Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
File: IxYwcMcaZRYOwhi4n98LGv8GCpY.mft (raw, json)
Hash identifier: ajQNVJ2yur+bItoETJ63HY4Ouv66+riU2s5hs800Ods=
Subject key identifier: B6:25:29:AC:11:85:92:86:BD:F9:79:FB:C7:0F:62:D9:93:67:4C:B9
Authority key identifier: 23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
Certificate issuer: /CN=23163070c71a65160ec218b89fdf0b1aff060a96
Certificate serial: 01A0C39FFA2AFBA967FA22CF673708597121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
Manifest number: 58
Signing time: Mon 21 Sep 2026 11:00:36 +0000
Manifest this update: Mon 21 Sep 2026 11:00:36 +0000
Manifest next update: Tue 22 Sep 2026 11:00:36 +0000
Files and hashes: 1: IxYwcMcaZRYOwhi4n98LGv8GCpY.crl (hash: W0E7UF0ZCPG9a2S0IUh8/DRrX1c8Wrh0CZ9lb5OyB1I=)
2: q7ThTrs0g513Vx_EsM-SNJd-9QU.asa (hash: tmMU4Zq5R5GAkYxxYk1nWgXxt8gVsZJujQN6NpzHTjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:fa:2a:fb:a9:67:fa:22:cf:67:37:08:59:71:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23163070c71a65160ec218b89fdf0b1aff060a96
Validity
Not Before: Sep 21 11:00:36 2026 GMT
Not After : Sep 22 11:00:36 2026 GMT
Subject: CN=b62529ac11859286bdf979fbc70f62d993674cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:f4:49:a6:b6:d9:13:dc:e5:49:03:9f:b4:
c5:ea:25:68:4a:b4:bb:75:7f:aa:a6:fb:39:e0:3f:
26:37:76:a3:74:0b:db:0a:4a:6b:07:ce:3b:a7:54:
7a:b7:21:87:87:f4:e9:c0:08:d4:c9:7c:d4:51:12:
70:3a:02:26:e6:2b:e6:2d:47:4e:54:3b:4d:e4:9c:
2a:b3:bb:d2:1b:3f:94:81:a7:00:6d:65:05:2b:b2:
62:b7:b4:a4:22:04:42:05:17:9a:39:f3:e2:f1:39:
a3:cc:7a:b1:ff:b0:17:99:ea:a2:78:ce:0d:92:20:
30:36:f9:3d:73:55:35:c2:fe:d9:60:d5:c5:ef:8e:
13:de:f2:5a:f2:32:50:13:c9:bb:be:3c:17:e1:4a:
63:27:11:6a:65:1c:8d:bd:aa:e2:cb:56:65:ce:97:
3d:a6:ac:c9:3e:be:63:0d:b6:95:9b:85:53:46:03:
77:e9:cc:3c:3f:df:94:eb:16:f1:2a:c3:f1:11:7e:
6b:90:25:49:87:48:d8:64:da:05:11:7e:50:e3:bc:
c0:22:a4:9c:02:32:fd:86:9e:04:38:93:cf:6a:72:
8e:16:b7:a6:d0:41:6c:e0:87:e9:d0:f5:cf:d3:b0:
c8:e7:58:6e:ca:8f:a7:1d:5e:55:57:46:9f:46:6c:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:25:29:AC:11:85:92:86:BD:F9:79:FB:C7:0F:62:D9:93:67:4C:B9
X509v3 Authority Key Identifier:
keyid:23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f6:fc:39:fe:64:74:88:3a:79:39:19:b8:b2:d4:c6:2d:5b:
d7:d8:55:ac:29:e2:a7:a5:1c:3d:1f:bb:03:7d:17:ad:ef:b7:
8f:75:0b:00:42:ea:5c:e1:2f:9a:34:b8:ec:a0:49:be:d9:3b:
57:ef:20:2c:75:9e:c5:26:49:b4:30:90:03:04:35:63:aa:94:
30:d3:e2:9a:cc:0a:4a:f8:79:e0:d8:6a:9c:61:56:35:71:06:
51:cf:8e:de:bd:5f:ed:46:07:2a:d7:a1:c8:ad:e0:d3:c4:1f:
b3:f5:4f:a8:79:c1:52:43:83:21:89:bd:e7:fb:48:30:8e:a3:
b8:f3:15:cf:2f:27:90:15:db:d6:d1:94:17:4f:34:66:b3:cd:
1a:c0:2b:99:0c:44:c1:72:29:d9:99:c9:5a:b2:7d:a6:d3:fc:
76:84:9a:ea:d1:78:e2:a2:8f:de:58:4b:a1:db:b0:6f:ae:91:
1c:1b:52:e2:89:d6:f1:6f:89:58:fe:f5:05:77:e9:12:4c:bb:
49:6d:21:0e:de:ba:21:bf:2b:6c:7d:b5:c2:e2:07:90:74:d1:
93:18:98:3e:a1:30:7d:e3:fb:7c:16:7c:dd:b5:9a:ad:fe:d7:
6d:4f:e5:bc:d9:bd:2b:a5:9a:d4:ec:94:a0:55:1e:b1:b6:28:
0d:63:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:53 2026 by rpki-client