Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: 2vtgSInU7okMcXQimmHILHzpKBYzQrS+2nlo/dGsvzw=
Subject key identifier: 3F:25:3F:A4:2B:29:EA:F2:B0:A1:03:F2:3A:29:5C:DE:7B:AD:35:F0
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01A1A9A75CD6894FEB7F149B0A8510B4E60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1AE0
Signing time: Thu 05 Nov 2026 03:01:20 +0000
Manifest this update: Thu 05 Nov 2026 03:01:20 +0000
Manifest next update: Fri 06 Nov 2026 03:01:20 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: aprsJizu0cr8XDTb2wqlh/wMF0HNiNLrRFy6Q1fRdvw=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:a7:5c:d6:89:4f:eb:7f:14:9b:0a:85:10:b4:e6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Nov 5 03:01:20 2026 GMT
Not After : Nov 6 03:01:20 2026 GMT
Subject: CN=3f253fa42b29eaf2b0a103f23a295cde7bad35f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b8:31:a3:33:79:02:8a:59:ae:79:3d:1a:82:
c4:11:58:0a:4c:7b:ad:47:bc:a3:f1:71:de:23:91:
c0:c3:20:68:33:d3:92:00:9f:1d:65:5f:7f:be:14:
10:43:cc:3d:85:22:a6:dd:ab:2c:97:0a:2c:f1:c4:
e4:a4:13:82:f8:09:96:e8:ea:b9:65:d6:47:10:a7:
38:71:fb:45:15:9a:84:c6:56:ad:06:f1:8c:57:02:
6c:ec:d9:f3:f4:34:58:ac:af:58:36:1e:6a:c4:e8:
0f:50:db:95:6b:a5:82:da:64:68:5d:19:e2:f5:df:
45:77:30:e2:f7:b4:2a:68:68:65:4d:46:ab:26:ed:
67:45:4a:ec:98:89:e6:8c:f5:32:c9:77:c1:d7:88:
74:62:b2:cd:7e:05:9b:ce:cd:4d:d9:72:73:52:58:
3f:f1:e3:0f:7c:1b:0e:cd:29:e9:d5:85:79:5f:b4:
aa:6e:67:e2:2f:29:81:8c:89:4b:07:b0:1a:c1:9d:
7a:d9:7f:47:b3:35:57:4f:03:8a:5b:38:7e:12:4f:
85:51:7b:4c:73:d5:75:0a:22:3c:bf:28:33:dd:76:
31:11:f3:b0:e0:dc:81:32:6c:f8:62:30:b3:6f:16:
e1:d0:2a:28:99:6a:99:6a:f0:36:f2:68:b0:6b:0f:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:25:3F:A4:2B:29:EA:F2:B0:A1:03:F2:3A:29:5C:DE:7B:AD:35:F0
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3b:30:76:ee:92:4c:08:8b:23:ff:9e:84:30:39:c3:da:94:
4a:8d:95:ed:8d:d9:9c:86:e3:5c:24:4f:16:91:d1:85:1b:81:
72:ff:6c:e8:6b:1e:30:fd:44:8d:77:a0:b7:c3:fe:4a:1d:c7:
44:72:ad:1a:19:fc:25:32:55:6f:9f:ab:98:10:f2:75:72:ca:
01:ec:78:6c:70:70:63:ce:7a:de:4d:84:53:4e:06:43:0a:fc:
ca:31:6a:8b:78:82:8a:14:98:3a:a5:55:ff:e4:23:10:e4:e0:
39:df:9c:6f:bf:bc:01:70:e5:f4:ab:6b:05:a3:8a:53:b1:d0:
06:21:65:d7:5d:48:fb:f4:6a:34:af:5f:96:a2:a4:8a:7c:7d:
e7:6a:70:fb:0e:20:4e:72:27:7d:ff:ad:68:f4:6b:95:4f:d0:
cb:be:a6:02:e9:c9:e9:3b:a1:30:58:f4:d9:e4:8d:34:3c:04:
7e:ba:87:07:71:8a:21:34:ef:57:ec:8d:d3:c9:70:1c:c1:6c:
47:f8:6f:95:5c:4e:e0:f8:eb:fa:2e:55:05:3e:e5:31:96:8a:
91:09:f6:9f:cb:53:8f:9d:f1:5e:bb:cd:31:0d:44:7c:c9:4a:
8c:4a:77:27:9a:c3:19:de:9c:0e:f9:e2:0a:d0:38:88:40:54:
22:41:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:11:05 2026 by rpki-client