Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: xleA9eadHvZmn90rhzpIq3+ktBQi88HGIqfjsN7vWTk=
Subject key identifier: 16:0C:66:1F:D0:40:3A:0C:7C:1B:6F:0A:E0:21:7F:3C:2B:97:9D:BE
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 01A0BD9E1092B6C71FDB895E990D4C1729B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1A67
Signing time: Sun 20 Sep 2026 07:00:47 +0000
Manifest this update: Sun 20 Sep 2026 07:00:47 +0000
Manifest next update: Mon 21 Sep 2026 07:00:47 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: pFzdSc2lkWDOOjGp+V1EcUMpEgApESZVq3SvyvOgIk4=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9e:10:92:b6:c7:1f:db:89:5e:99:0d:4c:17:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Sep 20 07:00:47 2026 GMT
Not After : Sep 21 07:00:47 2026 GMT
Subject: CN=160c661fd0403a0c7c1b6f0ae0217f3c2b979dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:e8:a8:64:53:7a:9f:71:cd:4f:a5:f0:8f:
4d:a0:06:2a:07:a1:21:7e:80:c8:32:f3:a0:fa:29:
ab:3d:13:44:c5:26:4e:03:9a:38:33:5d:07:9d:c7:
29:a2:0b:cb:5c:80:16:26:b6:d2:52:4d:a0:00:95:
18:2d:94:49:60:9a:97:b7:f9:13:f8:d8:1a:b0:11:
00:1e:94:71:d2:cd:f3:0a:06:c5:3e:0f:27:eb:89:
d1:dd:e3:7c:d3:d9:02:df:8b:a6:9d:62:43:34:cb:
c3:70:c3:cd:cc:6d:4a:8b:6f:55:09:1f:b7:a1:1b:
e2:c1:8c:2d:3a:23:a7:f7:65:cd:02:6b:15:bb:e3:
09:6c:38:ee:0d:1c:cf:59:5d:46:3c:75:f1:45:15:
81:14:ce:da:19:fb:35:90:e7:24:57:35:bf:d1:ee:
27:98:79:7d:c3:20:33:a9:cc:de:a7:8a:88:ec:fc:
e2:ea:cc:04:96:15:73:d9:66:64:ca:4c:ca:ee:2f:
5f:6d:ba:36:53:11:44:44:06:70:b2:ba:2e:f6:86:
20:d6:e2:a2:1a:25:6b:95:3e:a8:96:29:87:84:48:
45:fa:ae:6c:ec:38:4a:76:f9:ee:4b:9f:00:10:a8:
46:a3:55:e1:80:e5:0b:ca:e8:75:f1:4f:c7:fe:d5:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:66:1F:D0:40:3A:0C:7C:1B:6F:0A:E0:21:7F:3C:2B:97:9D:BE
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:c8:51:c2:67:2e:44:51:ed:6b:eb:5a:a5:d1:20:a6:5d:
b4:5d:a8:e8:c9:b8:95:b6:e2:df:dc:aa:f2:a3:af:64:a9:ca:
ca:04:48:50:60:16:9d:02:72:82:3c:6a:94:4d:ea:aa:2e:4b:
81:b7:72:8e:04:dd:82:c9:42:66:91:95:6e:f7:96:1e:02:00:
38:68:3d:0a:9a:14:91:01:37:16:d9:01:4b:db:66:09:f8:7b:
5f:0a:5f:52:2f:de:93:d9:d2:4d:a0:8c:0f:73:81:87:ac:7e:
3b:b9:b6:f4:4b:e6:ea:62:b6:3a:15:f0:3b:8a:25:7e:75:80:
23:a3:2d:20:11:0d:08:2b:0d:cb:bc:e7:a5:18:8f:d9:c6:51:
81:69:8e:e7:4e:68:09:53:9f:da:b2:a0:a5:ae:28:94:c8:43:
42:c0:cd:03:69:4f:d2:55:a7:55:9a:aa:b5:18:89:07:f5:f4:
5b:bc:67:03:1a:79:fc:83:f8:92:45:8f:9d:56:02:53:a3:64:
c6:01:6f:e2:30:dd:fd:d4:da:fd:b3:33:40:59:43:9f:b9:11:
0f:46:87:6f:fc:9a:2b:b0:3d:b6:3f:04:10:df:38:f6:a6:d4:
15:b9:cc:8e:75:cb:34:d2:fa:3f:85:65:fe:53:e9:1b:18:16:
93:97:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:02:17 2026 by rpki-client