Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: Gmj1m2y8KGZSR65GTdW9neTL2ZCWHuhmV+qPlc4ho9U=
Subject key identifier: 11:06:E6:E7:61:6A:7D:A0:18:A5:02:D5:29:DC:BE:39:D8:4E:24:5A
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01A0BFF9C0B1C7FC7E81CF98071D66F61F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1A67
Signing time: Sun 20 Sep 2026 18:00:11 +0000
Manifest this update: Sun 20 Sep 2026 18:00:11 +0000
Manifest next update: Mon 21 Sep 2026 18:00:11 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: jSMoP6bMDL+ItU31JCKroDXrSZIi6zTXWSJN35PydfY=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:f9:c0:b1:c7:fc:7e:81:cf:98:07:1d:66:f6:1f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Sep 20 18:00:11 2026 GMT
Not After : Sep 21 18:00:11 2026 GMT
Subject: CN=1106e6e7616a7da018a502d529dcbe39d84e245a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:6d:01:cc:99:ac:7d:f7:c3:b9:7e:2d:79:
f1:31:81:a5:fa:0b:ef:5d:45:36:d3:d8:1e:3a:d5:
96:5e:26:d3:fb:f6:b2:72:fe:63:7c:0c:c2:f9:c3:
85:f6:08:38:4d:9a:6a:b8:3a:b6:51:75:5e:d0:55:
30:6e:ab:c3:e4:a9:23:d5:76:db:7b:e1:f3:86:29:
d1:90:dd:f5:51:2e:1b:ba:4b:23:e4:a5:60:b0:a3:
02:ad:7c:22:a8:42:1d:4a:91:fd:10:b2:93:a1:84:
ba:53:73:87:b4:1a:c4:eb:b9:4b:5b:fd:46:b6:4e:
cf:17:c2:75:09:42:40:70:99:df:02:00:67:9c:fa:
ae:27:db:eb:3c:bf:14:2c:87:4c:c9:60:d2:29:b7:
4b:67:c0:ba:d8:18:4a:a7:ef:20:a1:66:e4:6b:1b:
02:1b:09:5a:ee:af:7b:98:95:5d:0f:b0:69:2d:5f:
45:17:2b:66:14:5d:9f:c7:c3:05:48:1e:8c:54:63:
f2:fe:1d:f3:70:60:cf:4a:82:f5:92:49:7b:28:f0:
d5:93:19:68:b8:2a:6f:83:98:9a:74:0f:b3:24:e4:
f9:a2:52:c7:f3:71:1e:a5:9b:4d:83:03:cd:51:9c:
5b:41:29:e0:d4:cc:54:55:41:3e:fc:2c:19:f2:93:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:06:E6:E7:61:6A:7D:A0:18:A5:02:D5:29:DC:BE:39:D8:4E:24:5A
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:be:97:37:cb:2c:0a:67:9a:46:e0:c4:02:f3:34:cc:ef:
2c:90:4a:06:b5:0a:cb:9b:e2:62:12:44:16:65:a5:1f:0c:5c:
21:4c:05:7d:9e:df:13:87:fa:93:3b:4f:22:2b:6c:59:9f:86:
6d:ba:55:8b:b0:c2:39:b9:1a:d6:2e:e3:83:ed:d7:16:55:a8:
dc:68:d2:0a:c7:c1:df:64:fd:3c:df:63:41:78:87:5f:43:60:
61:20:45:c0:53:9d:0f:6e:c4:e7:d5:01:54:d9:d3:31:cf:2f:
ab:5b:ee:41:2e:e3:41:a7:65:8d:9b:d4:b2:50:74:cf:12:7f:
d9:0c:c8:18:e2:d7:6f:36:ad:93:73:9c:90:d9:90:70:f3:0b:
f3:96:bc:ce:91:c5:c0:b9:f4:1c:55:0d:6e:f6:17:4c:3d:39:
ca:88:ba:a5:36:03:95:e3:af:9b:3e:1d:fa:43:55:9d:3e:2b:
ec:30:45:75:90:40:8c:38:dd:3f:e0:5d:f3:72:d2:88:6c:02:
60:05:ef:16:84:05:41:27:88:4a:c8:5e:92:f8:c4:75:e0:fb:
cd:0e:d8:bc:52:2c:26:bb:b9:6b:2a:55:42:ee:a2:be:56:97:
97:c8:9f:5a:01:d0:7f:f7:72:44:dc:4e:b1:b4:94:1e:f3:a2:
c9:1d:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:36:16 2026 by rpki-client