Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: syT4oQOBabKinYXZf0/xBBSOX/lYtILGBxNuCng+BLg=
Subject key identifier: 87:9A:BB:3C:CA:4B:67:3F:4B:1F:B3:63:5C:2E:D4:A9:98:A8:F0:45
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 01A0DA9622D23C33256EDF6DBD9DC3EDB70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 22:01:07 +0000
Manifest this update: Fri 25 Sep 2026 22:01:07 +0000
Manifest next update: Sat 26 Sep 2026 22:01:07 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: tdfFV27atgLEj6BrjNwBtPdzGfLo7Di40XCYmH3Tiok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:22:d2:3c:33:25:6e:df:6d:bd:9d:c3:ed:b7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Sep 25 22:01:07 2026 GMT
Not After : Sep 26 22:01:07 2026 GMT
Subject: CN=879abb3cca4b673f4b1fb3635c2ed4a998a8f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:63:d8:d5:bc:dc:37:02:1f:dc:9d:9a:7c:
c5:45:c4:f7:43:e2:b7:14:4b:e8:dd:e6:45:bb:8a:
f9:f3:aa:d7:3f:15:48:45:3a:22:be:3b:76:9c:93:
ae:07:1d:58:10:18:2b:ad:9b:3e:58:80:d4:53:5b:
01:a1:aa:c0:df:98:a6:24:c6:53:b9:bf:ec:76:8c:
59:f5:dc:4a:94:0f:5e:97:1f:2c:8c:07:e2:fd:1b:
ef:da:99:97:29:28:cc:e0:1e:ea:9e:b0:e7:03:68:
1c:fa:2f:1e:6a:dc:8b:bf:02:02:cc:79:b0:43:6c:
ec:88:65:20:d0:c3:80:6d:93:40:8c:bc:34:7d:1a:
b8:5a:d2:67:00:6f:38:17:b2:5c:24:b9:bb:5e:d0:
b9:76:16:5b:45:a6:f4:5e:52:df:8e:cc:d9:08:44:
70:c1:17:30:d6:56:42:2b:c5:ed:ea:77:07:86:bd:
c2:45:69:c0:99:69:6b:f5:7e:ad:19:c4:64:30:76:
0d:73:18:eb:f3:aa:cf:45:71:b2:12:c8:74:5c:f5:
9e:ca:6b:60:7b:c2:e9:c5:08:d9:56:6d:3e:bb:24:
84:e1:a9:a1:d4:fd:df:15:eb:2b:ca:59:dd:0e:4b:
30:a2:46:5e:f8:3d:de:25:d7:f3:13:c9:56:77:f8:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:BB:3C:CA:4B:67:3F:4B:1F:B3:63:5C:2E:D4:A9:98:A8:F0:45
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:58:f8:68:b5:38:4d:61:e6:2b:f0:e8:f2:16:ee:ec:16:43:
66:50:a3:90:f2:f0:ac:1a:81:f0:03:13:91:cd:fb:66:7c:bd:
51:a9:4a:63:e3:9e:33:05:a5:3a:df:d4:66:fe:1d:69:ca:c2:
eb:e5:e6:20:90:24:f9:51:ab:70:bd:bf:69:04:af:93:1f:a2:
19:bf:c7:a1:b1:71:6f:df:93:76:fa:8b:96:60:f8:50:a4:b4:
15:73:bb:11:ca:da:aa:af:b7:95:a4:c6:1b:54:23:33:a7:c2:
dc:b8:b9:aa:61:5f:f2:a7:45:7b:3f:07:1c:b9:4e:52:ff:27:
53:93:87:67:6e:d4:06:0e:b5:98:ec:1a:80:ab:1f:7b:ac:8e:
ab:ae:03:ed:c9:5b:34:bf:82:bc:0c:d9:d3:35:03:90:2e:8d:
98:6a:e3:a6:d9:ee:76:78:47:45:37:b3:0a:a9:d0:6d:f8:a8:
d0:7a:20:3f:3f:55:e7:62:7a:5a:dc:61:1a:88:f1:47:63:7f:
9f:d3:70:1a:29:f6:44:fb:5b:85:32:ba:6c:ca:31:e6:bc:03:
6a:a0:70:0d:69:78:ea:5c:3e:cf:93:de:a2:05:2a:77:69:5b:
8e:0d:9e:13:16:f6:7b:28:68:a1:94:93:80:6d:d5:a5:85:ce:
67:8d:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:06:23 2026 by rpki-client