Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: HDcU9MgQilw1a6pGfNrmRIZ1jjYCnf9nAz2fGUN1ei8=
Subject key identifier: 77:EE:E7:03:55:74:38:46:6D:71:A3:7D:68:B2:10:41:A0:F9:33:C3
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 01A0C28CE4C6B3763045117F0C75626E5E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 06:00:08 +0000
Manifest this update: Mon 21 Sep 2026 06:00:08 +0000
Manifest next update: Tue 22 Sep 2026 06:00:08 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: vRmOhQOqYly4W4/of2j03p5O+/zbmWqP2wMAsamvsKQ=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8c:e4:c6:b3:76:30:45:11:7f:0c:75:62:6e:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Sep 21 06:00:08 2026 GMT
Not After : Sep 22 06:00:08 2026 GMT
Subject: CN=77eee703557438466d71a37d68b21041a0f933c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:e5:f4:d9:4d:bd:81:a4:87:25:46:e0:da:
26:87:33:a2:65:32:46:41:f4:5d:72:52:cf:07:73:
df:e4:72:5b:b7:d4:ec:5f:e6:29:6a:49:bc:ca:af:
cf:ad:2f:e0:b7:48:9d:3a:9f:f0:a9:60:ce:62:0c:
6a:45:c8:c9:0f:3c:ed:30:cb:f6:9a:87:eb:83:32:
e8:68:e8:03:72:c2:cf:34:9c:0b:70:b2:44:d2:47:
1c:55:99:4f:02:42:b7:af:88:ea:40:c1:73:c4:b0:
5c:38:a9:8b:6b:ab:15:7d:80:81:79:a2:b1:5d:94:
d3:b0:90:56:b7:31:db:97:d0:93:da:ef:81:a3:72:
fe:c9:ca:bd:29:ee:25:70:0e:8c:fb:82:0d:28:4c:
b7:f1:2b:c1:08:3e:15:8d:df:23:02:09:77:93:d5:
05:b0:5a:a0:b8:b0:0e:21:51:12:eb:18:e1:73:b0:
86:2e:c2:38:fb:33:f3:c0:54:71:75:d2:ec:33:c3:
13:58:c9:ee:b6:df:54:f8:c6:9f:c4:f5:04:11:60:
6b:b7:69:2d:4e:5f:4b:8b:3d:86:90:6b:01:32:c1:
89:83:03:e0:ef:39:b3:0f:05:f3:31:3d:39:3c:49:
a0:ba:f4:11:5f:89:90:6b:e0:38:73:b5:99:c7:c6:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:E7:03:55:74:38:46:6D:71:A3:7D:68:B2:10:41:A0:F9:33:C3
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6a:c1:0f:f8:70:58:d1:ba:b5:cc:94:d9:40:af:82:81:44:
7e:70:85:8a:c1:8d:e6:d4:81:24:5e:04:1f:6f:80:08:5c:ea:
eb:e6:4e:7a:3c:22:2d:6f:76:82:d5:de:e9:ec:9a:58:76:b7:
73:96:d7:29:21:b7:9d:70:96:df:e2:16:ad:9f:be:b8:99:07:
85:69:5c:3f:5c:fb:38:d0:3a:d0:8e:2b:13:a1:9f:58:cd:58:
c3:e7:ff:e4:e5:57:21:f0:b2:28:b0:22:78:7e:f4:fa:08:31:
eb:53:78:31:69:4d:a8:66:64:38:68:69:a2:e9:3c:d1:39:21:
d4:80:f6:60:bf:c0:0d:a6:01:d3:96:fa:c8:9a:9a:ba:07:23:
47:1a:06:dc:83:c1:98:76:a7:51:71:62:20:47:37:be:97:68:
15:0d:d0:e0:f4:bd:75:d2:e1:fa:c2:03:86:e6:00:ee:67:b5:
f6:44:1c:e6:8c:c7:2a:63:15:b2:37:02:73:92:43:1a:dc:48:
1f:b6:d9:e4:56:42:30:4c:a1:c6:f0:ed:da:1f:e4:e0:3c:c4:
05:3b:e2:9c:bd:1f:65:2d:68:97:dd:ee:19:7b:7c:22:09:a2:
8a:6d:1e:46:be:0a:91:cd:6a:28:a5:17:ab:97:de:28:89:04:
ec:12:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:46:44 2026 by rpki-client