Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: kuUZRtMKewWnt0+wR+dtHIT4oFdDrTHGTn7VTd+lCQY=
Subject key identifier: 08:6D:1B:FC:10:F3:1E:B4:D5:E1:8E:6A:6C:86:D0:F8:B3:D1:82:F1
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 01A129C398E6EB7E0D4A48EE65E431514F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 07:00:46 +0000
Manifest this update: Sun 11 Oct 2026 07:00:46 +0000
Manifest next update: Mon 12 Oct 2026 07:00:46 +0000
Files and hashes: 1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: Wo+BSVLPMtef+0dQiVHeaWfnWznuD6N03OE5MfhIID4=)
2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
4: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (hash: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=)
5: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c3:98:e6:eb:7e:0d:4a:48:ee:65:e4:31:51:4f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Oct 11 07:00:46 2026 GMT
Not After : Oct 12 07:00:46 2026 GMT
Subject: CN=086d1bfc10f31eb4d5e18e6a6c86d0f8b3d182f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:11:64:30:e6:55:1d:5f:f8:71:c3:30:c7:
15:f3:c3:fb:6d:42:ee:d0:55:7f:8d:64:8c:54:65:
4c:6e:30:b6:d7:05:fb:c3:58:56:24:dc:b6:cd:fd:
1e:54:34:50:9c:7b:95:98:7b:b6:b0:39:be:85:1f:
77:67:b8:db:b1:22:2b:be:99:87:81:e7:eb:f5:99:
e1:80:c8:7f:0e:fe:5c:e9:61:57:b5:32:5f:22:9f:
c4:f3:44:90:65:d7:97:f0:fc:e6:07:4b:6b:13:8c:
63:8f:ea:af:cd:86:bd:3b:2a:ec:12:25:61:88:41:
6a:34:7e:ee:a8:40:39:36:aa:97:6f:e2:a8:bd:af:
6e:03:3d:d1:70:72:f8:ee:ff:6a:c1:ab:a8:0e:e2:
a4:00:1b:ef:9f:ce:a8:6c:a9:35:70:43:d6:60:04:
24:19:b3:ce:90:a5:ca:67:41:16:8c:29:6c:e5:16:
f2:26:0f:9e:fd:c6:4e:5d:d3:36:60:fb:f7:56:6b:
fc:9b:bf:b2:70:18:44:11:c0:2e:8e:4f:54:a7:5b:
ba:35:51:5e:99:6b:10:3c:75:6e:a5:9c:5d:ba:a9:
c8:56:62:bf:b9:9f:6e:1a:0a:e9:7f:d5:44:55:d3:
f9:a0:af:5d:8c:e6:03:6d:c2:27:a0:b3:b8:ab:51:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6D:1B:FC:10:F3:1E:B4:D5:E1:8E:6A:6C:86:D0:F8:B3:D1:82:F1
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:56:ce:ac:ca:9c:5b:d7:ac:60:7b:c1:8a:68:d7:d2:fb:e9:
a8:2f:42:16:5d:18:1b:ca:98:45:4d:9c:7d:67:39:6b:57:df:
85:80:15:f8:80:0b:3f:59:c6:1d:72:2f:84:70:af:02:70:b9:
b1:22:69:91:ce:74:7e:96:af:e9:f1:96:d6:80:b2:9e:3b:4e:
11:d7:f2:8a:7a:3a:f3:04:d5:42:e2:09:b4:98:08:ec:55:78:
2b:4e:5e:8b:cf:1e:fe:41:60:0c:81:b9:d4:aa:50:5c:1b:d7:
d9:d9:7f:9a:1c:e4:f1:ba:42:b7:e8:5c:fa:83:96:a9:e7:2f:
d1:62:8c:d5:a1:24:84:f4:85:2a:85:d1:f1:13:4b:f2:81:4f:
91:96:72:3a:a7:1b:53:c5:6a:7b:91:ee:82:18:81:0e:c8:f8:
4a:83:7e:8f:4c:10:24:25:f5:79:54:e7:28:9a:11:b5:d6:44:
c2:47:95:25:36:20:18:dc:be:41:0d:c7:13:cc:5e:fc:34:06:
8f:e5:45:f8:f0:8a:31:da:e9:85:43:63:47:9a:ee:92:2a:7a:
24:33:cc:4d:ed:90:06:16:e9:b3:ed:74:42:8b:73:b3:23:bd:
e5:d9:10:a9:f8:ca:9a:b4:64:9f:9a:a0:5c:a7:4d:3e:57:98:
5a:76:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:11:19 2026 by rpki-client