Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
File: IH_lA3M22POUAym_Ct23kzhO9SI.mft (raw, json)
Hash identifier: 6SOcgtMpx9SqYvsb8qoqTOM0hbvgSoM3/Ckm+ahMchY=
Subject key identifier: 0B:09:36:72:E4:EB:3B:18:03:D0:0B:46:7C:C8:E2:17:B8:EE:9F:F7
Authority key identifier: 20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
Certificate issuer: /CN=207fe5037336d8f3940329bf0addb793384ef522
Certificate serial: 01A0D9BA3D94AA833648E537D6E3F291053A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:00:56 +0000
Manifest this update: Fri 25 Sep 2026 18:00:56 +0000
Manifest next update: Sat 26 Sep 2026 18:00:56 +0000
Files and hashes: 1: IH_lA3M22POUAym_Ct23kzhO9SI.crl (hash: fRgod3ymmKFJURaSdKuTuSVBFVLJ53/6/VGPLF/LTjQ=)
2: TsdPJx7OiywMM122PIYNYWmJFCc.roa (hash: x07yC7l/UbYraclqrFWdPKzw6DYUXEN90KFVFdpgkOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:3d:94:aa:83:36:48:e5:37:d6:e3:f2:91:05:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207fe5037336d8f3940329bf0addb793384ef522
Validity
Not Before: Sep 25 18:00:56 2026 GMT
Not After : Sep 26 18:00:56 2026 GMT
Subject: CN=0b093672e4eb3b1803d00b467cc8e217b8ee9ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:f3:1e:ab:07:18:67:99:35:7f:5f:ca:98:
90:a5:5a:d7:48:62:8f:7a:c5:30:4d:88:21:1e:11:
20:00:c5:7f:b1:6d:10:26:22:0a:dd:d0:25:31:8d:
fb:d2:d0:f7:aa:cf:dc:fa:17:f9:db:4e:ac:da:0a:
0d:6d:31:19:bc:cd:43:e5:de:0e:30:37:43:31:9e:
4c:fb:70:0b:8c:da:4a:f1:50:6e:60:f5:5a:62:ec:
3b:b6:f8:37:f8:27:bf:84:e8:41:46:f1:f5:4e:89:
8d:60:c5:5f:e7:98:02:b3:90:c2:39:3a:cb:11:9d:
a9:8c:29:2a:2c:85:76:2d:33:e9:c7:cc:a3:e0:fb:
8a:ae:c5:42:a7:9d:ea:a3:cd:26:15:e1:8a:c1:2c:
b8:26:b4:af:14:99:2c:b8:b7:8d:09:3f:c7:43:84:
81:30:56:ab:c2:91:51:d1:20:17:e4:40:6b:35:b8:
bb:f4:44:80:48:20:2b:20:2a:28:1d:60:5d:d6:31:
48:53:95:b8:5d:ca:8d:62:fd:2e:07:18:fe:2c:69:
bd:b8:7d:ef:ca:d7:73:24:b8:21:46:97:47:d4:96:
42:77:69:ec:c4:a0:37:51:47:14:5c:27:3d:1c:99:
6d:f2:27:9f:ec:77:ad:4d:a5:92:c8:99:21:05:77:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:36:72:E4:EB:3B:18:03:D0:0B:46:7C:C8:E2:17:B8:EE:9F:F7
X509v3 Authority Key Identifier:
keyid:20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:22:d2:8b:60:13:cd:77:96:41:80:c8:97:a5:75:3a:5e:e2:
ef:47:93:d8:e5:96:71:55:3a:e9:54:b5:6b:fe:71:da:00:77:
a1:0b:ba:67:06:ce:fc:f4:cd:f7:81:24:fa:75:77:cc:b5:79:
f0:02:b6:5f:f7:36:ef:39:ab:4b:5e:30:31:68:18:52:27:2f:
fd:b7:b3:dd:12:72:49:0d:e3:89:07:2e:a5:85:e1:0d:4a:ad:
00:da:ab:03:4d:82:9c:34:14:e0:57:4d:86:02:c3:02:8c:68:
62:53:32:da:fe:be:c9:81:33:97:cf:8f:63:dc:52:f1:91:56:
3e:51:7c:07:b3:6f:81:a4:bd:df:4a:c4:54:e6:5f:f9:86:f5:
3b:d3:03:89:b9:e5:32:11:7a:70:63:77:89:71:0c:b4:9e:eb:
3c:9d:b0:1d:19:f5:ab:b6:28:27:4e:08:e0:3d:ce:53:fc:6c:
76:1d:a2:4f:ce:8b:24:b0:81:24:7b:ee:64:ee:ec:86:af:91:
6f:31:6b:e9:a7:10:f8:7c:88:f8:72:8b:b2:d5:50:b5:4c:c9:
db:2f:1b:09:16:68:c6:92:2a:9d:b8:d3:16:21:71:72:9b:79:
c1:fd:ad:7b:30:0f:6c:db:27:ba:e7:ae:b1:d3:9b:12:78:e1:
fb:aa:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:03:59 2026 by rpki-client