Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: 6ZXBkkIyuaM9KH16un459OuCUTNhgTUgbiR5pGX9zVY=
Subject key identifier: C2:D7:3C:3C:76:E2:02:DD:B2:CD:30:0B:8A:FC:48:75:B5:B0:E9:CC
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 01A0EC9D0A1838B148D806FACD44F9E5DCEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 10:01:49 +0000
Manifest this update: Tue 29 Sep 2026 10:01:49 +0000
Manifest next update: Wed 30 Sep 2026 10:01:49 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: ehVBPzndLSfB1HC9sd4E5H65EE2obOSPAKEfY4xKQcY=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9d:0a:18:38:b1:48:d8:06:fa:cd:44:f9:e5:dc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Sep 29 10:01:49 2026 GMT
Not After : Sep 30 10:01:49 2026 GMT
Subject: CN=c2d73c3c76e202ddb2cd300b8afc4875b5b0e9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:e1:a9:57:b9:14:09:63:fb:30:77:e8:1a:
fc:79:ea:f7:9b:07:ab:fe:f0:51:ce:79:7a:55:04:
5c:cf:8f:c7:a7:af:c7:53:99:bf:e5:ac:f1:d5:45:
84:66:09:aa:d1:72:8a:86:9d:59:49:6c:4a:d2:13:
a9:e3:18:67:14:fe:9f:fb:60:2e:0a:63:02:2e:37:
2a:05:7d:f9:2a:65:11:d1:b6:34:df:41:16:e3:69:
22:94:0d:5b:79:7f:39:d9:bd:8d:14:76:8d:3d:6c:
11:3b:45:2e:b9:a7:b3:8a:3f:db:24:b5:ba:8c:ff:
04:cf:0b:a0:be:90:00:83:94:34:41:ff:9f:67:b9:
6e:9d:e4:19:c1:8d:00:fe:35:72:c8:67:c0:12:06:
86:73:40:3a:70:ff:1f:c4:1b:8d:e9:22:19:9e:27:
9d:5f:7e:ed:7e:b3:6c:0d:0e:7e:a0:9b:b2:22:1a:
be:86:03:0a:06:ce:4b:8c:9c:f0:c3:ea:b3:64:45:
9b:90:13:63:1e:c6:2c:12:c4:db:67:4d:0f:f1:e3:
49:ac:f5:47:c1:60:f3:94:76:ad:f1:b5:ab:f4:c3:
0d:13:f7:61:a4:fb:36:08:13:c9:43:7c:82:73:70:
36:51:2e:67:0d:b8:ce:ac:b1:ff:90:1e:27:bb:f3:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:3C:3C:76:E2:02:DD:B2:CD:30:0B:8A:FC:48:75:B5:B0:E9:CC
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:66:99:89:85:b2:5d:7d:e6:8b:b6:cb:21:c8:01:94:4f:9b:
fb:b6:7a:b0:1c:c6:af:37:0d:14:a8:f7:5e:ea:d7:78:17:18:
4e:14:74:bb:65:78:f6:ec:79:e5:f3:41:30:f0:8a:99:cc:c9:
a0:af:b1:ec:6d:b7:24:81:b4:6e:8c:ac:09:2e:89:56:29:dd:
5e:58:89:61:c4:f7:18:f9:68:45:e7:c0:b0:d2:de:14:41:8a:
53:e4:fa:83:98:e5:69:ad:e5:1c:b8:70:3b:f2:af:6a:0b:b6:
10:29:8b:b6:cc:79:71:b4:04:27:f6:66:e5:91:87:68:f1:96:
da:88:b5:e6:24:6b:a2:ce:b2:f6:43:1c:16:f3:0f:36:ab:aa:
80:30:e5:e6:6a:f2:1c:9e:8d:b2:c8:02:76:28:32:50:b8:91:
b0:7c:93:92:62:72:63:a4:eb:eb:49:8e:cc:3b:c7:cf:54:c1:
1f:94:b4:e2:08:f8:4a:16:49:88:3c:e9:7c:8e:30:ab:60:1f:
71:7d:16:2e:84:a1:99:de:fb:f4:8e:b0:86:65:39:89:cf:c8:
37:1e:fe:43:cc:25:d1:0c:5a:1c:b5:d0:83:03:1a:98:b2:8a:
bc:ad:8a:fa:43:e4:31:46:03:54:5c:88:24:5d:3d:c0:ff:75:
f9:1d:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:18:14 2026 by rpki-client