Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: qHtmsFUr506nDcN/SBcXOM3wn26t2UHARHQLWAdnNzk=
Subject key identifier: CA:E3:62:0D:05:6E:94:B6:13:9D:64:63:19:AB:9D:56:AC:30:56:D6
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 01A120CFDB5F5698CF2B00189088A0E27045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 1646
Signing time: Fri 09 Oct 2026 13:17:35 +0000
Manifest this update: Fri 09 Oct 2026 13:17:35 +0000
Manifest next update: Sat 10 Oct 2026 13:17:35 +0000
Files and hashes: 1: IMFLS8lmXO1X5kPh5brIEnkKfS4.roa (hash: w30MlBbSWaBo/k7+866HLmrY83fawU5Z9usPbYOh250=)
2: KFcD1h4L_G8ScWzN8eGOJ4t-Qtc.roa (hash: TaFzfCuigili4/ZSeSfEvZ1iwT66Wr4/5WkW29ITLQk=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: CiBFE4WY/zkrSRBdYuWb0f3Ih07vIpdO+NSdScRYEu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:cf:db:5f:56:98:cf:2b:00:18:90:88:a0:e2:70:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Oct 9 13:17:35 2026 GMT
Not After : Oct 10 13:17:35 2026 GMT
Subject: CN=cae3620d056e94b6139d646319ab9d56ac3056d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:9e:24:37:8c:ef:51:b5:bd:e7:6f:eb:8e:
be:16:41:98:ef:30:6d:74:c5:f0:08:88:18:ed:0e:
ec:ba:25:23:4b:6d:6f:e9:eb:d1:79:ab:9f:6e:f5:
65:b6:6e:36:96:32:aa:d3:fd:e0:b3:3e:f0:b1:30:
23:50:2b:57:81:1c:4d:ca:90:ef:91:2a:64:be:8a:
6b:65:77:bd:84:50:6b:d4:b4:34:db:9b:96:df:0c:
b8:fa:07:b4:69:2f:7f:41:9f:23:3c:cc:a6:36:5f:
b2:85:86:03:8e:f5:d7:1e:8a:62:df:8d:43:37:e6:
b6:6e:53:25:81:38:da:6d:2b:c0:51:e8:5b:59:e6:
95:4b:e1:a2:08:76:3d:cd:9c:a5:80:7f:7f:24:d2:
2a:54:48:89:a2:af:45:09:70:dd:b6:d7:e8:65:76:
2a:b3:f1:8c:39:aa:88:c7:cb:4d:94:82:82:16:8c:
29:8e:08:64:e7:34:cf:4b:36:65:3e:6f:06:9a:d7:
81:f4:93:84:ee:67:69:27:61:33:af:20:4a:e0:e9:
34:f2:3c:73:2c:eb:f5:66:85:e7:3b:c3:61:5c:cd:
ad:21:7e:4f:2e:20:2b:8c:fa:2e:86:8b:f0:66:39:
f2:8e:a6:1c:6d:d1:52:20:ed:2b:a1:75:68:fe:ad:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:62:0D:05:6E:94:B6:13:9D:64:63:19:AB:9D:56:AC:30:56:D6
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9d:70:ce:1a:8d:ae:f0:a7:ae:a9:ff:b7:aa:5c:50:31:df:
b8:5e:74:9d:dc:21:76:de:f4:23:16:d7:43:47:76:c8:79:9f:
45:55:9b:13:0a:de:1f:72:4f:4c:61:ad:d5:b5:e9:11:69:f1:
33:2d:9a:52:0f:ac:79:99:17:87:56:69:92:69:b0:9f:cb:69:
14:3d:d7:b3:7c:48:15:06:0e:13:36:61:1d:bc:66:48:bc:92:
90:fa:92:d5:0a:f3:d2:bf:f7:7c:7c:bd:64:71:6e:10:44:54:
b3:3d:09:6d:c3:a7:a6:0b:39:42:0e:37:a3:47:c1:61:ca:93:
30:26:f5:8e:a6:ec:3a:b9:3f:7b:f9:46:df:82:29:82:5e:1c:
39:f4:ea:0d:d7:44:4c:00:56:88:92:21:ab:55:35:d0:58:1f:
32:f4:45:ae:b2:06:9d:c4:8c:38:0a:bc:17:0e:47:b4:86:a4:
12:4a:45:2b:bd:c8:e3:9e:12:5e:81:81:9b:2a:76:0d:c9:a1:
d0:62:31:1c:d1:e1:71:b2:5d:0a:67:a0:e6:5b:9e:22:1f:ae:
3b:17:c7:c6:88:6d:44:4c:0f:af:e7:56:f7:6c:e3:64:13:b3:
6c:08:66:c1:59:a9:fd:89:50:0a:fd:7e:80:69:93:1a:bb:c5:
b2:b3:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:40:01 2026 by rpki-client