Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
File: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft (raw, json)
Hash identifier: p8zW82qcDAfgUq/6EAN1KuatY0vOZRNz56x+wisIcoo=
Subject key identifier: 34:99:BB:40:05:82:BC:96:F3:ED:12:4D:A5:B5:D6:D2:8D:00:46:6A
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 01A12A68C8E41D0367496F955A1CD532E8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 10:01:12 +0000
Manifest this update: Sun 11 Oct 2026 10:01:12 +0000
Manifest next update: Mon 12 Oct 2026 10:01:12 +0000
Files and hashes: 1: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (hash: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=)
2: 2LF9uim0YdDpGegCa61UauWuWfA.roa (hash: EJUG4c12axqY7VnRB7LGjwYbiGZwDBmNfyhI3v0wbAg=)
3: Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl (hash: wSRmPygJxLSyCEnHPz44cjCMarj2YVbScK+H2j3b7QM=)
4: LsSQmC_-rCiQYaygyKvWlRY8mCY.roa (hash: oBqqVFOWNVmG9s/k9r52SWz1AmcmC9z1tPLhK+7cnj8=)
5: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (hash: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=)
6: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (hash: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=)
7: d9UMor1VyAKI95wbo0VML8JqXA0.roa (hash: Ue762QdnWxcT+gtVI8j0lIqvVnpOu+dK95cax6FcHFw=)
8: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (hash: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:c8:e4:1d:03:67:49:6f:95:5a:1c:d5:32:e8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Oct 11 10:01:12 2026 GMT
Not After : Oct 12 10:01:12 2026 GMT
Subject: CN=3499bb400582bc96f3ed124da5b5d6d28d00466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:e5:81:00:2d:60:3f:71:eb:32:e6:46:dc:
5d:09:ff:14:aa:6a:41:36:35:36:7d:a2:34:f8:c8:
21:b3:af:dc:c9:f4:88:8e:e3:06:26:2a:57:04:82:
61:f1:68:5d:76:51:2b:bb:b2:a5:c3:58:e8:29:55:
a8:cb:d8:27:6e:90:82:81:02:b6:c6:b3:95:19:81:
0e:95:2d:7a:3d:57:95:3d:90:f7:97:13:ea:05:5b:
ca:e9:f1:94:c2:7e:ab:de:77:a6:ab:29:1e:60:0e:
83:15:00:58:ef:a1:97:bb:62:67:a0:62:01:59:f2:
5c:bd:f3:06:86:c2:98:ef:98:21:ba:08:03:14:54:
b9:f6:ee:f5:ba:a9:4c:b7:7f:1a:26:53:75:83:7d:
9c:3d:8a:3d:c7:2f:3c:24:86:d7:8e:d4:75:38:af:
22:cb:59:18:65:44:cd:1c:60:4a:20:82:45:2c:d3:
7b:6e:c7:79:0d:3e:da:6b:6a:30:29:a6:2f:07:6b:
e5:b7:db:00:72:d5:d4:10:d9:a0:87:b3:72:a4:48:
c7:cb:b8:e6:4e:2c:30:fc:b2:5d:cd:70:44:c3:bd:
00:4a:c2:c0:80:1c:ab:f0:0e:35:97:9e:e0:78:01:
af:ee:4b:43:7b:74:86:58:85:5e:70:19:31:f7:af:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:BB:40:05:82:BC:96:F3:ED:12:4D:A5:B5:D6:D2:8D:00:46:6A
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:88:75:39:71:bc:6c:03:fc:54:03:32:8c:04:39:38:f8:9b:
0b:7b:de:82:4c:17:34:54:88:87:88:c8:d6:1b:bc:40:17:fc:
73:c1:6a:0c:83:b8:b6:be:43:8a:d8:ad:65:87:e0:f2:41:38:
6d:12:e4:30:43:f4:26:66:9f:e2:f5:93:9e:17:89:08:0f:c5:
48:9a:c3:64:e3:85:ec:12:7c:38:22:e4:ed:ca:df:cb:83:a4:
26:ac:8b:36:5a:3e:dd:80:9d:04:e3:9f:c5:b3:bc:6e:93:96:
61:d5:a3:73:49:96:91:ea:e4:31:c2:96:1a:7a:34:bb:85:49:
d6:92:d7:d8:47:58:70:ab:0c:79:b8:fc:1b:9f:85:8a:93:32:
9c:68:32:68:91:a5:24:2c:9a:89:0a:c3:cc:9a:ed:23:30:ec:
94:22:cc:35:76:93:76:75:33:e6:75:0a:97:1e:db:3c:50:0d:
6c:1f:c0:35:15:45:d9:aa:da:99:07:c6:9d:24:d2:78:c4:1b:
e3:ba:c7:31:ce:2d:ed:a9:6e:4f:13:5b:01:be:d7:6b:54:69:
79:de:e9:f9:3f:18:25:f2:18:2a:3a:fe:1d:16:32:f1:3e:1e:
d2:9f:bb:14:6f:c0:e4:45:e1:d2:66:23:f7:fc:b4:92:6d:65:
43:6d:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:41:34 2026 by rpki-client