Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: DcL4wifUrOFIpmmfhR1l88ANWRRSKkZ3TzoCuA9jQrI=
Subject key identifier: 81:06:33:52:64:00:87:F6:93:2D:34:61:BB:24:93:A1:DD:0E:1C:FE
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 01A0C4E92FEB889EAFCE84AB9B032B2E1316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 0A82
Signing time: Mon 21 Sep 2026 17:00:11 +0000
Manifest this update: Mon 21 Sep 2026 17:00:11 +0000
Manifest next update: Tue 22 Sep 2026 17:00:11 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: RQkzKjEun6q5FoYCZOqN4/i7rnOUXL50R15uUF9BOUc=)
2: dUE7B1BI2eY5vxH0sjXn_eEtdiE.roa (hash: Td10cn+TUBgy7bh+w4UsjfRQk/m+lGjAwnzc4Ms7SgE=)
3: koyfl1fbRQ7wL_4CDR4bR8SUJ6w.roa (hash: +ihoHt66MtdHz9TjemIYSdtViPsR/B1PabBEU1L+tYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:2f:eb:88:9e:af:ce:84:ab:9b:03:2b:2e:13:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Sep 21 17:00:11 2026 GMT
Not After : Sep 22 17:00:11 2026 GMT
Subject: CN=81063352640087f6932d3461bb2493a1dd0e1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:df:01:e2:78:79:55:9c:da:66:e9:a4:bc:
05:53:de:cb:f0:ff:83:db:59:4b:65:bc:a9:37:9b:
cd:64:60:e1:46:a1:63:c1:4d:7a:15:82:5c:27:48:
ba:9e:1f:6e:1c:b7:3e:76:31:1a:39:2a:ef:c0:f3:
e2:05:a6:8c:a2:10:e7:d3:49:c3:f2:ba:e7:cf:e6:
7f:7e:71:ec:e1:86:6e:59:c6:00:19:77:c6:75:a7:
ea:1e:03:49:e7:15:70:68:d8:e6:e3:f6:39:0b:7b:
5b:2f:8c:a4:b3:bd:3a:3d:c9:46:e0:e3:51:22:c1:
a8:4c:97:83:a6:f0:1e:69:54:51:e2:36:58:17:7d:
d6:80:23:f2:2c:2c:6c:06:f7:da:7a:97:cb:38:39:
35:66:b7:2b:28:51:4c:a7:5b:04:a4:f5:96:fe:98:
8e:4e:49:56:7f:f3:ae:64:3c:48:4e:0b:08:dc:46:
b0:29:b6:91:1c:4d:58:79:78:b7:45:24:e4:c8:56:
86:01:d9:86:23:8b:3b:22:db:5b:14:26:94:0c:d6:
6e:d7:73:6f:71:bb:ac:be:8c:b1:8a:13:0b:d6:38:
1b:f4:9e:37:36:b1:01:a9:0f:0c:d3:2d:d5:45:2b:
1d:68:d6:bc:81:78:2a:cc:2d:1e:12:2b:88:fa:af:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:33:52:64:00:87:F6:93:2D:34:61:BB:24:93:A1:DD:0E:1C:FE
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:45:b4:c2:ba:bc:7f:68:d9:0b:eb:2a:e5:d3:cd:cb:a9:9e:
37:54:c5:3b:a8:c2:cb:a6:79:8d:eb:b8:db:b7:76:bb:62:8c:
50:84:ae:f0:72:49:63:67:1c:f6:8b:03:2d:13:1c:48:8b:5c:
2b:ad:5d:db:1f:fa:f8:1d:d6:b4:1a:f8:35:75:27:9b:25:56:
b7:2b:0e:26:8c:0f:3f:56:c9:40:57:2f:eb:b2:23:31:40:2b:
a9:b4:8d:01:46:b7:ba:ce:a0:11:fd:ea:b3:c1:bf:2e:a0:ac:
ee:0c:30:1c:f2:17:ae:a9:fe:b6:4f:45:47:a2:1e:a3:65:8f:
aa:c2:bc:5b:c7:34:74:0d:34:cd:d3:67:1b:d8:10:e8:ab:ab:
f2:2f:65:ad:55:d7:63:c7:d8:1a:63:7a:a1:b4:a5:ea:38:62:
86:be:79:2f:c0:f6:9d:09:06:ec:7e:94:25:15:0a:42:d3:6c:
ed:ab:c0:4e:d6:3f:ca:dc:03:9d:39:b9:51:ee:6a:af:45:65:
b8:1d:85:85:29:5f:31:bf:fd:b7:1b:f2:11:e7:58:16:15:a4:
01:56:ef:a2:ac:92:e5:49:af:3f:ca:1b:66:b1:98:33:5d:01:
7d:aa:e4:b8:1c:81:a9:1f:55:05:b3:af:47:69:0f:b6:de:2d:
43:4c:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:15:10 2026 by rpki-client