Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: lafRWNtO92v41nLSFr4SdZPtY18LZFZchJ+tRcri6q8=
Subject key identifier: 63:29:4F:6C:64:5A:03:4D:01:77:67:81:43:59:42:BB:39:5E:34:08
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 01A125425DE543568539C8E94753A6A2C8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0E4F
Signing time: Sat 10 Oct 2026 10:01:08 +0000
Manifest this update: Sat 10 Oct 2026 10:01:08 +0000
Manifest next update: Sun 11 Oct 2026 10:01:08 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: XLmowrDn65Da1NBOqVT2nsvrAPAJgsP4OZRFhcTdqzE=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:5d:e5:43:56:85:39:c8:e9:47:53:a6:a2:c8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Oct 10 10:01:08 2026 GMT
Not After : Oct 11 10:01:08 2026 GMT
Subject: CN=63294f6c645a034d01776781435942bb395e3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:1a:7b:92:d5:c1:0a:01:da:84:eb:be:cd:
11:10:97:f1:ce:9e:0b:f7:f3:6a:e2:7a:d5:cb:78:
06:4a:23:f9:e0:77:00:d1:99:a3:a9:51:f5:2f:8a:
b6:70:a0:f8:62:ab:0e:70:8e:e4:c4:50:24:75:be:
4d:b7:e5:cc:56:ae:c4:48:6c:82:05:9a:1e:7e:0d:
54:34:46:f2:ad:6e:83:b1:54:81:45:f1:8d:1c:62:
05:70:f0:f2:c2:e2:36:b4:d5:57:52:72:16:30:fd:
be:54:e1:4c:95:4a:fc:1f:38:6e:a2:2a:93:33:40:
72:72:17:6a:28:85:30:ec:14:c4:3d:f8:0f:62:d1:
88:4c:99:81:dc:38:9e:f2:24:ec:25:81:b7:37:c2:
1c:e7:29:ea:39:2a:2a:3f:cf:c1:52:03:6f:f1:1b:
5a:90:a8:10:61:d3:2b:55:30:fd:b6:16:bd:13:66:
72:d5:61:84:90:51:0c:7c:73:90:03:f0:43:01:55:
0b:d9:c1:e7:40:29:b8:15:98:6e:f7:fb:da:a3:dc:
7e:a5:22:0a:5d:e4:73:e6:2c:ff:66:ef:9a:d7:bf:
df:4e:fe:01:de:b5:20:f8:fc:ca:42:80:46:3c:f2:
6e:a7:72:e9:1c:dc:d5:3b:1c:b4:16:2f:95:ce:25:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:4F:6C:64:5A:03:4D:01:77:67:81:43:59:42:BB:39:5E:34:08
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:ca:f4:30:e8:0e:e8:b7:6b:4b:bd:14:78:2f:56:94:0e:
6f:51:37:3d:fd:cf:e5:e2:8f:f7:86:12:ed:92:42:56:03:b6:
37:2a:85:87:04:e8:c9:06:51:6e:6c:fb:45:3a:c2:9b:ce:00:
a2:8b:f6:df:2e:8c:d2:fb:ac:d2:c2:3b:62:f7:97:88:ca:0c:
fd:a2:14:10:4d:c4:c9:98:5c:64:b8:5b:18:16:a7:0a:48:75:
0b:4c:ae:9f:74:11:f5:a2:4c:2d:6b:c8:3e:b5:79:b1:fa:7c:
14:1b:fb:42:28:4f:d5:64:1f:74:91:cb:fc:d1:26:7b:55:05:
b5:54:66:97:ba:ba:cf:c1:bb:32:33:6d:d7:e0:f2:b9:aa:4f:
53:8a:c9:c7:0b:cf:52:4b:48:bb:14:c1:1c:cc:6b:65:6e:54:
32:e8:da:12:cc:9a:a3:00:0f:61:9d:28:48:9a:bf:a2:8b:d5:
52:d6:fa:75:79:66:c6:82:a7:4f:e9:7c:e2:a9:2d:df:5a:79:
c5:7d:4e:6e:50:b7:1b:d3:5c:7e:8f:63:a0:78:fa:66:d0:80:
0f:39:ca:e0:76:59:9f:36:1c:bc:92:98:87:f7:f6:43:2c:d9:
d6:2c:b2:b2:d4:7c:2e:94:22:e0:f7:ee:3d:01:e5:02:74:a8:
c2:37:0b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElQl3lQ1aFOcjpR1OmosipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjYxMDEwMTAwMTA4WhcNMjYxMDExMTAwMTA4WjAzMTEwLwYDVQQD
Eyg2MzI5NGY2YzY0NWEwMzRkMDE3NzY3ODE0MzU5NDJiYjM5NWUzNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFEae5LVwQoB2oTrvs0REJfxzp4L
9/Nq4nrVy3gGSiP54HcA0ZmjqVH1L4q2cKD4YqsOcI7kxFAkdb5Nt+XMVq7ESGyC
BZoefg1UNEbyrW6DsVSBRfGNHGIFcPDywuI2tNVXUnIWMP2+VOFMlUr8HzhuoiqT
M0BychdqKIUw7BTEPfgPYtGITJmB3Die8iTsJYG3N8Ic5ynqOSoqP8/BUgNv8Rta
kKgQYdMrVTD9tha9E2Zy1WGEkFEMfHOQA/BDAVUL2cHnQCm4FZhu9/vao9x+pSIK
XeRz5iz/Zu+a17/fTv4B3rUg+PzKQoBGPPJup3LpHNzVOxy0Fi+VziVHzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMpT2xkWgNNAXdngUNZQrs5XjQIMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg7K9DDo
Dui3a0u9FHgvVpQOb1E3Pf3P5eKP94YS7ZJCVgO2NyqFhwToyQZRbmz7RTrCm84A
oov23y6M0vus0sI7YveXiMoM/aIUEE3EyZhcZLhbGBanCkh1C0yun3QR9aJMLWvI
PrV5sfp8FBv7QihP1WQfdJHL/NEme1UFtVRml7q6z8G7MjNt1+DyuapPU4rJxwvP
UktIuxTBHMxrZW5UMujaEsyaowAPYZ0oSJq/oovVUtb6dXlmxoKnT+l84qkt31p5
xX1OblC3G9Ncfo9joHj6ZtCADznK4HZZnzYcvJKYh/f2QyzZ1iyystR8LpQi4Pfu
PQHlAnSowjcL1g==
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:13:40 2026 by rpki-client