Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: QTxCB4padv018x+TajcRc3xPFGILZNY6eBFLdfkVOxc=
Subject key identifier: 0B:74:2E:73:B4:0C:4F:59:5C:75:7E:D1:3B:24:84:9B:6B:B9:42:93
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 01A0C6332C43C2BD2D3B1613850BFE49EE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 14AF
Signing time: Mon 21 Sep 2026 23:00:37 +0000
Manifest this update: Mon 21 Sep 2026 23:00:37 +0000
Manifest next update: Tue 22 Sep 2026 23:00:37 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: s2CHcAQktB55nScjj85Ti5jeBavCmRv629/bDqRNga8=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:2c:43:c2:bd:2d:3b:16:13:85:0b:fe:49:ee:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Sep 21 23:00:37 2026 GMT
Not After : Sep 22 23:00:37 2026 GMT
Subject: CN=0b742e73b40c4f595c757ed13b24849b6bb94293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:44:42:e5:34:52:4b:0c:8c:29:c7:ef:e1:
0c:21:1a:be:2e:3b:db:fd:ee:56:c8:ee:87:df:2f:
b8:0b:b2:69:a0:d0:7c:bb:f5:24:87:83:90:8c:54:
d6:f2:7e:c5:b5:c1:f6:98:05:88:de:c5:3e:27:0a:
40:0e:34:cd:71:10:1b:2b:fc:b9:96:1f:62:24:63:
4e:7c:9a:15:6f:90:61:37:89:c5:76:ba:8e:04:9f:
94:7e:72:4e:a2:df:53:b9:a6:39:e0:bd:19:a9:7d:
2b:1d:de:ec:0d:07:fb:12:ab:43:f9:0c:db:b5:92:
59:ad:da:76:3c:2a:2c:f8:46:a6:af:55:9d:02:ba:
69:e3:fe:d9:46:90:1c:a5:d9:a6:2f:e9:4a:59:e0:
1e:dd:62:32:81:82:46:f3:b9:d2:75:78:db:38:70:
2f:98:6b:03:8c:98:02:15:3b:b4:93:bc:d7:6e:5e:
81:ba:37:e3:38:9d:86:db:86:3f:ab:f9:79:f3:68:
50:5a:cb:c4:65:b6:78:37:03:2c:1a:9e:e0:fe:e7:
9e:c5:e0:cf:72:e5:c9:84:31:4f:b8:35:fb:50:aa:
2f:10:ab:04:37:da:12:c9:62:db:e8:fa:4c:2a:65:
90:98:2f:e2:97:46:83:c9:f8:f8:4e:41:28:59:ad:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:2E:73:B4:0C:4F:59:5C:75:7E:D1:3B:24:84:9B:6B:B9:42:93
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:b5:7a:e6:5b:ac:aa:b3:7a:8c:9b:d8:b7:f6:6d:3a:fc:
2b:84:a7:c5:23:f3:28:d6:cd:24:ae:a6:70:cc:69:80:f0:fc:
de:c3:66:c3:f9:cf:29:64:74:2b:de:ba:e2:63:88:cd:17:5f:
01:35:c5:05:c4:85:95:e4:8a:18:b5:fa:3b:cc:1c:e3:36:bf:
8e:aa:4f:db:d1:5c:35:4f:79:8a:96:3a:02:fb:8b:93:5c:7f:
d2:9c:10:74:9c:5a:dd:e4:4d:7c:e5:7f:d6:aa:31:63:f5:ef:
67:72:40:2e:c7:bf:5b:d3:16:46:f3:02:29:6e:04:23:54:f1:
45:57:e2:68:00:07:08:90:d4:c8:27:92:0d:d1:3e:f5:62:46:
10:ff:61:26:67:21:e3:8f:d3:fb:75:35:5a:a4:ee:1f:3d:25:
40:61:59:36:a3:b7:d7:9d:9a:73:33:e5:fc:a8:43:6b:39:1f:
a0:94:48:24:bc:1a:09:60:b7:84:bd:68:01:f2:1b:f1:31:0e:
f9:9a:10:e2:6b:b2:b5:80:e7:07:8d:b7:24:f0:eb:06:1f:32:
5f:40:c6:00:1d:71:5c:06:ec:aa:b2:20:d4:d0:c0:be:0b:9f:
e5:82:7e:9f:b4:dd:eb:cd:b5:72:50:b8:0e:cf:db:a3:9c:66:
1d:b8:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:45 2026 by rpki-client