Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: Ivp3J6+9pgvqUCH/VPIBTYFJRQ5E8T9+Fevz/dpKmrg=
Subject key identifier: 25:4C:7C:6A:06:B1:95:9E:37:C4:42:A5:D2:E1:A6:33:7E:AA:48:C7
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 01A0D5023708C2EA6A53BA4ED7837B3BAC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 20:01:27 +0000
Manifest this update: Thu 24 Sep 2026 20:01:27 +0000
Manifest next update: Fri 25 Sep 2026 20:01:27 +0000
Files and hashes: 1: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (hash: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: rZoYu00f07/v4ne05TNrAZGcGgDxQybmbl90HG7ehVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:37:08:c2:ea:6a:53:ba:4e:d7:83:7b:3b:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Sep 24 20:01:27 2026 GMT
Not After : Sep 25 20:01:27 2026 GMT
Subject: CN=254c7c6a06b1959e37c442a5d2e1a6337eaa48c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:5e:d5:5a:7a:ce:f2:53:9e:a4:26:5b:56:
7d:5e:66:d6:ea:a2:c8:47:f9:7e:91:36:b8:04:fc:
41:43:e3:c6:fc:c6:fe:12:a6:f1:61:72:83:ed:22:
77:e9:93:46:ba:1a:cf:51:cd:c3:63:f4:28:7b:b3:
75:88:a5:b9:e4:63:fc:11:b9:88:b5:5e:e9:d1:d2:
cd:4a:3b:df:a0:44:ae:fd:08:0c:8e:b5:53:15:c4:
41:a6:34:da:e8:c9:a9:8b:41:20:68:3f:38:f2:2c:
f1:f5:6b:ae:13:16:bb:5d:6a:71:42:18:eb:11:13:
35:bf:3c:37:5a:e6:e6:3b:73:73:2d:53:be:93:ee:
0c:5b:88:2d:09:61:af:e4:4c:cf:fe:e7:04:7d:c8:
c7:6a:e9:f0:aa:9f:e5:a3:de:c9:bd:e7:f4:28:cf:
9a:40:f3:e5:f9:bc:a7:31:41:be:03:0e:72:55:d5:
4c:9d:75:24:e8:af:51:2e:fa:fa:ce:8e:71:02:c9:
79:14:82:3f:8e:57:f1:fc:21:c8:12:24:30:3a:e9:
19:a7:c9:59:c4:99:1d:1e:06:cc:d7:8f:0a:47:35:
14:b2:bc:09:79:9d:e1:af:e4:1a:5b:d6:49:09:d5:
76:3b:29:2b:4a:da:b8:6e:d2:38:ce:38:d3:f9:cf:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:7C:6A:06:B1:95:9E:37:C4:42:A5:D2:E1:A6:33:7E:AA:48:C7
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f3:d4:07:f4:b0:2f:f4:79:6d:c3:89:50:38:4f:67:ac:06:
94:d9:cb:66:9f:2a:a8:aa:62:37:a4:f8:48:7e:6e:42:77:f8:
d7:af:fb:75:fa:cb:ce:e6:81:1c:33:7d:63:64:90:25:fa:33:
21:2d:16:4f:df:af:8b:4b:80:32:77:9d:c8:bf:28:2e:56:63:
0a:d1:6a:ac:ce:b9:08:28:98:1d:5c:18:0c:a2:a2:0b:f7:19:
1c:87:f0:b1:c0:79:3e:47:4a:7d:7d:fa:a4:2f:64:b5:75:da:
65:c7:6c:bc:b7:0a:8b:7c:00:af:eb:3b:54:57:82:0b:22:1d:
f9:86:03:60:62:c9:7d:4c:6b:40:a6:7d:91:1b:41:96:9c:62:
60:53:bc:0e:a0:f4:01:9a:be:73:a1:0b:30:5b:38:00:65:c8:
52:86:c0:ec:4d:e3:92:f9:72:08:c6:ed:df:47:1b:f2:11:66:
6d:fc:5f:cf:32:59:06:c0:47:90:02:3d:42:66:2d:28:0b:ab:
05:3d:2e:3c:eb:2a:3a:ef:9c:52:8c:f6:c4:e5:10:d0:31:45:
bf:40:a9:7f:64:4d:4c:07:6c:20:80:a2:0f:cd:06:d1:42:3e:
90:f0:73:e0:41:c7:aa:90:74:0a:17:93:22:7c:43:09:c9:dd:
92:60:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:43:07 2026 by rpki-client