
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: LnMfTVly0MFAVGW5cC7e6Eky3pJcE7KSK0i6ygUKheQ=
Subject key identifier: 32:07:80:6E:AA:DE:E7:06:2D:D5:D5:5A:56:1A:2E:2F:31:56:CF:1B
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 01A0EF3043DBDC22A56340EB8A8AE0C1511A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 05B4
Signing time: Tue 29 Sep 2026 22:01:52 +0000
Manifest this update: Tue 29 Sep 2026 22:01:52 +0000
Manifest next update: Wed 30 Sep 2026 22:01:52 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: SkllawtL9ECBE2IzFZqnBQrLyx1e74GSMuq724nZqdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:30:43:db:dc:22:a5:63:40:eb:8a:8a:e0:c1:51:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Sep 29 22:01:52 2026 GMT
Not After : Sep 30 22:01:52 2026 GMT
Subject: CN=3207806eaadee7062dd5d55a561a2e2f3156cf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:c2:50:c8:04:1c:af:d4:78:3e:9f:99:ff:
5b:77:0a:51:46:f3:b2:6d:b7:04:b3:d2:d2:fd:e1:
9c:10:e0:0a:d4:dc:31:30:69:ee:64:df:89:39:7f:
ed:b7:bd:e0:2f:56:bd:25:d6:70:6e:b0:c2:8b:59:
19:ae:82:5f:48:1f:a9:99:59:f4:9e:0f:c3:5c:52:
d1:d3:fe:94:90:2b:c1:5b:1f:b7:c3:09:68:c7:bb:
95:38:ff:76:fe:bc:c9:fa:6d:8e:dc:3b:15:b9:27:
c2:1a:f4:13:a5:c7:6f:bc:c9:10:59:3d:fe:fa:a2:
e3:47:f0:49:29:34:c4:ca:20:5a:95:1a:28:4a:80:
6e:99:be:ef:1d:b4:a1:ba:4e:6d:3f:f5:0e:3f:e8:
e5:ae:af:be:33:4f:56:a2:b2:99:23:f2:38:8d:36:
61:d6:4a:44:42:b5:4e:a2:f9:c4:a3:35:b1:8b:b8:
e3:fc:3a:99:12:4b:01:00:76:0d:03:10:ff:ef:4b:
1b:b0:f3:cb:d0:2a:3d:16:a9:19:83:97:06:b6:31:
55:53:1e:17:6d:92:cb:92:a1:da:8c:64:d9:62:56:
f7:e0:02:2c:d0:bd:9a:b8:7e:1b:2d:fd:ee:ae:a1:
e5:f1:85:87:42:74:69:4d:e1:1b:a1:3e:a3:6e:51:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:80:6E:AA:DE:E7:06:2D:D5:D5:5A:56:1A:2E:2F:31:56:CF:1B
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b4:f4:b6:d6:99:ed:4b:f2:fd:3b:07:09:c2:2b:05:8f:46:
51:3c:bf:2b:cf:ce:15:38:a6:f2:c9:2e:1d:07:fa:a8:37:68:
97:85:fd:42:f5:3f:38:c7:90:ed:7d:c3:4f:1d:a4:9b:1e:ae:
e3:c6:40:a7:a8:c7:de:0c:4e:de:35:07:7b:55:3c:8b:00:25:
7b:89:a9:1a:79:49:fb:10:82:87:e4:09:fa:06:b1:f8:e7:15:
77:7b:b1:b5:3a:78:86:5f:15:92:75:db:eb:76:db:40:8f:e4:
97:cd:9c:33:2a:40:57:a3:c9:c2:df:f4:b3:e0:65:6a:bd:82:
ce:e8:1b:da:32:b1:c5:2e:20:76:99:c7:8e:4f:82:de:e0:7b:
1c:ba:49:5b:f0:82:d8:32:b3:ba:f1:17:00:c6:f1:71:c3:d8:
d4:97:46:df:c8:bc:3d:12:c5:ee:11:e5:ec:4f:e7:8b:82:ac:
a1:7a:64:32:04:31:0b:27:a5:c6:18:e0:27:dc:4a:28:3b:cc:
27:2e:3a:84:c8:0c:1d:af:17:50:21:d3:4f:cd:65:c6:1c:32:
90:68:aa:96:b3:30:86:ee:05:61:ab:fe:37:b8:2a:ac:03:84:
a3:6b:54:da:bf:e8:0b:19:12:71:e6:21:6f:2e:d8:6f:c3:b4:
80:be:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:55:19 2026 by rpki-client