Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: eUOQgYYOTMIp5/H5W2W8i0CUwiH6tXUw6EPGMKZSelU=
Subject key identifier: 2C:34:B8:EF:7A:01:78:46:E9:A8:4A:6E:06:11:4C:E9:15:1D:89:CB
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 01A0D916FABBA500DEBBD16C42544BC6B76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 1A55
Signing time: Fri 25 Sep 2026 15:02:36 +0000
Manifest this update: Fri 25 Sep 2026 15:02:36 +0000
Manifest next update: Sat 26 Sep 2026 15:02:36 +0000
Files and hashes: 1: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (hash: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: esisIBxeIxJUtfsWzP1talcxyB4lcEBW/53f0uiUFlw=)
3: jCfveam_XFqY1WaoDM8mc53l0-A.roa (hash: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:16:fa:bb:a5:00:de:bb:d1:6c:42:54:4b:c6:b7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Sep 25 15:02:36 2026 GMT
Not After : Sep 26 15:02:36 2026 GMT
Subject: CN=2c34b8ef7a017846e9a84a6e06114ce9151d89cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:45:1a:e6:90:4d:dc:34:34:dd:39:9c:88:
0d:55:ae:5c:22:0c:56:ad:f3:02:f6:c3:88:d1:8b:
4a:e0:99:a4:cb:7b:16:dd:5f:ed:ed:a5:ba:a8:bf:
85:08:2c:e6:26:7a:b2:13:a5:72:5c:11:b3:4e:54:
d1:ab:a7:63:2f:f0:11:f5:8c:a1:31:d0:c7:17:51:
b8:dc:de:0e:56:da:a1:52:d6:33:8c:6a:ca:9b:86:
0c:94:a9:6f:58:66:03:62:46:84:0b:94:07:48:8a:
cd:42:9e:9a:5a:e3:87:eb:a8:90:aa:b4:4c:10:6b:
6a:1b:aa:76:69:20:33:94:0e:25:53:49:08:91:af:
7a:5d:75:fa:22:38:4f:28:15:e7:00:51:fb:0d:0c:
37:ea:75:8c:92:6b:31:9b:df:93:d2:b5:70:33:b4:
0b:ae:aa:0f:72:7f:96:9a:30:1e:5b:04:79:13:db:
20:c8:21:1b:1d:70:5b:70:b4:10:5a:5c:f6:6c:a9:
c3:2b:b6:fe:09:66:7d:88:10:d4:9e:eb:a8:11:1c:
81:4b:61:f3:a8:3a:f5:58:11:62:5d:4b:e1:4e:86:
65:74:55:37:00:4e:ba:86:12:71:dd:57:30:f8:f8:
10:8d:89:da:49:cb:66:48:4e:d2:85:1f:67:81:20:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:B8:EF:7A:01:78:46:E9:A8:4A:6E:06:11:4C:E9:15:1D:89:CB
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4b:c2:a1:d1:26:b0:41:87:7a:de:4a:bc:a3:7c:c5:57:c1:
b2:a6:b0:6d:cb:6c:ac:28:9f:88:2f:33:38:5d:80:5f:17:03:
d6:05:74:3a:0b:16:06:0b:62:b6:88:4c:55:5c:db:11:ef:3a:
89:72:86:a8:e4:08:b3:77:68:5d:9c:16:88:f8:af:a9:f4:f1:
ae:cb:5e:42:40:a5:d3:c6:ea:99:75:3a:27:77:fd:97:5f:db:
b2:7d:e7:18:43:7a:ee:90:70:45:e9:5d:e8:36:dc:79:e8:a2:
af:91:66:33:6d:69:66:c0:a0:bb:ad:80:72:31:9e:4e:f6:92:
5a:fe:79:52:3f:1a:81:9b:93:05:9d:01:b0:51:df:ad:13:55:
ee:e2:9f:01:56:b1:0a:7c:02:cd:3f:06:dc:3e:85:2a:04:37:
63:ed:6f:ad:99:ba:3b:1b:9b:04:83:b0:94:6d:99:8b:c1:9b:
b9:a2:c3:28:77:b4:73:80:32:a7:ea:66:0c:78:a5:b0:cb:70:
55:af:8e:d4:2a:ac:21:ba:cc:09:d3:7a:74:99:74:9a:2e:dc:
82:f5:00:d4:0c:a4:ed:16:e7:9f:91:be:c7:9b:68:78:0b:be:
d0:6e:1d:63:b7:88:80:88:b6:60:b7:30:c3:8f:79:fa:52:d2:
c2:05:ba:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZFvq7pQDeu9FsQlRLxrduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1
ZjhjMzMwHhcNMjYwOTI1MTUwMjM2WhcNMjYwOTI2MTUwMjM2WjAzMTEwLwYDVQQD
EygyYzM0YjhlZjdhMDE3ODQ2ZTlhODRhNmUwNjExNGNlOTE1MWQ4OWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrBFGuaQTdw0NN05nIgNVa5cIgxW
rfMC9sOI0YtK4Jmky3sW3V/t7aW6qL+FCCzmJnqyE6VyXBGzTlTRq6djL/AR9Yyh
MdDHF1G43N4OVtqhUtYzjGrKm4YMlKlvWGYDYkaEC5QHSIrNQp6aWuOH66iQqrRM
EGtqG6p2aSAzlA4lU0kIka96XXX6IjhPKBXnAFH7DQw36nWMkmsxm9+T0rVwM7QL
rqoPcn+WmjAeWwR5E9sgyCEbHXBbcLQQWlz2bKnDK7b+CWZ9iBDUnuuoERyBS2Hz
qDr1WBFiXUvhToZldFU3AE66hhJx3Vcw+PgQjYnaSctmSE7ShR9ngSAI+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw0uO96AXhG6ahKbgYRTOkVHYnLMB8GA1UdIwQY
MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt
YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0
LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUvCodEm
sEGHet5KvKN8xVfBsqawbctsrCifiC8zOF2AXxcD1gV0OgsWBgtitohMVVzbEe86
iXKGqOQIs3doXZwWiPivqfTxrsteQkCl08bqmXU6J3f9l1/bsn3nGEN67pBwReld
6Dbceeiir5FmM21pZsCgu62AcjGeTvaSWv55Uj8agZuTBZ0BsFHfrRNV7uKfAVax
CnwCzT8G3D6FKgQ3Y+1vrZm6OxubBIOwlG2Zi8GbuaLDKHe0c4Ayp+pmDHilsMtw
Va+O1CqsIbrMCdN6dJl0mi7cgvUA1Ayk7Rbnn5G+x5toeAu+0G4dY7eIgIi2YLcw
w495+lLSwgW6EA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:18:03 2026 by rpki-client