Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: eL9pheUKIqKE37fI0A7HP/ClbLiUk4UYrwfK+2/m/XQ=
Subject key identifier: 1C:A7:5A:D1:29:AA:EB:64:7D:4D:E4:7E:C7:11:19:60:A9:64:90:7D
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 01A0E3D03C0340BE5343243176DF3117E6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 17:01:09 +0000
Manifest this update: Sun 27 Sep 2026 17:01:09 +0000
Manifest next update: Mon 28 Sep 2026 17:01:09 +0000
Files and hashes: 1: 6q90Ylcr_bTouVL-1y_wxNRsyCw.roa (hash: mNmL0Z1TdYTnC1LviNwI9MUlQwclOYrlF6P0bTcPytQ=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: Bugg18sflt32AdVsEBDXdVeCNoHPh7vr72Ih5gQ8Erk=)
3: js6Pq6wBoWvKTyUwxz0skM29Qco.roa (hash: Y4NrXbk6igcwSNPM65V1DQWV2gXoGtbHhjuHToI9XM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:3c:03:40:be:53:43:24:31:76:df:31:17:e6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Sep 27 17:01:09 2026 GMT
Not After : Sep 28 17:01:09 2026 GMT
Subject: CN=1ca75ad129aaeb647d4de47ec7111960a964907d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:4d:7e:c2:a8:33:1b:10:9c:56:7a:76:e2:
ed:97:e6:58:69:23:c6:ff:a7:6e:83:89:70:6f:20:
56:82:e0:c5:c3:90:94:ad:b8:72:70:4f:dd:09:d0:
c6:79:32:03:f0:34:6a:73:3a:bc:c4:bf:a8:2f:a4:
64:b3:a0:9e:a1:fd:f4:49:37:ad:67:04:8b:7b:2d:
81:70:e8:f3:05:11:f3:9a:ec:54:4d:76:e4:98:66:
65:ad:dc:91:cc:5a:d7:3c:94:3d:5f:e3:0d:d8:17:
dc:87:bf:b6:da:1e:4d:d1:8f:46:c9:8d:94:86:4e:
40:03:cf:8b:e4:9f:09:86:ea:6a:06:8e:f2:59:d5:
24:e8:5d:73:8e:26:88:59:92:d3:9c:85:b2:30:33:
64:81:d9:e4:6f:7f:8b:61:26:85:5f:ae:16:47:5b:
06:ae:fd:85:5b:de:cd:7a:59:6f:d4:85:32:5b:68:
d1:07:30:fe:d1:11:94:d1:84:8a:ef:80:12:56:70:
39:37:8e:39:8c:48:92:e8:fb:34:11:e7:5e:18:98:
d8:e6:37:af:56:0a:dc:18:a4:c0:84:28:ad:18:d0:
af:55:74:55:50:1d:fd:4a:00:f7:c6:20:17:ba:c1:
26:b5:e1:75:c4:da:d0:2b:93:77:9e:62:d5:84:3b:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:5A:D1:29:AA:EB:64:7D:4D:E4:7E:C7:11:19:60:A9:64:90:7D
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3a:d4:ab:6e:ff:89:8d:7d:52:5a:01:ec:fb:b4:6e:ce:82:
80:ca:90:a9:ed:09:33:a8:16:00:96:89:67:85:ad:0a:09:27:
aa:b4:99:49:d4:76:d0:2f:44:e6:97:4e:d5:24:09:9e:8d:0a:
df:6d:b7:35:4e:ae:b3:5f:6b:79:78:ff:a0:bf:ef:d2:9d:9e:
74:46:49:8f:29:36:f9:59:00:a3:a1:5d:a0:d2:c2:1e:a4:d0:
e1:25:05:51:81:8d:a4:15:08:45:60:b2:58:e3:5f:db:00:05:
bf:56:9c:c6:52:4f:6d:0c:4a:c7:92:2b:e9:d5:6b:f3:13:c5:
01:93:81:01:21:03:7d:25:e4:db:3c:bd:9c:2c:e7:d3:6b:c8:
2b:68:6b:69:ae:b8:29:94:ef:1b:12:a3:f0:0a:f8:79:9c:76:
ef:75:e8:33:f5:dd:67:3e:eb:e1:dd:a4:a7:91:aa:86:9d:d0:
9b:22:6d:83:86:29:83:30:98:c0:90:e7:0b:10:88:b4:c4:2c:
5c:f6:05:0d:0a:cc:1c:e5:4e:18:f2:8d:34:2c:1a:4f:e0:d5:
4e:f6:d7:55:df:27:91:fc:85:58:e2:0f:87:b0:82:94:71:d1:
28:d2:3a:2a:73:7e:a4:9f:e1:a1:79:c0:71:66:4a:67:0c:4e:
03:e5:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:26:26 2026 by rpki-client