Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: QQ8vmrcoS/QjPF5ePcOqaWUYf3EB10p92zksPc4UNBs=
Subject key identifier: A2:FD:61:12:DB:85:BF:98:22:25:A6:DB:B7:1B:B5:E6:98:56:94:37
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 01A12B44FBB270FE156B5A42EEDF29D9DFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 14:01:43 +0000
Manifest this update: Sun 11 Oct 2026 14:01:43 +0000
Manifest next update: Mon 12 Oct 2026 14:01:43 +0000
Files and hashes: 1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: ypxphTkDg12LGZG8JMvuv2nCpNODKZbOkAm4IG4JT6E=)
2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:fb:b2:70:fe:15:6b:5a:42:ee:df:29:d9:df:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Oct 11 14:01:43 2026 GMT
Not After : Oct 12 14:01:43 2026 GMT
Subject: CN=a2fd6112db85bf982225a6dbb71bb5e698569437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:78:4d:d6:74:1e:d9:df:07:4f:09:47:5c:
c9:8f:0e:1d:e7:c2:41:66:53:b9:a1:39:b5:4e:de:
f7:b0:3b:af:e8:ff:9b:f6:7d:b9:02:a3:3d:4e:c2:
cd:3a:55:2f:26:13:53:61:30:8b:6d:ba:95:49:bc:
b6:3a:ea:49:4d:02:7f:5b:72:c7:97:6b:b4:d8:60:
5f:e2:10:3a:e5:55:6b:11:20:9b:7c:c5:cf:fe:04:
2d:fa:90:0a:35:cd:8d:2f:c7:2c:60:98:d7:29:8c:
83:12:92:0b:e2:d9:2f:2b:2d:ed:8c:52:ad:15:5c:
59:49:a8:e2:e5:cd:1e:8d:05:2b:46:c2:1f:17:85:
aa:02:b3:1a:d7:0e:1b:eb:ba:de:74:0c:43:6a:5b:
79:92:d9:32:75:11:d2:e0:6a:66:b3:e2:95:87:85:
85:f4:35:bf:ab:b8:c0:a1:75:35:98:bd:c8:86:b9:
85:8d:fe:d9:a6:5d:fb:25:63:89:ef:2d:56:38:bf:
9b:b1:e4:05:bf:02:2d:02:6d:26:56:ac:8a:5d:d5:
5a:88:b5:b8:78:d5:d9:1b:ae:c9:ba:0b:f7:a6:64:
20:c2:70:5c:d2:ee:f3:ca:99:c7:de:fd:5f:e2:d5:
fc:c8:8c:16:9a:e7:16:8e:8e:fd:c2:2d:a1:d4:91:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:61:12:DB:85:BF:98:22:25:A6:DB:B7:1B:B5:E6:98:56:94:37
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:69:6e:f5:a8:58:0e:f1:27:f2:40:cd:a0:f8:3c:da:4d:51:
86:b2:b0:d9:c7:26:c2:81:3b:63:ca:60:4a:d7:f9:25:26:38:
f8:5f:79:8d:99:f4:df:85:46:3c:22:cf:c2:6e:eb:5f:61:d2:
c9:b2:20:81:4d:ae:ec:5e:ed:08:b6:91:f4:c4:18:72:61:ae:
3a:6f:3a:40:c0:d5:d8:14:f2:b5:cc:49:f1:dc:90:98:6d:da:
0c:95:26:8c:7e:9c:50:a1:a2:f5:4e:f2:3b:d5:06:21:90:2f:
db:bf:d2:99:3c:7d:3c:2a:a0:94:60:da:ea:ab:38:83:bb:8f:
fa:ef:59:8f:43:83:42:d0:6a:7a:46:f9:83:a0:2d:75:ed:71:
15:c2:b2:13:d4:fb:9f:7f:37:e6:9c:aa:f2:33:ed:71:e6:29:
e7:52:20:75:e7:1b:85:cf:43:bd:12:01:9b:d8:ca:57:ac:65:
32:6e:2e:d2:bd:f8:58:d0:c0:39:a4:e4:8a:07:47:6f:d0:88:
7c:3a:65:5d:14:95:d1:13:6f:e6:b4:ba:09:c5:c1:f9:40:e6:
78:c0:4e:30:aa:d3:cf:fa:a2:09:c3:dd:9b:ea:21:a7:3e:1a:
8e:55:cf:f7:29:e1:cb:c5:b5:fe:56:ad:03:69:9d:c5:5c:e1:
e9:1c:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:53:31 2026 by rpki-client