Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: EeR6Fm4dEUMPOfc3ICBuWXOAnyaSmNa2pV//FCxqqAc=
Subject key identifier: 57:E3:40:14:EB:A3:D0:DC:23:05:E2:2D:B0:ED:DE:54:31:7A:79:E4
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 01A0C74698F8FEB902EBB0F4F4CD0A660243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 1868
Signing time: Tue 22 Sep 2026 04:01:27 +0000
Manifest this update: Tue 22 Sep 2026 04:01:27 +0000
Manifest next update: Wed 23 Sep 2026 04:01:27 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: s4xE9UA/3eXPqN4Z117SpHaq0I5FWe11f1jtocfJ684=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:98:f8:fe:b9:02:eb:b0:f4:f4:cd:0a:66:02:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Sep 22 04:01:27 2026 GMT
Not After : Sep 23 04:01:27 2026 GMT
Subject: CN=57e34014eba3d0dc2305e22db0edde54317a79e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:e8:2c:f4:91:7e:f2:67:bb:fa:58:c3:7b:
58:d6:59:c7:23:34:f6:ed:84:94:58:c9:5d:cb:ce:
ec:71:97:fd:6c:38:bc:d0:08:08:b8:85:1e:38:6f:
22:a2:48:41:58:c7:0d:b8:22:55:61:af:f6:15:f3:
0e:9b:af:7d:fe:bf:99:e3:23:6c:ef:be:69:82:8e:
c2:db:30:93:8c:30:15:e3:2b:b3:f4:ab:08:eb:5a:
16:61:21:1e:ee:6b:4c:d6:e3:eb:62:94:e0:b0:39:
7d:b3:12:6b:07:66:4b:93:cb:22:81:03:11:5b:0b:
b6:4a:55:4d:f0:82:23:8c:fa:56:b3:fe:07:7c:e7:
ff:21:fe:ff:0b:8f:73:cd:82:cd:b2:3d:5d:8c:3d:
3c:82:6b:a6:8e:5e:ce:af:c6:75:0e:d3:39:5b:1c:
6d:e4:2a:e9:e3:f9:84:18:d1:52:56:62:0e:64:bd:
4a:ec:1a:2a:07:0c:b5:2b:14:cd:ad:9a:05:91:89:
32:2f:75:fd:22:63:23:0d:f6:09:58:72:56:55:82:
d1:0a:6e:8c:45:54:95:29:57:d7:c5:b9:53:7f:4f:
46:d8:e0:ce:12:2a:a8:9e:8a:c3:50:fc:d2:cb:e6:
cf:ac:43:65:a3:65:cc:79:1f:4d:cc:24:ed:d7:70:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E3:40:14:EB:A3:D0:DC:23:05:E2:2D:B0:ED:DE:54:31:7A:79:E4
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:58:d1:d8:92:ea:e7:53:4b:b1:ac:41:39:65:32:01:4f:d5:
eb:4c:f5:a6:44:15:ca:39:bd:f8:f8:28:4d:6e:99:dc:e8:f2:
92:28:ce:ea:39:87:3a:73:ae:b1:a8:63:0d:21:e0:e2:c2:aa:
bb:71:0a:ce:5b:c0:61:78:0d:ea:41:c7:6d:a4:d1:ad:37:dd:
d5:52:94:cf:bb:70:6f:00:31:5f:1d:40:d8:48:8b:e4:2d:85:
fd:cb:77:93:ed:7a:7f:d4:0b:c3:14:b9:9e:54:a3:60:71:e0:
4a:cc:04:cc:fa:25:56:16:7d:81:2f:51:09:4b:73:36:24:d7:
9c:86:56:83:1b:71:e0:45:75:7f:11:4b:00:8b:83:cf:94:b0:
7f:fb:39:14:ab:a2:d6:ab:08:59:74:7c:ff:22:ed:e2:b1:c1:
a7:e3:26:ac:6b:f2:b2:3f:a8:96:bb:b1:10:b5:a7:54:dc:ef:
fb:8b:55:e9:fc:d2:28:fe:6d:d9:bd:2c:61:4f:c8:40:8e:fb:
fb:cc:d9:0f:8d:b6:21:59:36:4d:fa:79:02:5e:e9:15:24:6c:
ca:d1:05:38:7c:50:58:37:a0:e0:28:5e:87:3e:f0:85:d9:b6:
1d:8a:e4:6d:d8:ba:41:8b:98:ce:d0:21:2e:ea:22:41:c4:b9:
0f:fd:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:34:20 2026 by rpki-client