Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: jTac15YSbO7FIPS5i7j8yZdRXJixcjiOZC2w5f8I080=
Subject key identifier: 49:25:B8:2A:7F:15:2D:D6:8A:F3:B9:4F:5C:A0:8B:13:15:0C:9C:D4
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 01A0D6B9ADCCBB7F5686D5879F34DE10C1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 04:01:27 +0000
Manifest this update: Fri 25 Sep 2026 04:01:27 +0000
Manifest next update: Sat 26 Sep 2026 04:01:27 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: U8LpFG1ZYYBYLGfSU3ozWbS8jsFxVb2+8mLPPnAWzps=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:ad:cc:bb:7f:56:86:d5:87:9f:34:de:10:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Sep 25 04:01:27 2026 GMT
Not After : Sep 26 04:01:27 2026 GMT
Subject: CN=4925b82a7f152dd68af3b94f5ca08b13150c9cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:0c:e5:41:0f:06:6c:6c:57:46:b2:3d:0f:
fc:95:a5:b2:c7:24:2e:12:78:d1:ec:12:6e:14:6e:
f0:4a:2e:b7:57:ff:1f:33:6b:bf:64:8c:86:5c:83:
1d:ac:f2:53:bf:f4:fd:10:ce:8c:50:b9:a9:c2:15:
22:28:52:80:82:41:e2:d7:eb:e5:ce:80:b6:65:6b:
50:4f:40:53:0e:92:6a:cd:36:8e:4a:f5:49:09:81:
21:f6:3d:e3:a1:56:b1:40:15:95:4b:60:15:7c:cd:
46:eb:73:1c:81:6e:cd:ef:41:0e:be:28:de:f6:04:
bf:e3:44:2f:05:ad:d6:ef:44:b6:d3:0d:5b:b7:aa:
40:dd:a1:4a:71:45:0b:7f:10:14:c6:4d:42:b2:78:
cf:cf:68:75:8b:8f:95:eb:6e:16:fe:94:72:46:82:
39:c9:8d:a2:56:6f:c8:8c:f5:82:bb:c2:91:84:3c:
ed:c7:43:11:90:e8:e4:9f:56:42:1a:85:0d:cc:d7:
e8:87:88:9b:52:7e:7b:a3:80:e4:e0:fe:2b:95:f5:
6e:9c:b0:dd:22:8f:b1:ac:8c:12:77:0d:7d:6a:f0:
30:e6:b5:cd:fe:fb:0f:da:10:9b:45:e2:53:6e:70:
56:af:9a:b0:0a:cd:25:c0:47:8e:75:2d:ac:52:cf:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:B8:2A:7F:15:2D:D6:8A:F3:B9:4F:5C:A0:8B:13:15:0C:9C:D4
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:41:59:23:9a:92:62:80:40:07:94:32:97:6a:ce:2c:e7:57:
a9:14:ca:4c:00:ea:cf:e1:7a:34:d6:a2:e3:54:a5:16:68:2f:
f6:4c:ae:b6:62:bb:2c:3d:71:c0:e6:13:5c:c0:04:1f:53:a1:
60:20:36:d0:85:65:27:0a:3f:e8:5c:63:d3:2c:ee:16:8e:7c:
ee:d4:1b:fb:cf:32:56:d6:44:35:4e:bc:ac:b1:37:98:ee:57:
ef:c2:25:ee:54:58:22:1f:71:d4:06:69:71:fe:fe:4d:86:c7:
40:51:96:0b:46:32:a6:89:a5:e4:7c:c7:a1:ce:87:b0:4e:a0:
7f:bc:a9:36:4b:91:51:79:cc:b6:b3:c8:a8:f1:65:7d:e4:98:
3d:ae:14:2c:1b:ab:6f:b7:de:a6:0d:8b:f5:ba:c7:98:da:50:
25:11:0d:e8:ce:f4:0e:78:66:76:98:4a:d8:13:be:b4:c7:5f:
31:10:c0:cd:92:f2:cd:b9:89:d5:18:6b:80:cd:2c:35:57:be:
3e:d0:29:72:ec:66:a4:8c:de:14:aa:a3:b2:8f:57:9c:f2:33:
d5:7a:32:6a:64:6c:5d:d7:30:65:03:14:fc:62:38:ec:b3:00:
2d:56:12:28:54:24:6f:96:db:7a:67:ec:7d:80:24:a3:19:d4:
f9:92:ae:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWua3Mu39WhtWHnzTeEMHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj
ODg0ZTgwHhcNMjYwOTI1MDQwMTI3WhcNMjYwOTI2MDQwMTI3WjAzMTEwLwYDVQQD
Eyg0OTI1YjgyYTdmMTUyZGQ2OGFmM2I5NGY1Y2EwOGIxMzE1MGM5Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWEM5UEPBmxsV0ayPQ/8laWyxyQu
EnjR7BJuFG7wSi63V/8fM2u/ZIyGXIMdrPJTv/T9EM6MULmpwhUiKFKAgkHi1+vl
zoC2ZWtQT0BTDpJqzTaOSvVJCYEh9j3joVaxQBWVS2AVfM1G63McgW7N70EOvije
9gS/40QvBa3W70S20w1bt6pA3aFKcUULfxAUxk1CsnjPz2h1i4+V624W/pRyRoI5
yY2iVm/IjPWCu8KRhDztx0MRkOjkn1ZCGoUNzNfoh4ibUn57o4Dk4P4rlfVunLDd
Io+xrIwSdw19avAw5rXN/vsP2hCbReJTbnBWr5qwCs0lwEeOdS2sUs8WhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkluCp/FS3WivO5T1ygixMVDJzUMB8GA1UdIwQY
MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt
OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex
LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUFZI5qS
YoBAB5Qyl2rOLOdXqRTKTADqz+F6NNai41SlFmgv9kyutmK7LD1xwOYTXMAEH1Oh
YCA20IVlJwo/6Fxj0yzuFo587tQb+88yVtZENU68rLE3mO5X78Il7lRYIh9x1AZp
cf7+TYbHQFGWC0Yypoml5HzHoc6HsE6gf7ypNkuRUXnMtrPIqPFlfeSYPa4ULBur
b7fepg2L9brHmNpQJREN6M70DnhmdphK2BO+tMdfMRDAzZLyzbmJ1RhrgM0sNVe+
PtApcuxmpIzeFKqjso9XnPIz1XoyamRsXdcwZQMU/GI47LMALVYSKFQkb5bbemfs
fYAkoxnU+ZKuEA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:38:25 2026 by rpki-client