Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
File: ICg7FImXzFYQEgtMRga6cuXa758.mft (raw, json)
Hash identifier: 5Qglqk7rAbXA8P7vU96sfQ4FZ7Pd6IQnxYkkbrmst6Q=
Subject key identifier: A5:7D:3C:30:57:42:93:D8:D4:98:61:1B:25:9B:F2:E5:4F:0F:A7:AC
Authority key identifier: 20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
Certificate issuer: /CN=20283b148997cc5610120b4c4606ba72e5daef9f
Certificate serial: 01A130A17E6659BADEABCA60245C0C41E994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:00:52 +0000
Manifest this update: Mon 12 Oct 2026 15:00:52 +0000
Manifest next update: Tue 13 Oct 2026 15:00:52 +0000
Files and hashes: 1: ICg7FImXzFYQEgtMRga6cuXa758.crl (hash: RpdqOcEv924r9YGn70eVph9Nji0WxzUN2FQFCIMe39M=)
2: VdpeYWicryHpzAB4DZOE2_eE8mU.roa (hash: CNoqpW1D+k3FAIJqkeURjeLA7MboxVUVd4vLoWTzRRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:7e:66:59:ba:de:ab:ca:60:24:5c:0c:41:e9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20283b148997cc5610120b4c4606ba72e5daef9f
Validity
Not Before: Oct 12 15:00:52 2026 GMT
Not After : Oct 13 15:00:52 2026 GMT
Subject: CN=a57d3c30574293d8d498611b259bf2e54f0fa7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:af:32:10:21:7b:f4:79:43:94:ef:7f:8c:
03:ab:55:5f:3b:ab:f4:22:02:00:19:49:a7:5e:e6:
a1:f2:a6:a4:ac:3a:9d:da:75:ce:f8:5e:79:32:a0:
8e:ac:8c:5f:bd:c5:87:a5:78:b2:6c:6d:b1:71:6a:
7e:61:e7:89:1b:b8:b8:6e:88:3d:b0:af:1f:26:d5:
32:41:ed:4e:de:b3:39:7b:48:4a:f6:bc:de:ca:df:
2f:81:91:ea:10:29:c7:29:42:38:84:d6:65:af:ad:
4d:4b:68:35:bd:fc:c6:09:5f:99:6f:e8:91:4e:85:
2c:25:97:4f:91:64:27:48:3d:24:28:69:83:00:7a:
e9:8f:17:28:a6:70:e6:e3:33:03:f2:17:40:80:5d:
07:be:29:15:da:3e:e0:1f:84:48:6f:d9:ab:60:d9:
a2:d6:27:44:a7:60:2d:31:94:63:c0:d4:e3:db:6f:
07:66:d7:fe:15:ca:30:f9:69:93:b2:9e:22:1f:f4:
ba:d6:b6:c3:a4:02:c6:89:8e:f8:f0:60:d3:2e:b8:
73:0a:9b:c5:57:06:27:78:19:89:08:05:e6:34:ea:
52:05:b4:c8:17:a4:92:64:04:77:f0:7f:ad:98:f7:
12:af:3f:9b:16:8a:1e:25:8b:26:53:64:28:06:f2:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:3C:30:57:42:93:D8:D4:98:61:1B:25:9B:F2:E5:4F:0F:A7:AC
X509v3 Authority Key Identifier:
keyid:20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dd:bb:26:06:00:42:e9:6b:66:23:14:23:9b:32:e8:f8:7c:
20:ce:f7:83:45:5a:7b:75:f3:a8:8f:6b:0c:40:eb:b9:82:6b:
54:95:19:38:ae:6a:9e:88:64:39:8a:0a:aa:f1:f3:e8:bb:9d:
b6:e0:4b:0c:df:26:9c:8a:51:62:8d:eb:9d:61:3d:d4:5b:77:
a9:b7:d1:00:6c:96:04:a4:03:a6:5f:c9:03:fd:46:01:ee:33:
1e:97:44:52:03:12:5f:b1:9a:81:1b:3e:95:02:29:4f:88:74:
84:d8:10:24:12:2a:c3:41:07:df:cc:3a:35:3e:4a:43:af:f2:
6c:4c:0b:2b:1b:b2:9f:8e:e3:f7:26:b6:04:67:cc:a0:03:25:
8a:df:da:83:52:ab:35:25:9e:d1:82:40:48:4b:99:25:b9:a4:
16:fc:22:00:23:87:43:6a:5e:38:26:28:87:fc:e1:c2:c3:78:
6a:6a:9c:0e:10:ca:32:7e:f1:f0:01:35:84:01:26:b1:01:54:
72:71:9d:b3:d4:22:a5:19:2a:df:4b:2f:a6:e6:d7:6e:c2:b6:
67:d0:5f:f9:c6:27:af:e4:4e:4d:7b:8e:3b:22:db:8b:69:cc:
74:4c:43:91:4b:cd:85:33:07:73:21:9f:d4:03:f6:21:81:1f:
84:b1:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:32:22 2026 by rpki-client