Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
File: iHX9AcLoxTbR1lDyWXd2AFSl70E.mft (raw, json)
Hash identifier: oJ2mNxFmf6zzsqYFvlkDGlMz6ZgVUr4MiinDRfm/X5o=
Subject key identifier: D0:50:BA:84:89:FE:85:53:4A:FF:22:7B:3F:D6:7E:CD:20:B5:26:D7
Authority key identifier: 88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
Certificate issuer: /CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Certificate serial: 01A12B0DA62AA719388A0A5A81F4893601EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
Manifest number: 0149
Signing time: Sun 11 Oct 2026 13:01:16 +0000
Manifest this update: Sun 11 Oct 2026 13:01:16 +0000
Manifest next update: Mon 12 Oct 2026 13:01:16 +0000
Files and hashes: 1: bX62eycaxQqqmzCrVbRnmBhI_fQ.asa (hash: Xm5/UoBRk/jihZRblRqnYsjlOIOktCKA69PAH+25ryw=)
2: iHX9AcLoxTbR1lDyWXd2AFSl70E.crl (hash: 9aqaXORTswP4BzLqLFh5yyjKL4ajkUiPH4G/gkP1Tfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:a6:2a:a7:19:38:8a:0a:5a:81:f4:89:36:01:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Validity
Not Before: Oct 11 13:01:16 2026 GMT
Not After : Oct 12 13:01:16 2026 GMT
Subject: CN=d050ba8489fe85534aff227b3fd67ecd20b526d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:f3:88:61:e3:27:d1:a1:f1:8d:cf:56:fb:
27:75:24:d1:f6:66:f0:30:9c:cd:c9:e7:ee:85:ef:
fc:21:8e:49:cf:83:62:ae:76:d3:d1:3e:93:5d:63:
e7:e0:92:78:03:71:29:49:d9:61:bb:7c:5b:ba:d3:
6a:e6:73:92:2c:57:0d:48:9c:fe:ed:0a:e2:a7:7a:
b6:2b:db:41:4e:c4:6f:be:05:a5:77:bb:ce:66:f9:
22:14:47:f3:02:ea:b8:e8:40:01:fd:fc:87:7d:e5:
c5:e2:bc:5a:21:45:af:c2:bf:b0:1a:dc:9b:f5:73:
28:6a:c8:96:d4:b2:b7:39:ec:f0:58:32:37:7a:9f:
d8:c4:34:a9:53:f8:4f:4a:7a:14:e3:25:ae:9d:51:
f7:6e:e6:2f:6a:ab:aa:77:cf:05:28:d4:b8:e6:2a:
c1:c0:23:8d:77:33:27:ce:68:de:8b:07:0b:0c:6d:
d3:b3:2f:54:9f:78:ba:bb:81:9b:c3:4e:43:a9:ac:
c8:29:56:c0:86:c1:a3:c4:0e:ce:01:4a:94:4a:30:
f1:37:75:a0:e8:48:be:18:20:a2:03:ff:c8:34:ef:
2c:c1:a9:3d:9f:a3:3e:8a:d7:e7:e5:b5:80:3b:20:
f0:30:70:c9:22:6c:c0:bc:d5:69:2b:ec:3d:ee:f4:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:50:BA:84:89:FE:85:53:4A:FF:22:7B:3F:D6:7E:CD:20:B5:26:D7
X509v3 Authority Key Identifier:
keyid:88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:fe:69:6a:4f:52:46:4e:f2:8e:28:2e:67:16:b6:45:b7:
04:80:4e:37:b2:ff:61:19:b9:6b:04:eb:89:f5:8f:71:a4:1b:
6a:c3:8b:8b:8a:f3:76:e0:00:4f:06:52:45:ee:27:ed:e4:e9:
27:a1:14:cd:e9:6f:ef:3f:3b:e0:14:a4:c9:1a:be:62:48:5d:
97:93:7f:94:33:b0:e2:81:fd:f5:62:ab:13:84:19:a5:6a:c7:
3f:3e:48:7a:63:95:a8:3f:5f:c4:4d:3a:84:7e:da:19:77:09:
91:5b:b2:4c:65:93:7d:2e:17:1a:e9:e5:a8:50:10:4d:86:0f:
f8:cf:08:4a:5d:80:41:a5:7b:2b:80:ea:7f:b6:ae:ff:68:d7:
29:a7:16:e9:b6:cc:fa:49:d1:13:ec:f9:08:af:44:b0:b9:19:
95:f1:46:61:a8:b0:e3:73:ac:42:56:a7:a6:1e:63:bd:98:6b:
6d:b4:5e:84:b8:41:c9:df:19:85:a2:5b:bf:41:69:f3:22:47:
d5:58:90:7e:b3:6d:06:ac:6a:ed:0a:9b:8e:24:cc:7b:41:f6:
6d:2b:08:b0:85:67:85:92:ca:d8:8f:68:04:2c:c1:d6:b8:31:
b3:3d:36:4a:87:46:c3:66:4a:47:54:ec:08:b4:1e:cb:4b:a5:
65:0d:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:12:39 2026 by rpki-client