Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
File: ido1Hh4yCS63YfLI6ix1oZcALUs.mft (raw, json)
Hash identifier: Qp/RhKzbyM6O2kRZ1U3erZsLn641DmDfp/StP9hbI7c=
Subject key identifier: B4:14:9B:54:4E:57:4E:7D:34:DC:D2:14:71:5A:34:E2:EE:AC:76:3D
Authority key identifier: 89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
Certificate issuer: /CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Certificate serial: 01A0F0E7D8E19CD043908828C5C04C3E9B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:02:01 +0000
Manifest this update: Wed 30 Sep 2026 06:02:01 +0000
Manifest next update: Thu 01 Oct 2026 06:02:01 +0000
Files and hashes: 1: TTj59N_k0baRYBbpMvwMER52UMA.roa (hash: Qb/eGpeDdebAZbVO1qCzlupreg9p5z6Eu1FINEUZOCw=)
2: ido1Hh4yCS63YfLI6ix1oZcALUs.crl (hash: pMjz5K0zeZSsT49KyMBLqnuIE9uze8EucBuT+q+tBGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:d8:e1:9c:d0:43:90:88:28:c5:c0:4c:3e:9b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Validity
Not Before: Sep 30 06:02:01 2026 GMT
Not After : Oct 1 06:02:01 2026 GMT
Subject: CN=b4149b544e574e7d34dcd214715a34e2eeac763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:c5:d7:d4:34:cc:e7:b0:68:8f:14:1b:e7:
9f:e0:86:67:09:45:90:83:9d:49:d9:cd:9b:f3:b8:
d6:90:00:f5:76:ff:87:59:a8:51:54:69:b8:f2:5e:
21:fb:f3:06:b9:c1:fe:16:d7:82:d1:c6:85:05:11:
93:9c:c4:9c:55:4d:16:94:3b:69:0d:24:6d:d0:6e:
81:ba:3c:41:1c:21:f0:19:57:25:d6:08:2c:16:86:
30:b7:b5:c4:a9:27:18:b0:ca:01:81:71:32:03:94:
28:28:d9:7c:e8:ff:5b:9d:ae:92:79:18:28:69:64:
97:ad:b7:11:9f:b2:5e:77:f8:92:4f:08:92:5a:6e:
7a:9f:85:89:f3:5f:14:07:e8:9b:da:04:aa:09:22:
a3:32:26:39:19:a5:55:3c:f9:fe:9c:33:69:46:78:
51:6a:a4:98:28:5a:cd:16:3a:5b:45:99:9b:7e:29:
6b:f2:e0:ad:c1:0f:9b:f2:97:d5:22:03:e4:e7:23:
43:b1:d7:98:76:01:c8:3b:ee:1f:67:ee:ba:86:bf:
a1:38:69:bb:b0:20:96:a7:60:3f:d5:03:9f:12:8f:
f9:b0:76:46:87:b1:13:ef:5e:5d:70:be:cc:a3:cf:
41:04:f1:03:1b:d4:8f:6a:ca:6c:7d:dc:44:00:49:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:9B:54:4E:57:4E:7D:34:DC:D2:14:71:5A:34:E2:EE:AC:76:3D
X509v3 Authority Key Identifier:
keyid:89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:80:6a:c2:ff:fd:12:bd:f6:87:99:e8:7b:d2:c4:49:8d:af:
25:32:3e:9d:53:00:9a:f6:eb:92:d9:32:31:7f:19:9f:41:d0:
87:a9:9c:23:12:dd:ed:96:3b:8f:2e:9b:c4:3a:88:71:f7:aa:
7b:93:90:c1:2f:60:a2:24:e2:22:ed:90:f1:00:b7:e5:1f:b8:
88:32:89:c6:0b:52:a0:a9:cd:d6:92:39:b6:27:25:22:83:4c:
a5:b4:0e:46:bc:7b:ea:95:df:15:9b:86:57:ff:a2:4d:5c:62:
64:bf:ca:70:1b:45:41:29:4f:eb:70:55:cf:7b:c3:f0:3e:11:
93:cc:84:b6:41:a5:bd:27:46:16:f1:1a:17:a0:77:b1:10:4d:
c8:f5:0a:60:76:07:fd:3d:06:ab:e0:5d:3e:42:39:9e:31:22:
e5:5e:21:ba:21:f0:a3:19:32:d8:87:ea:be:f2:1c:88:82:0e:
aa:7f:51:e6:ae:41:6b:7a:25:e9:19:ae:a6:50:d4:c4:e1:d9:
55:51:ed:3a:85:ea:01:db:0a:40:46:87:77:be:2d:b6:12:59:
b4:35:3f:2a:8b:2c:69:b5:91:49:be:5a:46:0d:80:8c:f5:f2:
22:8a:1a:7a:31:3b:7b:98:24:31:4e:61:cc:82:09:a3:b2:6d:
f1:95:cb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:11:27 2026 by rpki-client