Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier: XiWudi5lo7tkLRk9EujsIsLbSL4ZbNRxQ86aTkxrg4Q=
Subject key identifier: 20:2D:FC:09:F7:D0:E6:8E:BA:33:79:4F:89:DC:0D:38:87:07:90:CC
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 01A1276759958322A9EF22D7B88714194ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number: 19D7
Signing time: Sat 10 Oct 2026 20:00:46 +0000
Manifest this update: Sat 10 Oct 2026 20:00:46 +0000
Manifest next update: Sun 11 Oct 2026 20:00:46 +0000
Files and hashes: 1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: uk79Z2ovSkx/kFYDloQpatjcn7e6m0vEUxbC/mew7lY=)
4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:59:95:83:22:a9:ef:22:d7:b8:87:14:19:4a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Oct 10 20:00:46 2026 GMT
Not After : Oct 11 20:00:46 2026 GMT
Subject: CN=202dfc09f7d0e68eba33794f89dc0d38870790cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:ef:78:1d:36:54:fd:3f:0c:61:24:fb:f6:
b9:92:fc:f5:45:ce:96:1b:0e:2f:38:78:01:20:9a:
f4:07:d1:f4:c0:ad:f0:fe:2b:08:27:2e:17:4d:8a:
ba:32:13:0a:bb:89:2d:ef:d4:b4:45:ed:e0:70:f9:
b4:28:1c:81:d2:50:9b:84:60:60:aa:2b:0c:ff:ac:
31:ea:69:07:4f:11:ca:39:6a:25:22:94:fd:7c:ce:
0e:9d:2e:10:77:ed:36:80:4b:e8:76:e2:6d:38:96:
27:9e:ce:56:a8:28:cc:f0:11:3e:5b:ad:1c:46:59:
fb:20:d6:e1:d1:73:73:87:6b:29:47:65:17:1d:79:
a1:e1:05:a7:a8:95:76:ec:b0:70:45:b7:0c:ad:38:
09:9b:52:e9:20:92:77:1d:11:49:06:da:c7:e3:0f:
c2:3e:91:08:60:82:82:44:a5:0c:98:6b:1e:b0:ee:
25:40:d4:36:80:29:48:81:9d:d8:db:65:11:68:b3:
15:74:5f:7b:9f:57:47:98:7d:f6:1b:cb:32:1c:13:
ae:38:dc:a2:29:18:a1:e2:a6:8a:3a:f4:4b:aa:ea:
33:7d:ea:bb:b1:b7:ec:f4:b3:13:ad:7a:e4:d0:c9:
dc:89:a9:c3:24:5d:ba:42:f9:13:75:ed:eb:ca:f5:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2D:FC:09:F7:D0:E6:8E:BA:33:79:4F:89:DC:0D:38:87:07:90:CC
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:c6:7b:50:ad:ea:cc:48:3b:0e:f7:94:22:c7:d8:16:cc:90:
27:5b:da:ae:5c:fa:ae:ca:40:70:ec:a2:b1:1b:77:4c:c5:b3:
4a:2b:0e:77:a7:52:ad:ce:78:f6:46:92:75:dc:2d:5e:0b:92:
59:a0:26:b8:46:94:e5:5d:9a:0e:70:42:de:f7:bb:97:f3:a6:
2c:8f:f0:48:fd:84:99:f1:aa:ab:02:bc:9f:bf:71:7e:8f:30:
69:5e:96:fd:fb:53:41:57:72:ac:e5:f1:3c:d3:78:04:de:34:
06:63:50:7f:d8:3f:bb:48:b0:34:36:ac:df:e5:8f:c7:f8:15:
38:14:4b:8e:a9:68:78:53:2c:4c:54:1d:2a:d6:91:4c:b0:54:
c8:d1:01:a3:29:92:28:36:a8:30:f5:ca:da:b2:2e:06:70:af:
ec:c0:c8:98:bb:58:1f:00:6b:84:dd:ae:15:85:a5:45:96:01:
b2:b6:3e:6e:ba:53:9d:1a:aa:39:1e:ef:ba:1f:05:c1:9b:08:
97:13:1c:9e:67:b5:b7:8e:73:80:a6:7a:d3:ee:4c:56:55:11:
e8:17:38:d1:58:de:99:8c:48:9b:97:25:bf:26:2f:71:e6:d2:
cc:28:52:be:63:db:67:a2:11:ab:39:84:37:76:f6:40:68:84:
0b:07:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 00:59:01 2026 by rpki-client