Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: BU+If26RfXDrkK0tnyW5vaQ0UCrCq3dEpoC9OSYWitA=
Subject key identifier: 90:1A:01:64:13:B2:CB:B0:F4:2E:42:7E:10:62:3C:82:58:4E:CA:E5
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 01A0C444FA0D375303B305ABB23E83729D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0DAF
Signing time: Mon 21 Sep 2026 14:00:49 +0000
Manifest this update: Mon 21 Sep 2026 14:00:49 +0000
Manifest next update: Tue 22 Sep 2026 14:00:49 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: xkFj4uWdE1Yw6g6TeAotp6veIdxMzkMtaz/UkwTarM4=)
2: vvIw8F-IOEioMYu93B5YO0Hq9vk.roa (hash: WtTZswHjYBJIgKk4bHAyXKnVfNJT2/jg2Qz9ZX4kuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:fa:0d:37:53:03:b3:05:ab:b2:3e:83:72:9d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Sep 21 14:00:49 2026 GMT
Not After : Sep 22 14:00:49 2026 GMT
Subject: CN=901a016413b2cbb0f42e427e10623c82584ecae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:e1:87:99:b2:99:cb:5c:9c:ec:5d:81:e3:
35:e9:5f:27:a4:5e:20:a9:82:03:b1:75:ef:57:4d:
94:74:3e:77:2e:6d:3d:b1:23:17:b0:b1:b4:47:3b:
75:e1:18:f8:44:f2:d9:ad:71:c7:51:a7:1b:a8:80:
a9:b6:32:4f:5d:ea:4d:f7:2d:14:ea:73:db:f4:dc:
29:32:bb:fd:bd:e1:44:1d:34:cf:64:e2:33:7f:36:
a2:64:90:32:34:b2:f7:fe:61:34:60:98:4c:75:01:
44:e7:45:9d:3d:8b:67:64:54:6d:1f:4b:5f:a7:01:
90:b7:ee:d4:a5:2d:09:f0:2f:8c:18:5b:0c:43:27:
85:f1:24:3a:02:ce:28:d2:b2:e8:16:94:a3:66:6c:
6e:1c:01:03:d0:f7:3f:2c:b3:96:52:c5:db:51:6b:
b6:8f:64:71:09:f9:e8:f0:57:80:9f:50:cf:0c:70:
79:5f:30:8b:95:76:da:8a:b2:06:18:91:41:83:24:
ae:47:3a:b4:bb:6e:cf:ef:f4:2f:90:bb:0f:b6:07:
21:4a:9c:2b:68:ba:4e:92:bf:f2:72:c3:17:1e:d6:
a6:80:f4:cc:4a:14:c4:4f:c7:55:58:d8:7f:ba:5e:
0f:cc:35:ce:13:cc:31:d1:46:65:b5:4b:90:83:34:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:01:64:13:B2:CB:B0:F4:2E:42:7E:10:62:3C:82:58:4E:CA:E5
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:34:90:5b:99:4e:ba:98:a2:b5:e8:f3:b7:7f:86:20:ec:
96:97:57:d5:8e:5c:ee:4e:b7:ba:2d:4e:3f:f0:0e:c0:06:a5:
92:44:ed:c8:a7:76:1a:be:90:7c:ed:10:df:e5:62:cf:5b:6f:
f9:d1:3f:53:34:48:34:14:39:84:9e:5a:0c:d8:86:3b:62:c9:
66:b1:28:6e:e7:50:87:dc:36:78:58:94:c0:c4:66:e9:0d:ef:
96:93:e3:d4:41:25:20:b5:a1:7c:9d:63:9d:c4:50:f3:20:63:
de:90:e2:f8:e3:ab:37:77:14:66:15:b9:79:8d:25:1a:a9:b4:
eb:e2:3f:75:be:e0:f2:0b:11:1f:95:32:c8:4b:ea:1d:a9:2c:
1c:c3:d6:15:4c:d8:86:db:0c:0c:0e:42:18:87:a6:ef:80:9c:
75:85:85:58:47:22:8a:6a:b0:c0:cb:5a:6e:3b:09:b5:e4:76:
90:80:70:ad:7c:51:e6:79:74:11:ea:ef:18:a7:aa:b1:f2:03:
5f:8f:81:8e:1f:da:6f:f2:3c:96:0a:3b:2a:16:eb:7e:7b:9d:
40:f5:39:d3:9e:41:df:8b:83:79:c1:5a:61:e5:26:81:bd:9c:
fa:b4:bc:08:b4:4e:bb:c0:b5:0b:4b:7b:d4:ef:aa:2c:db:cd:
a5:fb:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:48 2026 by rpki-client