Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: G/lDW8uhZuljMMihVN1t/et9jU/V/I+b7RH4tML3yDI=
Subject key identifier: B5:82:7A:15:D0:F4:E7:51:62:91:10:30:44:14:6C:7E:E2:7E:30:D9
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 01A0DC1796822CBD795228EB6C5E6770C7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0F9B
Signing time: Sat 26 Sep 2026 05:02:08 +0000
Manifest this update: Sat 26 Sep 2026 05:02:08 +0000
Manifest next update: Sun 27 Sep 2026 05:02:08 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: c3/ozgwPGyfd35fP0tUQKgDJN1rcwzDKysB+ahmeDtA=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:96:82:2c:bd:79:52:28:eb:6c:5e:67:70:c7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Sep 26 05:02:08 2026 GMT
Not After : Sep 27 05:02:08 2026 GMT
Subject: CN=b5827a15d0f4e7516291103044146c7ee27e30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:b3:c8:2b:ae:07:a5:07:30:89:cb:e8:cb:
22:ad:47:80:f9:93:0e:3e:0f:f4:41:ca:5b:e7:89:
fd:a8:ac:e2:63:cb:12:00:06:15:be:ed:24:93:25:
5d:28:5a:c8:fb:72:28:b7:3c:2f:1f:79:2b:4d:36:
f1:f3:70:de:1a:d1:89:d6:42:e8:3a:2e:b3:49:1e:
c2:bd:c7:08:8f:bb:db:76:6d:83:53:d0:0c:7a:5f:
ac:86:6b:57:50:0b:f0:98:e7:f1:28:ac:16:a5:fe:
c1:d4:6f:f6:0c:1f:ea:1a:96:3a:cb:08:9a:19:32:
e8:59:55:fe:2d:70:f5:d9:00:f6:34:34:36:03:84:
18:71:3f:ef:8a:09:ea:b1:7f:4d:7b:9a:e4:82:bd:
6c:9e:59:f0:a9:20:5d:9f:48:9b:ec:01:a5:30:49:
51:1f:02:5b:5f:62:3c:22:3b:e0:b9:98:d7:75:7b:
c8:6b:b5:47:0f:b1:91:d6:e9:b0:56:59:86:49:bb:
f4:7f:b9:f7:e9:31:9d:6e:b5:ef:1d:80:5e:06:92:
a1:b0:ad:7c:27:bc:16:8c:50:51:09:3a:de:54:1b:
75:29:02:29:58:b7:65:08:5f:20:c6:d9:7b:e8:8c:
ea:d7:c8:b5:d3:cb:40:5c:9a:97:f8:41:c1:e3:34:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:82:7A:15:D0:F4:E7:51:62:91:10:30:44:14:6C:7E:E2:7E:30:D9
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f1:28:56:7d:fd:34:2f:2a:27:9f:09:4e:f3:09:26:fa:3c:
6d:76:74:43:92:5b:69:a5:7e:54:61:af:e1:40:4a:5d:fa:b3:
ae:d4:2b:ec:5c:6e:83:97:bb:40:cd:45:80:c2:21:b5:16:c3:
87:56:0e:1f:2f:30:c0:89:59:de:7b:08:fb:1d:60:f0:66:20:
6f:e2:ee:05:dc:34:e9:7d:7f:ab:21:15:11:6f:d9:6e:c9:4b:
52:df:c1:b8:e8:ca:7e:42:cf:79:c9:b5:ad:93:3b:ac:5f:a2:
94:5c:da:e1:61:dd:d9:67:9b:7c:e7:d0:b0:38:59:04:d4:fb:
c7:c3:4c:01:85:f5:3a:12:b3:2a:d5:71:b0:a2:69:3a:58:90:
b8:6a:2f:db:ea:ab:03:03:45:b5:01:60:c8:f6:e1:be:6b:93:
b0:32:30:ca:fa:f0:94:f8:d0:53:27:9e:c3:92:a2:e5:0a:91:
55:a3:59:10:f9:65:97:d6:6a:ea:14:3a:4d:43:00:87:98:f4:
0f:56:83:89:49:dc:44:fa:c2:a5:6d:60:53:f6:76:e0:b9:11:
b6:b6:ff:19:34:9c:63:84:9e:8c:5f:44:fd:88:b3:e6:93:c2:
af:f7:e3:11:1d:39:f5:39:6d:2f:26:40:9e:63:0e:be:ad:57:
2a:7d:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:34:43 2026 by rpki-client