Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
File: IiiCdVNULJSfFKzFYZw4aimzL2g.mft (raw, json)
Hash identifier: PUSQaGa2EnSQoWsvVURFg4hTngZRoCCzCbNlTU3+gQM=
Subject key identifier: CC:9E:5C:2E:19:FD:76:2D:DE:F3:B2:E6:C8:B7:A1:AE:E5:68:2A:4A
Authority key identifier: 22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
Certificate issuer: /CN=2228827553542c949f14acc5619c386a29b32f68
Certificate serial: 01A0C47BE4C5249140154197B795329E3712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:48 +0000
Manifest this update: Mon 21 Sep 2026 15:00:48 +0000
Manifest next update: Tue 22 Sep 2026 15:00:48 +0000
Files and hashes: 1: 1-0P5V5UyueMNdvNd2DfvuSJDLmI.asa (hash: nyGQDkF0li5XOfPiwvvNf9NjNB6Be0Rtz+hzPp9tCT8=)
2: IiiCdVNULJSfFKzFYZw4aimzL2g.crl (hash: 58szKH6Y/JsMdX8nN0pkRal2HS9jNtxydPtV6QNPM18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:e4:c5:24:91:40:15:41:97:b7:95:32:9e:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2228827553542c949f14acc5619c386a29b32f68
Validity
Not Before: Sep 21 15:00:48 2026 GMT
Not After : Sep 22 15:00:48 2026 GMT
Subject: CN=cc9e5c2e19fd762ddef3b2e6c8b7a1aee5682a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:c7:8d:7f:3c:bc:7e:a7:f0:c8:65:af:dc:
52:86:e7:19:5d:ad:0f:44:a6:bb:d7:f0:0d:f6:0d:
63:44:c1:97:09:6b:c9:a8:aa:8c:99:49:e5:81:97:
2f:ff:f4:3f:c3:87:48:1e:42:48:c8:e8:d1:1b:9c:
96:fb:74:0e:a9:bb:41:2c:a3:9c:46:40:d0:af:21:
37:e2:83:3b:dd:94:36:fa:e9:35:e0:8a:6f:15:87:
52:b8:a4:b2:a6:1b:79:ee:cd:aa:32:5a:2e:9e:0b:
51:59:89:8a:71:f2:f2:44:93:c5:07:eb:a3:70:03:
04:9a:0e:86:50:25:a8:95:4c:75:27:20:1a:d5:c1:
1e:b2:09:5e:66:a4:87:12:62:f6:fa:91:db:37:11:
e8:ba:d2:4b:15:4f:4c:68:41:2f:10:d1:e2:f8:c1:
11:89:b8:32:ca:01:13:ff:b2:50:a4:cd:65:a1:45:
d2:50:16:12:0f:3e:8e:ac:eb:85:e4:82:37:0f:e2:
5c:8c:67:86:11:a2:48:c5:c8:b4:83:9f:ea:31:42:
31:55:93:20:5f:9e:dd:e2:4f:57:c2:fd:00:1b:31:
7f:e3:88:51:63:81:5d:54:13:dc:b5:1e:e7:3b:43:
1f:11:f7:90:03:a6:a2:2a:a3:4a:2a:1a:75:fe:8c:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9E:5C:2E:19:FD:76:2D:DE:F3:B2:E6:C8:B7:A1:AE:E5:68:2A:4A
X509v3 Authority Key Identifier:
keyid:22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:47:2e:ea:19:12:43:08:40:f3:96:91:8c:f0:68:02:d0:46:
ab:c5:79:3e:49:ee:cc:bc:af:4a:f3:d4:47:77:9d:75:9f:9f:
1e:96:84:3f:d2:6f:0c:cf:f3:4c:c5:7d:e9:00:31:58:cb:1f:
b5:e0:ae:43:2d:7e:7f:02:be:fe:cd:c8:18:4b:a2:4f:59:2f:
76:b6:b3:f5:bc:a3:37:e7:8c:04:94:b5:83:2c:23:4f:7c:da:
3d:7e:1c:3e:de:9e:45:21:9d:fa:5c:ec:2c:3f:a5:28:6c:89:
32:3e:11:f9:a6:77:98:88:12:ba:50:3d:3a:02:5d:80:1a:db:
b5:73:e5:71:3c:4b:bf:63:bc:54:20:c1:4f:d5:90:05:ac:da:
0a:f2:50:c4:bf:4e:a9:d3:58:98:13:62:73:cc:31:52:da:83:
cd:d5:87:e5:c4:db:b1:fc:dd:a9:26:d5:1f:8f:7b:7d:1c:f0:
c4:4a:d6:b9:a7:68:88:d9:1c:13:19:f0:ab:4f:8a:cc:ca:74:
7c:05:3d:7a:57:a0:74:f7:c3:20:3f:56:79:55:67:74:df:80:
d4:67:23:b2:02:c8:6d:5d:07:ad:53:9e:99:a0:ff:e4:a2:cd:
84:08:24:8c:b0:c8:a4:ee:a9:00:35:c5:04:67:d5:ba:55:0f:
1e:59:eb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:59:31 2026 by rpki-client