Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: BQ19ND3Nz+S/aN2jy4VHxGwCSnIA+pEd/Q4VOOL+ulU=
Subject key identifier: 6A:56:38:B4:67:4B:B8:DA:BB:5B:00:40:EE:BB:BF:0B:C4:34:5C:C3
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 01A11417CF40E49D004D0756B2C68EB6F260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 1852
Signing time: Wed 07 Oct 2026 02:01:06 +0000
Manifest this update: Wed 07 Oct 2026 02:01:06 +0000
Manifest next update: Thu 08 Oct 2026 02:01:06 +0000
Files and hashes: 1: 2HVbjY7XH7qHKeZZFQnD-Dqb1TQ.roa (hash: L4uIKMCJpumyCtgkJ2Nq73fboi9X5qQpVMHCHCUSm5E=)
2: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: epxdjviLzBosWwxA9AH2366cxAttRZIBY325/M+U/q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:17:cf:40:e4:9d:00:4d:07:56:b2:c6:8e:b6:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Oct 7 02:01:06 2026 GMT
Not After : Oct 8 02:01:06 2026 GMT
Subject: CN=6a5638b4674bb8dabb5b0040eebbbf0bc4345cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:71:bb:b8:3a:09:00:74:df:ff:57:eb:ed:
e8:af:f4:c6:70:bc:01:bf:d3:7f:f6:d5:f7:04:6f:
15:c1:bb:ba:5e:a6:37:a8:63:ad:fe:9d:f1:6a:71:
56:10:38:16:d8:a8:23:b6:02:a8:72:35:6a:4c:e1:
20:50:c6:9f:d4:a8:9b:03:db:a5:b8:f5:7d:13:df:
c6:e4:d0:bd:ea:23:3e:c8:97:16:71:4e:bf:c3:db:
fb:3b:29:4f:ae:98:5a:35:ec:8e:1e:4d:8e:1b:60:
46:0e:bb:e7:35:64:f0:eb:4c:3e:7d:90:24:49:f3:
54:60:36:2d:0a:df:be:18:e1:86:64:eb:b6:92:f4:
98:99:33:e1:b3:87:16:5c:8f:4b:7b:e5:c8:55:54:
9a:19:a7:5e:bf:a6:fa:6b:e5:18:74:6a:99:c9:9e:
19:f9:f6:29:ef:7f:cf:a4:2b:04:3b:6c:18:f0:8b:
25:95:0d:76:b6:aa:be:73:92:7b:2d:7f:d6:8c:27:
09:ce:0b:58:22:c8:97:bb:f1:1b:e8:34:ec:c6:07:
1d:eb:1b:05:1a:a4:cc:fd:18:cc:04:c6:ce:77:2a:
7e:21:c1:8c:8b:5b:99:b5:77:e2:51:3a:07:2f:e2:
51:d0:e3:b2:ed:fe:cb:bc:40:60:cf:62:82:6b:8b:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:56:38:B4:67:4B:B8:DA:BB:5B:00:40:EE:BB:BF:0B:C4:34:5C:C3
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f9:6d:ac:a6:a5:eb:46:b9:97:0a:8a:20:30:b7:46:c7:e0:
6d:25:a1:01:56:76:95:4c:80:69:4b:c1:05:38:2b:a2:e1:cd:
ed:b6:00:19:dc:f5:86:d3:9a:fa:3c:93:e8:0b:79:63:87:dd:
ac:ef:4c:d1:a8:df:a0:ad:7b:5f:39:b1:87:c1:ec:17:50:c4:
9b:94:a4:bd:bb:37:69:09:7a:fa:e9:87:e4:c9:17:6b:90:3b:
eb:3e:3e:2f:a0:47:55:dc:35:88:43:42:87:bf:e4:76:1b:48:
55:be:c5:b0:45:92:8d:22:ca:97:6a:ac:06:90:07:c8:e9:a8:
04:55:01:6b:e6:a3:8b:32:51:c5:a5:38:39:26:10:2d:f4:10:
29:13:b9:a9:e1:1e:8b:96:87:c6:db:5c:4e:49:9c:bd:4d:b0:
fe:0b:d9:df:01:22:ab:b9:8b:53:36:03:04:f8:97:bc:9a:7d:
5f:12:62:73:0d:17:c7:d3:a2:99:8f:cb:2e:93:d3:9f:da:54:
13:45:98:56:b7:3d:a9:08:c5:2d:0c:29:16:0b:f4:27:8c:ef:
84:b1:01:65:31:0d:80:2e:3d:06:9c:e9:9d:79:71:91:a9:48:
65:93:1d:ba:0f:dd:c2:8f:f3:8b:81:5d:da:d6:f3:4e:b3:d4:
f5:1e:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:12:39 2026 by rpki-client