Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: 9RvI/xCIZsUkihyP6K2Knp+7goqFsKu8JB4No3K3Xhc=
Subject key identifier: 9C:12:2F:96:93:0C:BA:15:A7:D0:BA:D8:0E:0F:7E:43:6D:69:DB:39
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 01A0DFBCE8940033CCC0EB9E3FB7CC8BFADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 1A2E
Signing time: Sat 26 Sep 2026 22:01:34 +0000
Manifest this update: Sat 26 Sep 2026 22:01:34 +0000
Manifest next update: Sun 27 Sep 2026 22:01:34 +0000
Files and hashes: 1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: fOCzmbWEA6t6yRcLoH/I0Cku3n0CNbC7hSpl+UgotfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:e8:94:00:33:cc:c0:eb:9e:3f:b7:cc:8b:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Sep 26 22:01:34 2026 GMT
Not After : Sep 27 22:01:34 2026 GMT
Subject: CN=9c122f96930cba15a7d0bad80e0f7e436d69db39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:fe:53:dc:3b:da:fd:e9:78:45:b6:12:2b:
be:e3:a8:8d:d3:29:37:22:b4:08:b0:3a:84:25:21:
ca:58:e4:b4:ef:85:c0:56:8b:b3:47:ca:e3:6a:61:
ce:1f:f3:83:fb:e8:04:04:6c:2e:dc:37:80:19:09:
85:39:15:0c:76:df:52:f7:2e:6e:62:ea:d0:d9:2a:
14:85:f3:31:1e:9c:43:e7:7e:48:e0:b0:46:dd:60:
18:c0:b8:11:b4:97:a1:15:0c:df:66:47:27:97:f1:
da:3a:30:cc:cf:ce:1a:9f:ea:fa:2e:da:13:99:3c:
23:f4:ef:db:37:11:51:c9:44:ea:a5:4d:94:f9:9a:
93:0d:49:35:55:ad:b4:a7:c9:0a:17:71:38:01:fe:
2b:3d:c8:5d:a4:e7:39:ba:7f:96:cb:96:ab:65:c4:
b3:cf:7f:0b:cf:cc:0c:2a:76:17:b9:fd:e9:69:c0:
30:64:76:77:2c:ce:fc:64:7e:71:63:0a:70:b3:50:
a0:df:8b:b9:7e:21:15:0c:89:74:6c:96:b1:d6:2e:
b6:b0:b7:36:9e:49:49:f5:fc:cc:25:ab:42:9f:1e:
2f:e1:57:7d:b3:10:2f:83:cc:f4:06:83:4d:e8:df:
4d:ed:2b:8e:06:b5:a1:e6:a8:4e:3b:f6:1f:b1:0f:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:12:2F:96:93:0C:BA:15:A7:D0:BA:D8:0E:0F:7E:43:6D:69:DB:39
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:96:72:01:40:3c:8d:ae:42:fe:0f:25:18:66:c7:82:c2:8c:
3a:f6:70:af:15:a9:9f:48:b8:e8:4d:6a:e4:e4:6a:e6:35:ea:
05:50:d6:95:88:a0:99:8f:92:b9:00:d6:52:a6:67:9f:8e:c5:
34:49:23:99:42:e7:da:07:32:82:78:f0:12:35:37:d6:1e:3e:
15:2c:d7:22:8f:eb:59:4d:dd:1b:d2:43:91:b4:e8:71:b7:8d:
03:30:82:2c:a9:95:0b:6b:a8:9d:63:8b:db:ac:37:db:ce:b5:
33:fa:fc:ec:17:9c:e0:cf:8e:74:8d:fd:8a:a8:b3:d2:69:be:
e4:e0:91:66:70:f4:c8:73:e2:49:a1:c1:16:0e:3c:3b:9d:84:
bb:5c:73:c2:72:84:51:54:24:ca:ae:5c:bc:cf:b4:49:d3:49:
ee:12:c8:9a:a1:3a:d7:c3:f6:9b:ca:65:08:f6:1f:35:f2:f8:
6f:8f:09:65:d8:34:95:e1:15:74:dc:3a:4d:89:91:1d:02:95:
23:c5:3a:04:50:19:e0:75:05:d3:26:42:73:49:90:9b:6f:5e:
45:39:0a:36:3d:d7:96:51:8e:b5:41:0a:d5:5f:49:b5:e6:de:
36:8e:e6:e1:41:4b:f5:6f:ec:c1:d8:08:72:93:c6:7b:73:62:
94:2f:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:30:22 2026 by rpki-client