Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: NsRxZ4wUQhIrzCvMNgxyyutZDMHzb9Fk8+QbEhrgJkg=
Subject key identifier: 55:D1:41:C6:E2:4F:67:02:A9:02:32:34:BA:65:05:AA:34:EF:87:01
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 01A1182AE5B2BA5FB0D2143C1A9B8F3D2955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1A93
Signing time: Wed 07 Oct 2026 21:00:26 +0000
Manifest this update: Wed 07 Oct 2026 21:00:26 +0000
Manifest next update: Thu 08 Oct 2026 21:00:26 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: ioohP7nAjmXOzqqaTAVYFJ+ENxCa1Oj1zPxwVvvpFfs=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:2a:e5:b2:ba:5f:b0:d2:14:3c:1a:9b:8f:3d:29:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Oct 7 21:00:26 2026 GMT
Not After : Oct 8 21:00:26 2026 GMT
Subject: CN=55d141c6e24f6702a9023234ba6505aa34ef8701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:25:bb:56:0a:9f:82:49:c5:02:a7:df:42:
68:f0:bc:90:cd:d3:9a:70:5b:6d:09:36:3c:fe:82:
58:8e:8d:24:d8:b0:d1:23:34:92:ad:72:be:18:27:
6e:02:6a:5c:f6:f0:bb:e6:da:4d:1b:89:d3:cc:55:
db:32:21:30:e7:6e:30:42:d9:2c:88:2d:52:2e:cb:
db:ae:b5:15:2c:33:01:12:63:b7:19:96:d9:f1:fd:
2b:1a:4e:39:9d:5c:12:e6:73:41:8a:cd:57:df:8d:
c0:40:c4:5e:d7:62:44:56:d2:0e:c7:76:68:2a:5c:
88:c6:0a:fa:ac:1b:c3:e0:26:74:bf:63:55:0f:ac:
bc:b5:2c:b9:a3:72:14:36:0c:d3:6d:75:ca:c9:eb:
df:f7:db:de:b3:b1:48:d1:53:f6:0f:df:b6:83:57:
1d:85:7f:c5:a7:bd:75:2b:b1:62:8e:00:98:05:06:
f2:a2:41:c2:ed:76:f2:ab:06:aa:1f:0a:65:5b:36:
4d:af:95:bc:22:a0:ce:12:2f:3e:bb:9e:55:1a:51:
7f:fc:62:f2:b9:9e:68:57:20:9f:11:2b:c5:5c:02:
0a:6d:dd:70:ef:fb:f5:bb:c0:08:9f:a9:4d:f9:62:
7a:61:20:f4:95:af:d3:b9:16:64:2e:55:52:f6:d7:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D1:41:C6:E2:4F:67:02:A9:02:32:34:BA:65:05:AA:34:EF:87:01
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fc:e8:86:34:00:fc:96:e5:71:5d:76:25:32:84:4f:73:1d:
89:b0:09:89:94:42:5a:cd:24:b2:b3:c7:2f:7f:74:a0:60:5e:
f9:10:fc:5b:12:ef:42:b9:c6:a2:85:6a:1e:d6:6d:8d:47:e3:
9f:f0:91:4e:39:d9:51:9f:03:a7:a7:15:2e:6a:27:9c:bb:14:
4d:bf:d7:09:0e:ab:2f:1f:84:83:dc:3d:aa:44:04:8b:7f:27:
d9:d0:71:6e:6d:0f:40:66:b9:75:e3:00:b2:41:1f:92:e6:d7:
f2:7f:b6:dd:73:8f:a5:5d:f6:dd:8f:04:10:38:88:36:db:4e:
c2:06:71:e8:cc:2b:1c:b3:0b:78:ba:43:d7:ea:59:6a:67:17:
48:2b:63:e7:df:b8:47:ea:99:90:5c:2b:2d:fa:5b:3c:51:f8:
9f:7b:b5:a7:6f:d3:b2:a3:14:ba:13:5e:5f:79:31:e3:1f:d7:
dc:e6:7e:39:c1:34:16:2d:ae:76:2b:2a:09:32:1d:b8:ee:1b:
f9:df:96:84:5f:c8:54:2f:cd:1d:ca:61:6a:40:8b:61:82:bc:
ad:c7:38:d6:d7:bd:01:81:cd:5e:cb:50:a7:34:a1:65:84:ca:
43:3f:d8:3f:ae:8b:e2:be:dd:8a:16:b4:49:02:28:48:e8:6f:
85:f6:2a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:40:37 2026 by rpki-client