Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: A7L85CRph3pIj8PgOXET9zz0ejSlcJrS8O2RFob4ZwY=
Subject key identifier: 10:C1:4F:A9:B4:5F:80:5C:7D:F0:96:62:02:6E:2D:66:02:B4:0A:88
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 01A10701A7F724CDEAA39FF88577528C3203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 17F9
Signing time: Sun 04 Oct 2026 13:01:51 +0000
Manifest this update: Sun 04 Oct 2026 13:01:51 +0000
Manifest next update: Mon 05 Oct 2026 13:01:51 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: GwiIBPEvOXJRpD7XBjJP+9L89a+HYr0AdUYd/k5uIas=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:a7:f7:24:cd:ea:a3:9f:f8:85:77:52:8c:32:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Oct 4 13:01:51 2026 GMT
Not After : Oct 5 13:01:51 2026 GMT
Subject: CN=10c14fa9b45f805c7df09662026e2d6602b40a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:4b:ac:27:ca:a5:2b:9d:34:3a:3e:d9:4c:
2d:0d:fe:b8:08:d7:45:fe:6e:25:44:6a:80:b9:d4:
a9:c6:55:03:e6:fa:6a:71:9b:33:d9:a4:b0:8a:6e:
f6:d6:86:33:9a:d1:3d:b4:92:fa:42:7b:29:62:43:
dd:b3:40:35:4c:73:19:2b:6f:14:23:9b:94:f4:69:
d5:bf:b2:65:2b:87:7c:f1:22:70:06:41:b6:92:e4:
ec:00:17:7b:53:66:4e:62:d8:af:d1:ae:3f:7a:b1:
a0:40:3e:7c:ce:d4:d9:21:ad:5f:60:38:8e:96:c2:
f5:24:cd:81:a1:db:2a:c0:f3:b7:a8:65:96:bb:6e:
c9:9c:0f:54:dc:72:19:51:29:a3:10:16:b7:18:4a:
a1:a9:af:ac:b7:d8:3b:2e:66:6e:75:8d:a4:53:a4:
64:95:4c:db:b8:74:18:2d:fa:88:b5:6c:e0:74:71:
ef:dc:6f:f6:a2:4d:ea:56:db:48:0b:7a:3d:20:05:
49:78:0d:0f:0a:ad:fa:5f:cc:32:9b:75:1b:b9:4e:
92:f9:19:13:95:49:c9:dc:f7:0d:34:85:b7:7c:d0:
4a:34:5a:d0:a9:96:1f:00:25:70:26:8a:cf:90:64:
2c:e2:17:43:d1:2f:df:40:9d:20:4e:2c:5c:a7:6e:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C1:4F:A9:B4:5F:80:5C:7D:F0:96:62:02:6E:2D:66:02:B4:0A:88
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:f7:58:01:10:4b:1c:3d:3d:48:5d:c5:64:30:4a:30:8b:
a8:48:fd:27:6a:a0:ac:13:33:7f:99:25:cb:46:28:bc:46:f9:
00:df:51:59:35:5e:46:37:e6:d9:06:a7:4d:6d:63:a3:ce:43:
2e:c9:32:55:6e:63:23:82:25:20:37:ca:16:a2:e1:54:3b:26:
be:0e:3f:eb:63:74:57:f9:94:17:d6:11:ba:03:b7:be:40:31:
54:72:a2:b1:a5:16:3f:2b:e7:45:e5:15:a9:14:07:79:54:3e:
34:19:f1:dd:1b:2b:e2:4b:4a:ec:b0:17:fa:c7:c2:95:19:31:
8c:23:c9:56:19:ad:9c:e7:99:82:83:0c:e9:c8:a1:d1:c3:9a:
24:9e:5f:28:27:a7:a7:25:c4:da:b1:94:72:33:1c:0a:02:06:
1e:a6:82:15:41:2d:95:5c:93:e9:32:85:b8:db:de:48:79:d3:
75:de:99:4f:85:65:38:f5:7a:8b:3c:ee:69:69:78:3a:83:a6:
50:c7:40:cc:e3:ea:ef:91:4b:7a:f8:85:8e:31:90:99:f2:38:
8c:20:34:9c:d1:c5:08:16:c4:de:cf:9d:a8:fd:e8:e6:ac:9d:
39:41:a4:16:b9:27:e4:12:3b:49:41:12:f6:f3:ff:f5:e6:0a:
58:91:45:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHAaf3JM3qo5/4hXdSjDIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5
NWEzZjAwHhcNMjYxMDA0MTMwMTUxWhcNMjYxMDA1MTMwMTUxWjAzMTEwLwYDVQQD
EygxMGMxNGZhOWI0NWY4MDVjN2RmMDk2NjIwMjZlMmQ2NjAyYjQwYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUZLrCfKpSudNDo+2UwtDf64CNdF
/m4lRGqAudSpxlUD5vpqcZsz2aSwim721oYzmtE9tJL6QnspYkPds0A1THMZK28U
I5uU9GnVv7JlK4d88SJwBkG2kuTsABd7U2ZOYtiv0a4/erGgQD58ztTZIa1fYDiO
lsL1JM2BodsqwPO3qGWWu27JnA9U3HIZUSmjEBa3GEqhqa+st9g7LmZudY2kU6Rk
lUzbuHQYLfqItWzgdHHv3G/2ok3qVttIC3o9IAVJeA0PCq36X8wym3UbuU6S+RkT
lUnJ3PcNNIW3fNBKNFrQqZYfACVwJorPkGQs4hdD0S/fQJ0gTixcp24ucQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDBT6m0X4BcffCWYgJuLWYCtAqIMB8GA1UdIwQY
MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct
Y2E1MWZiNDA4OTAxLzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx
LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACh73WAEQ
Sxw9PUhdxWQwSjCLqEj9J2qgrBMzf5kly0YovEb5AN9RWTVeRjfm2QanTW1jo85D
LskyVW5jI4IlIDfKFqLhVDsmvg4/62N0V/mUF9YRugO3vkAxVHKisaUWPyvnReUV
qRQHeVQ+NBnx3Rsr4ktK7LAX+sfClRkxjCPJVhmtnOeZgoMM6cih0cOaJJ5fKCen
pyXE2rGUcjMcCgIGHqaCFUEtlVyT6TKFuNveSHnTdd6ZT4VlOPV6izzuaWl4OoOm
UMdAzOPq75FLeviFjjGQmfI4jCA0nNHFCBbE3s+dqP3o5qydOUGkFrkn5BI7SUES
9vP/9eYKWJFF5w==
-----END CERTIFICATE-----
Generated at Mon Oct 5 00:32:02 2026 by rpki-client