Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
File: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft (raw, json)
Hash identifier: dTT58ScrG8C1uEjaYdz+bgIlndZk+UEGommHf4c3tto=
Subject key identifier: 0C:25:45:BA:76:76:F3:92:BF:D1:E4:72:34:1B:4F:A0:16:B9:6E:08
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 01A135FEA4499C469A3036349BD75FECFB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
Manifest number: 011A
Signing time: Tue 13 Oct 2026 16:00:42 +0000
Manifest this update: Tue 13 Oct 2026 16:00:42 +0000
Manifest next update: Wed 14 Oct 2026 16:00:42 +0000
Files and hashes: 1: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (hash: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=)
2: 2LF9uim0YdDpGegCa61UauWuWfA.roa (hash: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=)
3: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl (hash: keqRAbKvbg9JV42q00Tek5ibcJNaIZBiPgmm0fILbsI=)
4: LsSQmC_-rCiQYaygyKvWlRY8mCY.roa (hash: oBqqVFOWNVmG9s/k9r52SWz1AmcmC9z1tPLhK+7cnj8=)
5: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (hash: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=)
6: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (hash: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=)
7: d9UMor1VyAKI95wbo0VML8JqXA0.roa (hash: Ue762QdnWxcT+gtVI8j0lIqvVnpOu+dK95cax6FcHFw=)
8: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (hash: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:fe:a4:49:9c:46:9a:30:36:34:9b:d7:5f:ec:fb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Oct 13 16:00:42 2026 GMT
Not After : Oct 14 16:00:42 2026 GMT
Subject: CN=0c2545ba7676f392bfd1e472341b4fa016b96e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:29:cb:79:9b:9f:1c:e3:f6:2c:1f:07:13:
c3:67:b2:6e:ac:2e:bb:ae:79:e5:82:55:c9:92:0a:
f7:4e:47:f2:8c:4a:6e:74:7c:a4:45:07:89:ef:90:
1a:00:1d:00:6d:d8:f0:b0:09:c2:a6:cf:d7:4a:2b:
c5:66:83:16:5c:c7:79:ea:79:47:ba:48:f4:c6:8a:
f4:57:28:18:f0:31:61:8e:de:99:8a:ae:c7:34:20:
a6:48:68:7b:45:84:4e:be:03:a6:fc:0c:51:b7:18:
0e:60:ab:73:6c:57:ca:b5:38:0a:f7:5d:4e:4d:19:
55:9a:e1:35:67:a2:4b:fd:a7:31:23:ee:df:a0:fe:
1f:27:c0:a6:8a:63:9e:40:1b:38:3e:75:14:50:cf:
ca:87:42:5b:65:2a:42:39:47:12:f0:4f:fa:d1:a3:
0a:1c:90:b9:57:34:9f:fd:13:e7:dc:a6:38:e3:92:
67:21:87:7e:0b:ef:35:58:5f:86:6a:24:89:55:6e:
f4:1a:73:9a:8f:61:30:26:40:fb:16:8e:47:89:6b:
59:d4:f3:49:43:4f:e0:76:c3:88:7c:47:4b:e8:69:
05:ab:a4:d5:36:f5:79:be:f5:92:6e:ee:0b:94:27:
40:0f:8f:5d:82:e6:43:3c:ff:5e:14:34:54:99:bc:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:25:45:BA:76:76:F3:92:BF:D1:E4:72:34:1B:4F:A0:16:B9:6E:08
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:62:af:34:d8:2f:4b:51:ee:7e:0a:bf:ab:f2:51:7e:10:71:
62:dd:af:a0:a4:e3:a9:ea:f7:2f:70:0c:24:ba:dd:80:0c:9c:
d3:05:45:18:d4:92:a9:0a:e9:4b:62:4b:e2:80:cf:55:91:c8:
c4:5e:dd:3c:2b:a9:ed:56:65:8b:ba:d7:26:0b:a4:77:d7:ec:
e8:93:84:85:1c:3b:cb:70:93:e1:c9:fc:4b:6c:00:b3:07:08:
63:60:3f:d2:e9:27:9a:f1:3f:b7:7d:6a:f3:d3:aa:ad:3d:f9:
8a:d2:8e:e0:6a:3f:db:1e:74:c5:0b:c0:8f:27:ed:59:44:56:
28:92:e3:a0:92:41:ff:aa:55:55:f5:c7:0e:72:f0:d8:81:1f:
0e:3c:1d:3a:b8:d1:51:66:d9:24:62:2c:c6:81:bb:9b:49:83:
9d:08:3d:58:9c:29:b3:50:36:5b:fa:d1:eb:6d:e4:3b:36:b7:
e8:91:17:ae:be:dc:89:a8:30:be:a7:cf:5b:31:d4:9c:8b:1d:
7f:f7:04:4d:86:28:94:bf:42:bd:1c:1f:8a:7a:9b:51:96:6f:
de:c2:55:9b:5d:0d:19:5e:86:17:90:4d:dd:49:2e:5d:c6:df:
c7:2a:87:5b:c5:68:df:fa:09:bf:45:67:4e:5f:da:76:b9:dd:
16:70:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:42:14 2026 by rpki-client