Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: Kl3URB4F/LfCOE58cCYv5CxIiFDCL1divFo4R+YcWZc=
Subject key identifier: E8:AD:F2:12:41:B8:9C:E2:D3:DD:8F:06:FD:27:45:8C:C1:E1:FC:E0
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 01A1193DD5450C4CB5A074298D561005B82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 02:00:45 +0000
Manifest this update: Thu 08 Oct 2026 02:00:45 +0000
Manifest next update: Fri 09 Oct 2026 02:00:45 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: fs76zYNKpkWt47PLa2/MwF+a+YO8f8FucJ0lm1r+Y5s=)
2: di7BBo89yLvPzYRgI1CnXRkGKek.roa (hash: J2fGlbJBwYkKOrpnLxq93QttJnUWfvQ1tz5acXy/Cg8=)
3: jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa (hash: uJEOU0bJFwdOC2+0d4gL/okHKs1T55lvZjr01PdnJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:d5:45:0c:4c:b5:a0:74:29:8d:56:10:05:b8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Oct 8 02:00:45 2026 GMT
Not After : Oct 9 02:00:45 2026 GMT
Subject: CN=e8adf21241b89ce2d3dd8f06fd27458cc1e1fce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:44:45:1a:fe:b6:85:bd:77:db:94:6e:91:
ad:0e:7d:8b:98:6b:ca:d0:92:b6:6a:57:af:a2:7d:
55:e0:90:68:6d:ff:8a:f8:46:4e:c0:75:2a:1c:64:
24:58:2a:e7:1f:41:db:a4:2b:f4:1d:73:45:44:9f:
eb:38:b3:fd:29:6a:d1:55:74:1a:a7:06:78:3d:20:
ac:b2:42:35:f1:21:52:2d:ff:af:7d:a9:17:57:eb:
77:08:ac:32:86:d2:4e:cb:05:d6:f1:35:5d:86:5e:
db:93:b4:e3:da:bd:01:47:95:9f:b5:f4:b2:68:92:
ea:ed:7e:c0:c2:a4:a7:3a:1d:41:17:fa:09:df:a6:
fc:96:6c:ca:06:af:34:79:44:24:e2:c3:31:a7:77:
a3:df:6f:ca:de:14:cf:0e:ac:42:53:81:aa:31:69:
7c:a5:1e:90:de:d2:bc:9f:07:d2:a9:a2:ff:1d:4d:
0d:5a:99:c4:1d:ca:41:c5:73:25:7e:63:f8:d2:ed:
28:7d:1a:ea:88:3c:0c:4a:1d:62:fe:81:a2:79:fa:
75:7d:92:c8:79:70:b5:dd:7c:36:7b:75:47:30:5f:
55:21:01:04:8f:1c:41:ad:54:e7:99:07:15:1e:4a:
29:1e:b6:5d:68:79:87:7b:22:41:54:89:84:3f:4e:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:F2:12:41:B8:9C:E2:D3:DD:8F:06:FD:27:45:8C:C1:E1:FC:E0
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:84:ed:d6:ea:85:f1:c5:1e:0f:31:f5:eb:65:7a:dc:e1:2c:
ce:c2:83:2b:d3:bc:4e:3c:ac:b7:06:e1:12:37:e7:47:a1:b3:
ee:bb:d1:09:31:66:bf:c5:f9:ea:b5:84:c8:72:15:3e:fe:90:
e3:19:40:c9:e4:4a:41:a9:f1:99:5c:07:99:47:55:8b:4f:c7:
8e:7a:b2:59:8c:85:26:eb:98:89:f6:79:fc:f4:a1:02:4c:05:
a1:82:e0:2b:83:e5:80:b6:cb:66:40:b8:0d:e6:c6:b9:a0:9c:
cd:e3:f5:92:68:d5:97:96:5b:ca:15:fe:30:9d:ca:c4:5f:81:
c5:6a:a2:8b:05:57:20:0d:61:75:92:77:54:64:ea:68:7e:b4:
16:2d:f3:44:d6:8b:c1:ff:74:92:a0:4f:f4:11:0e:fe:4b:1c:
d1:6a:ab:89:8e:34:37:35:c0:5a:dd:00:07:af:87:d7:27:26:
7c:c8:58:78:ce:eb:1a:94:80:29:0e:c9:57:79:2a:c1:8e:1f:
f9:cf:7e:81:04:5b:90:d1:56:b6:d4:28:8d:19:5d:62:b8:2e:
7b:91:fe:df:9c:ca:2e:15:f0:75:99:bc:41:17:30:8b:93:d8:
6e:27:b9:0d:45:7b:d1:63:97:85:f1:54:14:90:9e:66:41:e7:
95:49:51:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZPdVFDEy1oHQpjVYQBbgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGNkMzQ5MTFjZmNlOTQ2YTIyZWE4NDY2MzczOGNkY2Mw
NzZkNDUwHhcNMjYxMDA4MDIwMDQ1WhcNMjYxMDA5MDIwMDQ1WjAzMTEwLwYDVQQD
EyhlOGFkZjIxMjQxYjg5Y2UyZDNkZDhmMDZmZDI3NDU4Y2MxZTFmY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gFERRr+toW9d9uUbpGtDn2LmGvK
0JK2alevon1V4JBobf+K+EZOwHUqHGQkWCrnH0HbpCv0HXNFRJ/rOLP9KWrRVXQa
pwZ4PSCsskI18SFSLf+vfakXV+t3CKwyhtJOywXW8TVdhl7bk7Tj2r0BR5WftfSy
aJLq7X7AwqSnOh1BF/oJ36b8lmzKBq80eUQk4sMxp3ej32/K3hTPDqxCU4GqMWl8
pR6Q3tK8nwfSqaL/HU0NWpnEHcpBxXMlfmP40u0ofRrqiDwMSh1i/oGiefp1fZLI
eXC13Xw2e3VHMF9VIQEEjxxBrVTnmQcVHkopHrZdaHmHeyJBVImEP05qVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOit8hJBuJzi092PBv0nRYzB4fzgMB8GA1UdIwQY
MBaAFCNM00kRz86UaiLqhGY3OM3MB21FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4Zjkt
MTI1NTAwZDJiZTk0LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4ZjktMTI1NTAwZDJiZTk0
LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQITt1uqF
8cUeDzH162V63OEszsKDK9O8TjystwbhEjfnR6Gz7rvRCTFmv8X56rWEyHIVPv6Q
4xlAyeRKQanxmVwHmUdVi0/HjnqyWYyFJuuYifZ5/PShAkwFoYLgK4PlgLbLZkC4
DebGuaCczeP1kmjVl5ZbyhX+MJ3KxF+BxWqiiwVXIA1hdZJ3VGTqaH60Fi3zRNaL
wf90kqBP9BEO/ksc0WqriY40NzXAWt0AB6+H1ycmfMhYeM7rGpSAKQ7JV3kqwY4f
+c9+gQRbkNFWttQojRldYrgue5H+35zKLhXwdZm8QRcwi5PYbie5DUV70WOXhfFU
FJCeZkHnlUlR7g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:43:40 2026 by rpki-client