Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
File: I6ejqG_MgpkfsH6OSL1SPi54Msk.mft (raw, json)
Hash identifier: 3I/nvA2Ik9+BUwQolTbKgx4mYUpTjZ33VRguGOwukOA=
Subject key identifier: CB:A2:92:E6:58:E2:F3:49:E9:B6:D2:AB:32:0B:03:1A:A9:B6:C4:D3
Authority key identifier: 23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
Certificate issuer: /CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Certificate serial: 01A0CDEC8E1EBC61560F31BFCA211948C7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
Manifest number: 0131
Signing time: Wed 23 Sep 2026 11:00:27 +0000
Manifest this update: Wed 23 Sep 2026 11:00:27 +0000
Manifest next update: Thu 24 Sep 2026 11:00:27 +0000
Files and hashes: 1: 5KHe4EKfZEY-oVJzaIVBG3mWL5E.roa (hash: ow+i1oVkQgzOG1bAJJCMmBDRllBuBSZ4j6eQrfepZu4=)
2: I6ejqG_MgpkfsH6OSL1SPi54Msk.crl (hash: 76r2YmYRFpOSqJEY0EMDCIuYmA3y8Dz66TeUOxcjbLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:8e:1e:bc:61:56:0f:31:bf:ca:21:19:48:c7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Validity
Not Before: Sep 23 11:00:27 2026 GMT
Not After : Sep 24 11:00:27 2026 GMT
Subject: CN=cba292e658e2f349e9b6d2ab320b031aa9b6c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:e2:50:ab:8a:c3:8d:67:1b:ed:20:aa:1a:
c4:c6:9f:18:77:c1:8e:f3:75:f6:c9:37:1d:ae:91:
35:04:76:1c:8d:da:33:fa:11:05:2d:84:89:9f:72:
9d:56:d9:4b:7b:4a:97:c3:0c:f2:38:f5:a4:9c:ee:
57:4b:a7:d7:30:40:bd:a4:d0:c3:5e:2c:32:f5:89:
20:81:36:7b:ba:e3:07:b0:ec:69:de:75:6b:e8:d6:
b1:83:ba:5e:f5:fa:0d:a9:dc:77:b3:70:b7:89:c9:
67:c4:c5:b6:31:71:53:33:b1:77:89:6c:ee:0f:ae:
83:88:9a:e9:51:39:c1:5b:f4:3b:f8:00:34:82:99:
c9:4a:ab:b4:3e:7b:02:4b:f3:f9:6e:4a:ea:c4:f3:
40:62:35:81:24:98:36:a6:00:22:59:47:ba:93:5d:
24:ce:f0:05:98:52:53:bb:de:dc:7e:e1:33:e3:5f:
91:a0:50:73:4e:51:77:e9:28:57:42:c9:2a:ab:28:
e4:77:42:a5:03:dc:f6:a8:1f:a9:42:1e:a5:d0:59:
7b:89:a1:4d:24:61:5e:ab:3b:1e:c9:62:e2:e1:9e:
b8:c6:94:df:93:7d:21:40:c3:f1:02:5c:67:ef:28:
86:d7:36:c1:0e:f4:a0:b9:cf:f7:bb:04:91:0e:71:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A2:92:E6:58:E2:F3:49:E9:B6:D2:AB:32:0B:03:1A:A9:B6:C4:D3
X509v3 Authority Key Identifier:
keyid:23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:82:a9:0b:9e:05:38:87:04:27:2e:c6:53:9d:c8:59:25:d9:
e3:9a:32:63:99:2b:b5:69:b7:fb:42:b5:f4:06:72:1a:c5:36:
dc:ef:18:07:e8:99:ee:5c:bf:a8:c8:fe:e6:09:03:52:b5:09:
84:c6:c1:fe:fd:a4:11:b6:86:16:c2:5c:99:5a:24:72:db:5e:
18:0e:ca:d8:4f:3b:16:8b:ac:a5:0a:b7:59:e0:ba:0c:4b:5f:
78:9e:ec:8c:f8:79:c4:9b:ac:bf:db:07:0e:2c:79:ac:49:a0:
b4:7d:5d:68:60:af:ee:26:b5:c9:b7:b4:fb:c4:ae:f9:07:78:
8d:a4:27:ae:22:38:bb:a9:9e:c0:81:c7:4f:48:6b:90:89:54:
ae:40:c2:77:04:a7:d4:dc:70:a9:ed:29:00:2c:f5:77:11:01:
85:9a:5c:cc:57:97:5d:f5:48:0a:c1:f6:f2:38:2a:08:49:fb:
d3:c7:8f:e8:3e:4e:e1:b7:b4:c7:27:54:2d:42:32:df:49:8a:
6d:d2:f9:bf:f1:d3:0b:f3:a3:ea:d6:ce:95:f3:cd:de:0b:0e:
9d:c2:5a:62:bc:38:85:df:73:93:f3:0e:08:31:f9:c2:6f:27:
6c:b4:a6:21:9b:7e:80:c5:50:ae:34:22:e8:69:32:ce:a8:a8:
ef:be:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:51 2026 by rpki-client