Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: Dsktfj78cfLrqCxFsSb3AcpBnHNREipFDyxhK5HLnKo=
Subject key identifier: D0:92:06:20:83:C1:BB:52:74:65:B0:D6:03:7F:3D:FF:0D:D5:95:84
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 01A0C7B33DB3B07E09849102E0998A610565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 0415
Signing time: Tue 22 Sep 2026 06:00:07 +0000
Manifest this update: Tue 22 Sep 2026 06:00:07 +0000
Manifest next update: Wed 23 Sep 2026 06:00:07 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: bOA2GSrh3fRGU6xeObOCPWPpsOny2845OwBSaMfLtG0=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:3d:b3:b0:7e:09:84:91:02:e0:99:8a:61:05:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Sep 22 06:00:07 2026 GMT
Not After : Sep 23 06:00:07 2026 GMT
Subject: CN=d092062083c1bb527465b0d6037f3dff0dd59584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:a1:e1:71:24:6a:5e:45:b1:52:86:93:24:
83:5d:19:13:d6:27:05:e8:86:f2:78:76:e7:cf:6a:
30:db:ee:4f:36:35:e9:b8:fb:f1:dd:b4:b0:df:8c:
0a:8a:fd:f1:f8:1f:51:33:3c:2f:9f:e2:8e:c6:c4:
81:e0:05:c1:68:1c:0b:0d:e3:7c:85:1d:6a:f1:99:
25:a1:60:4e:84:7d:ef:d1:29:83:f2:09:be:27:4f:
0d:39:40:68:c6:c9:e1:be:c2:73:a4:69:f2:fc:92:
39:a4:18:a1:5b:c4:15:60:f6:c0:af:bd:45:d9:c4:
d2:ef:a3:83:e7:78:17:52:7d:86:6a:d1:a3:32:4c:
1c:16:af:14:ac:db:fb:a8:ca:9a:29:76:ff:78:96:
c0:37:6b:48:90:9c:81:20:f4:51:b6:fc:dc:cd:f6:
53:da:b8:6e:89:97:c6:37:9c:14:bc:d8:22:bb:93:
63:9d:7b:f0:d8:1f:b6:e4:ec:f5:50:69:b5:21:6c:
80:17:1d:24:90:0e:15:ef:46:77:c4:32:17:74:e4:
0c:7b:d3:c3:cb:d0:c6:b4:3f:7c:6b:0c:f0:76:91:
43:db:24:06:b2:2d:7b:40:59:7f:90:73:e2:47:c8:
a2:41:e2:ac:d8:86:eb:58:bd:d4:94:45:54:ae:be:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:92:06:20:83:C1:BB:52:74:65:B0:D6:03:7F:3D:FF:0D:D5:95:84
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f3:82:44:3a:6d:74:e6:e8:22:bb:4c:54:42:79:89:e1:04:
07:2f:9d:02:f7:00:80:f8:4f:4d:a9:55:a9:a9:4b:7e:4b:2f:
a1:a0:d8:03:93:fe:62:aa:04:87:d2:79:50:d6:53:85:21:53:
f9:56:59:7b:a3:9e:87:40:26:64:08:ad:25:ea:fd:18:02:3a:
74:45:b3:a7:3a:22:6c:32:32:db:6f:22:08:f6:ba:ae:91:31:
5b:bf:d9:e3:6a:4e:fc:4f:8e:a6:04:98:04:64:01:86:71:47:
a7:df:6a:94:4c:aa:db:37:4b:ea:4f:14:97:04:38:d1:6f:32:
92:c3:7e:6c:0b:30:15:1e:1a:df:4e:e7:f9:57:fd:4c:33:ae:
ca:27:17:17:53:ce:16:f4:dd:0f:7c:05:e6:02:0b:56:98:f5:
68:74:a0:6e:36:12:d2:8a:6a:bf:08:9f:bb:89:ef:6d:61:66:
31:59:46:cd:99:02:83:46:f2:83:6e:08:c3:7f:e5:e9:e5:b0:
c4:4e:85:f4:89:d9:30:8d:92:61:8f:c6:dd:73:52:9d:58:bd:
14:8e:8c:80:99:be:ea:f5:b6:14:0f:9f:e7:62:1a:01:1a:0e:
13:d3:6d:b6:5c:b3:3e:dc:01:89:0f:24:70:aa:bf:0a:63:63:
33:98:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:55:27 2026 by rpki-client