Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: 7b3TETCI1C8BJNqY6Y9U5cfR95tVFV/T01y73wkNozo=
Subject key identifier: 82:02:C5:27:0E:06:17:1A:D6:C4:B4:C2:76:FD:34:9B:99:C0:D1:B0
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 01A12F8EC53214BC12303620E58A67979544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 1AA2
Signing time: Mon 12 Oct 2026 10:00:48 +0000
Manifest this update: Mon 12 Oct 2026 10:00:48 +0000
Manifest next update: Tue 13 Oct 2026 10:00:48 +0000
Files and hashes: 1: AAidcFfKKn8rLVgZFcWgd6oXzBA.roa (hash: deNWXJoBp3T1ikz9GPZx7PgODBggEVznDAhwm6Au8ww=)
2: G3golYRCkelEfHAfABmrlnYv0EY.asa (hash: Qew4qOtn77j2TfbcFgyr9LY4AUHudNWIMGajK/7d088=)
3: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: Ff2I9XbQ+nDFu0BlKjoscg/MOdcSd/4yu7MIq9GHH5w=)
4: jB65z1ohai0nkr6HUNtdxzCDiIk.roa (hash: oekkGHlROfUOtUp+dGMPBMZMBRrWYIWnNkSbT4P6/v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:c5:32:14:bc:12:30:36:20:e5:8a:67:97:95:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Oct 12 10:00:48 2026 GMT
Not After : Oct 13 10:00:48 2026 GMT
Subject: CN=8202c5270e06171ad6c4b4c276fd349b99c0d1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:87:ef:47:bc:eb:0d:6f:e8:bf:63:93:e1:aa:
24:a6:47:33:90:85:02:15:c1:bd:a4:15:fd:e0:98:
23:c6:db:46:31:0e:77:8a:3a:b0:e5:80:ef:05:03:
af:04:78:70:17:2d:5c:53:f8:33:2e:b0:20:9e:53:
3d:40:1a:f1:ed:a4:a6:c6:c2:46:fd:97:81:57:0c:
86:15:43:4a:1a:fc:c9:55:7b:75:65:04:61:99:f0:
4e:54:93:b5:82:da:22:1c:cd:6d:24:ff:6d:86:49:
e0:56:d1:12:60:44:2e:79:71:79:0c:95:78:7f:3e:
a4:65:ea:35:bc:b2:0c:c3:ce:b7:e9:fb:ce:bc:ec:
6f:55:05:1d:42:c2:0a:2b:4c:af:8a:35:83:6d:f6:
04:b9:ce:9a:a8:9b:a6:8a:81:72:fe:26:ef:61:48:
d1:9b:93:44:ad:c8:62:96:be:5e:82:9a:ca:f8:67:
e7:22:c6:cf:0a:d0:92:c8:e2:5f:71:a7:0c:1c:d8:
8c:17:44:f9:42:f6:41:45:95:1e:69:37:70:35:27:
11:f8:1c:14:ca:d2:d1:31:09:72:55:fd:3e:ff:09:
64:76:34:32:fd:75:d3:ce:15:68:8d:25:dd:75:1b:
63:3c:42:85:0e:2c:5a:99:ef:d5:14:1b:5f:4e:f0:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:C5:27:0E:06:17:1A:D6:C4:B4:C2:76:FD:34:9B:99:C0:D1:B0
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8e:ca:82:1e:3f:28:a1:f8:65:fd:9f:1d:b3:0f:99:d3:1c:
1a:65:ea:b3:20:a3:f3:e1:9f:65:7a:bf:00:7d:20:32:70:b2:
7b:18:be:07:79:1e:5b:76:e4:08:23:bd:af:a5:8f:7a:57:76:
8a:fc:a1:16:8d:33:60:f3:aa:d6:e0:ff:3a:af:0b:46:67:d7:
ef:fe:e9:a2:8d:81:b5:ee:3b:9f:31:c0:c8:d6:e4:ee:f7:3d:
12:d6:06:f4:3b:a6:00:22:f3:83:0a:3c:7e:6a:21:9b:24:4b:
20:2c:a4:5a:71:52:ba:22:cc:ab:87:12:ed:eb:48:76:f6:2d:
31:bb:9d:93:7f:bf:ab:de:4e:a4:bd:83:30:3a:7e:18:67:82:
da:0d:5a:16:de:be:09:7d:6c:1f:d8:b1:67:ed:98:97:b4:8c:
96:f7:c7:12:b1:3b:5f:dd:b9:fd:6e:54:c3:04:42:e5:a0:b0:
aa:1d:5a:7a:58:f5:2b:62:bc:f2:6f:09:3f:77:ac:3e:9d:16:
1f:e3:0c:23:44:d2:f7:d5:e2:15:fb:a8:f6:3a:79:11:c2:86:
f6:76:0d:62:2d:b6:15:f6:a1:2a:b2:16:89:a4:0f:21:6f:4b:
f1:90:59:01:14:58:51:92:da:d9:9a:e5:e7:ba:a2:5a:ff:7d:
d2:1b:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:14:09 2026 by rpki-client