Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: 5opEG25/a5Elm5+V5Oqw+tmy+TctUWpjeqMzPfGDWaQ=
Subject key identifier: 5A:30:EC:5E:EB:F7:EF:BC:78:3E:4F:44:3B:8F:DE:EA:A2:75:ED:D0
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01A0CA473708F9960B2A47568A6CB9994153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 18:00:59 +0000
Manifest this update: Tue 22 Sep 2026 18:00:59 +0000
Manifest next update: Wed 23 Sep 2026 18:00:59 +0000
Files and hashes: 1: A4VD151cCaGStZi1tukFaQlx8Ko.roa (hash: u0G3+aUNE8LU9u0mjX95yrd3NTvmpbcaXH6CpeKYAUI=)
2: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: HsJLmV714gUaEzQSWbUCugtYoGWE5oweB+YTLGRFeTw=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:37:08:f9:96:0b:2a:47:56:8a:6c:b9:99:41:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Sep 22 18:00:59 2026 GMT
Not After : Sep 23 18:00:59 2026 GMT
Subject: CN=5a30ec5eebf7efbc783e4f443b8fdeeaa275edd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ab:9c:1c:5e:4a:d5:6b:3a:30:78:62:6f:f4:
0a:91:54:a6:fc:c6:55:8a:07:2e:90:ef:16:d4:e3:
1e:23:d1:30:b2:a7:ed:22:1f:e7:bf:a3:be:25:28:
bb:25:6b:f4:ff:a7:42:f9:26:b5:5c:d8:e9:33:75:
2e:5b:3b:12:75:6e:cc:c5:ac:df:70:d6:06:ca:65:
21:61:a4:1b:c0:3b:0e:91:47:14:e4:40:e1:f0:78:
65:43:a7:b5:39:36:5f:10:ee:c4:e6:bd:91:fc:11:
92:01:19:27:22:68:8d:ca:24:d8:ed:dd:25:5d:09:
81:36:10:1a:69:83:89:c7:4d:8b:00:8f:ba:cf:4b:
1b:ed:d4:51:25:ab:d1:e5:a2:a4:74:99:2f:e8:b7:
3b:ba:00:b2:4d:28:e7:79:65:a1:a3:c6:27:1d:8b:
7a:a0:b0:7d:ee:74:e0:60:69:4b:9b:1e:0d:66:01:
0d:64:cb:33:1e:e4:6d:89:cc:05:3e:0f:41:ab:10:
04:07:4d:9d:52:3a:26:92:2d:49:9d:87:66:1d:bb:
f0:c0:95:24:61:12:b7:17:d9:1f:76:ac:67:dd:ad:
e0:cb:f2:35:d4:ec:f1:0d:2a:58:a5:0e:fe:b9:98:
ab:23:c5:7e:19:b3:f5:8f:bd:df:db:3a:e6:66:e6:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:30:EC:5E:EB:F7:EF:BC:78:3E:4F:44:3B:8F:DE:EA:A2:75:ED:D0
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9f:4c:3c:57:af:7c:aa:d1:1d:b8:66:9b:a8:de:26:ba:73:
29:88:8d:57:e5:e5:d0:fd:6c:fd:37:bb:3b:f4:df:c5:bc:71:
1b:6c:04:4b:48:9c:e4:aa:49:35:6e:36:31:a5:c1:55:9e:54:
d2:76:80:c9:b6:6c:d9:42:50:9f:4b:79:07:2d:0f:ec:9e:99:
1c:12:4a:2c:71:e7:87:aa:0d:21:12:44:2a:86:c1:ea:f6:f5:
9d:ea:2d:bc:7e:45:58:2f:91:b7:49:9e:6d:c1:ad:41:c8:06:
be:da:89:c5:1e:69:f0:87:3d:c4:ca:e4:68:83:c6:1e:6a:2e:
5d:78:2b:b4:d2:24:61:d0:5c:41:a4:18:ab:c7:94:cf:01:d5:
12:83:eb:57:9d:b0:ad:2f:2d:95:c7:57:59:3a:df:ac:ee:87:
8f:46:11:53:cf:de:82:d6:c7:71:fc:0a:da:4a:80:69:88:b4:
3c:77:48:1d:89:8d:49:f0:5d:9d:a1:d6:eb:9a:8a:36:a9:0f:
2b:99:fd:54:70:4a:7d:1e:2f:a0:b1:96:cb:d8:7b:7f:48:06:
76:53:aa:18:8a:6d:e5:c5:39:e9:c1:21:77:a3:81:47:50:1e:
78:0f:70:e1:57:17:31:30:d7:83:e2:87:d7:8b:69:27:7d:45:
e2:41:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:16 2026 by rpki-client