Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: CYujWsogfqJNe0UbNwHkihKRIw0dYHrgOXN8GmUR7E0=
Subject key identifier: 9C:F0:B8:03:17:40:6A:25:B3:03:88:13:E9:79:EF:C3:58:72:C1:54
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 01A0EAE5244177456B3CD7F7C74BAC0CA876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 02:01:20 +0000
Manifest this update: Tue 29 Sep 2026 02:01:20 +0000
Manifest next update: Wed 30 Sep 2026 02:01:20 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: DN8Kztsgb3uqCqyN+Wdzd+hPc+wo78E8i5nDZgC8wh4=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:24:41:77:45:6b:3c:d7:f7:c7:4b:ac:0c:a8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Sep 29 02:01:20 2026 GMT
Not After : Sep 30 02:01:20 2026 GMT
Subject: CN=9cf0b80317406a25b3038813e979efc35872c154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:73:9d:1e:f3:f4:34:af:7b:5a:f8:6d:05:
cb:79:e6:6d:ff:c9:53:b8:92:4d:5d:d3:25:9d:f5:
74:ad:97:bf:d7:ba:cf:18:56:7f:9c:73:44:09:f4:
8c:87:a1:9d:89:81:ab:1a:71:76:97:da:02:bf:70:
90:53:e4:ee:34:eb:41:39:72:98:ea:77:4b:fd:97:
33:d3:4b:09:b1:89:1d:cc:24:b9:0d:70:11:57:4b:
7a:a9:44:c8:50:8b:78:6d:eb:4b:2d:ba:23:5c:5c:
32:89:c4:9a:e5:b0:5d:b2:b8:f2:da:5e:fd:2b:54:
84:cc:81:1b:f2:f6:57:1e:f3:dc:92:5b:d8:cd:ba:
7c:63:23:92:6c:96:f4:3b:52:68:e0:d3:cf:13:4d:
21:1a:95:5c:d2:ac:e1:74:71:3e:4e:bd:10:81:fc:
d7:3b:8e:47:a7:f5:8b:fe:9b:94:25:2b:35:79:14:
f9:1b:40:e4:4a:31:62:b7:29:41:9b:07:16:a0:85:
8a:ad:29:fb:62:30:62:77:a4:c8:19:48:5e:e3:c7:
82:f5:93:51:30:9d:12:f5:30:42:60:6c:5c:6f:db:
82:55:84:51:a7:18:da:b3:52:6e:19:f8:19:e5:fb:
03:eb:69:12:8b:88:6d:2a:e5:37:78:32:88:e2:d0:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F0:B8:03:17:40:6A:25:B3:03:88:13:E9:79:EF:C3:58:72:C1:54
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:dd:31:9f:31:2c:83:e3:04:29:21:12:ff:99:e1:d4:67:92:
6b:22:27:4e:ba:59:9c:c4:ae:ef:ed:b1:03:bc:d3:a3:13:68:
4b:c7:6e:90:8a:a1:91:70:73:3c:34:de:42:70:8d:d8:fb:3f:
da:7b:fc:a8:84:44:33:0a:ae:88:f5:69:ff:54:ab:c4:12:12:
d4:f2:8b:a7:ac:a2:bc:33:d2:c9:45:10:8c:1b:3d:35:1f:cc:
08:07:10:e0:36:72:2c:64:99:cb:fa:51:f1:1b:b6:cf:ca:0e:
e2:aa:b6:b3:01:1a:bb:86:d5:c7:d9:28:63:44:63:9a:8a:79:
ff:14:58:da:7c:58:18:da:6b:18:e3:d2:e8:a0:45:fc:16:fd:
f5:42:a1:43:af:24:42:41:98:e5:fa:17:6c:5c:20:2e:ee:88:
2d:40:6d:84:c4:e3:2b:7d:c4:97:28:c4:82:bc:33:75:68:5a:
be:5b:f0:07:db:76:1a:aa:b2:ac:96:3c:f7:3e:5e:9a:e5:7b:
5b:e0:4c:e2:aa:44:b6:37:ba:15:c1:98:96:05:f7:09:a2:d3:
74:87:10:78:73:8b:55:f1:46:eb:bf:7a:3f:e3:fd:67:6d:cb:
c2:f0:32:b3:14:70:19:1b:3a:93:96:0b:8e:94:02:22:93:c4:
2d:10:f2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:53:00 2026 by rpki-client