Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
File: I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft (raw, json)
Hash identifier: /R6Gyo7g1sVRVw5LIbgdfAk/zR/E58ZMFbOw9wGWOB0=
Subject key identifier: 5A:E6:60:63:26:3B:AF:36:ED:6D:E1:52:11:4D:08:D8:7B:3F:13:28
Authority key identifier: 23:8A:C2:B0:77:BB:72:AE:95:50:6F:1B:7D:D7:92:2C:86:93:28:49
Certificate issuer: /CN=238ac2b077bb72ae95506f1b7dd7922c86932849
Certificate serial: 01A0F0E6EF9E0C2E26C9F820F33FE8AC7E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:01:01 +0000
Manifest this update: Wed 30 Sep 2026 06:01:01 +0000
Manifest next update: Thu 01 Oct 2026 06:01:01 +0000
Files and hashes: 1: I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl (hash: DibQaS6qAkouZnDBdnKtjk2zgGV0JK7oMQt7Qn+HC90=)
2: ZLiU1atI_HJAqv1dEuEca2LiYK4.roa (hash: wnwFkyBm5yBNEm5NFKbYxok77hCkil5I8o3VMhwKHG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e6:ef:9e:0c:2e:26:c9:f8:20:f3:3f:e8:ac:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238ac2b077bb72ae95506f1b7dd7922c86932849
Validity
Not Before: Sep 30 06:01:01 2026 GMT
Not After : Oct 1 06:01:01 2026 GMT
Subject: CN=5ae66063263baf36ed6de152114d08d87b3f1328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:1f:1e:39:9c:2d:ed:c7:71:77:c0:94:46:
81:0d:25:a9:75:8f:52:e9:1f:0b:57:96:5e:54:df:
35:6c:17:bc:6a:c9:ef:4d:04:97:60:42:53:05:db:
37:09:a8:98:cf:1b:48:61:10:0c:36:76:24:34:a7:
1d:ea:e4:f3:c3:da:68:f5:71:70:b5:5d:ee:f6:bf:
89:5a:7b:0a:e2:54:c2:2f:92:c8:60:4f:b5:1c:40:
eb:cb:f2:69:f2:33:e2:dd:bf:5a:99:d7:ce:59:88:
a5:d8:57:26:56:9e:16:49:1b:e6:59:3b:b6:5c:a5:
58:c2:72:e1:6b:23:aa:d1:5c:7e:99:27:9c:98:ee:
3e:ea:5b:ae:fb:eb:07:50:3a:67:24:c5:cf:68:1d:
28:b2:85:ca:b9:75:1b:42:ea:96:16:f0:a3:1f:97:
8a:1c:0d:75:47:58:2c:51:28:01:39:5a:3d:73:37:
79:35:4e:53:ac:63:54:58:fd:22:ec:08:bc:27:64:
53:65:a6:bb:ec:fb:cc:54:b0:9c:f9:aa:f1:1e:33:
0a:83:0e:48:8c:44:3c:d3:2b:35:49:5b:3f:6f:f6:
c4:8e:1c:92:81:a9:f1:7f:74:65:50:dd:ff:b3:93:
ed:42:05:df:2e:b1:0e:33:89:fd:89:3a:a2:82:bc:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:60:63:26:3B:AF:36:ED:6D:E1:52:11:4D:08:D8:7B:3F:13:28
X509v3 Authority Key Identifier:
keyid:23:8A:C2:B0:77:BB:72:AE:95:50:6F:1B:7D:D7:92:2C:86:93:28:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d9:db:39:60:d8:43:41:54:1c:bd:c2:b9:ac:9e:97:bc:bf:
3f:36:98:c7:2e:b9:61:02:2a:ad:54:1f:78:b6:16:53:57:ee:
d2:f8:1d:6c:2f:6f:ef:93:76:83:16:a5:af:3b:a8:c7:66:c9:
11:c2:1b:fe:42:f6:17:b7:cc:73:c1:d2:76:cb:d8:6a:9a:c8:
bb:0d:5e:d8:1b:c1:f8:9a:4d:f0:41:8d:30:e9:7d:3b:6f:a1:
93:9d:24:d3:6e:dc:26:4e:87:a5:70:e9:7b:5d:e1:e2:a9:74:
4d:3d:7f:0e:e5:4c:76:1a:6a:5d:f6:04:6a:f4:76:de:6c:38:
9a:b4:1f:46:6d:e9:e8:e7:dc:53:6b:3f:69:05:b3:ec:92:11:
0e:d9:78:f1:82:68:a2:e2:78:6d:b9:02:1f:aa:54:ee:d1:b9:
0c:59:ab:b9:6f:ea:a8:e7:66:54:70:14:b5:9c:8b:d5:89:62:
da:c3:1e:71:c4:26:77:26:b4:30:5c:a4:d9:ae:2b:43:a2:5e:
14:78:d4:04:dd:ce:18:1f:54:9c:21:8d:2b:8f:ca:bc:51:e7:
45:57:9b:8c:3d:b6:ac:a6:98:aa:af:36:77:f9:55:40:be:f2:
d5:24:5e:a1:6a:44:73:73:87:6c:61:1a:be:2f:a4:63:d8:67:
47:a3:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:20:43 2026 by rpki-client