:22:90:18:97:56:55:bd:41:
ab:60:7c:6f:3f:cb:4f:86:e4:f2:e6:f3:6c:93:71:1f:fb:27:
06:34:e2:74:0b:84:44:7c:db:75:ff:8b:56:43:f6:af:7e:6c:
51:b7:aa:e0:df:33:8a:bb:a1:69:2f:06:87:5d:3b:04:cd:66:
8f:80:ae:cb:5f:fb:c3:85:a3:58:65:1b:20:57:f5:ef:6c:f2:
44:5a:97:44:a6:87:1d:c6:aa:4f:a7:cd:22:80:33:b8:54:c8:
ab:3b:49:03:a0:3f:2f:4e:94:26:84:0a:89:46:16:1d:a6:21:
2f:34:de:5c:73:82:84:d0:60:80:04:bb:2f:75:71:6f:85:8f:
fc:d1:8b:86:f4:6e:a4:f9:b6:ab:a1:92:63:83:17:53:be:b2:
4c:d6:aa:3d:34:f7:02:2c:b2:70:a9:1b:97:92:82:38:88:4c:
c5:6e:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:53:17 2026 by rpki-client