Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
File: I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft (raw, json)
Hash identifier: zwKU9iU6r/gQyLiF6mTTXLjUKNralxz0NT57+hhxIaY=
Subject key identifier: 82:C3:A6:9A:C0:DD:F5:01:05:AD:64:7D:6F:8E:DC:22:06:4B:1F:E7
Authority key identifier: 23:8B:D0:FA:94:D0:08:25:D6:A9:1E:2D:FC:E6:A9:2A:36:F2:5F:B9
Certificate issuer: /CN=238bd0fa94d00825d6a91e2dfce6a92a36f25fb9
Certificate serial: 01A0C5575FA5282E2E51BE4A177A8C46AB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
Manifest number: 3A
Signing time: Mon 21 Sep 2026 19:00:32 +0000
Manifest this update: Mon 21 Sep 2026 19:00:32 +0000
Manifest next update: Tue 22 Sep 2026 19:00:32 +0000
Files and hashes: 1: I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl (hash: EvXzG0YJT/8P4nIQRB3awJWAGDR1dnhTWBQvNtvxaFE=)
2: dI13xkmvpmBEYbpkxQ6Dmi7062M.asa (hash: 75E6S1aKT5Pa2f20bYr6fZVc14KGFerjIYrruRaVExA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:5f:a5:28:2e:2e:51:be:4a:17:7a:8c:46:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238bd0fa94d00825d6a91e2dfce6a92a36f25fb9
Validity
Not Before: Sep 21 19:00:32 2026 GMT
Not After : Sep 22 19:00:32 2026 GMT
Subject: CN=82c3a69ac0ddf50105ad647d6f8edc22064b1fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:e6:18:da:aa:0a:86:e2:d8:19:88:f3:f1:
6d:d1:62:ff:40:aa:c6:e8:95:d2:e5:61:8a:9c:77:
a7:1f:6a:95:a9:84:46:ab:93:a0:d4:d3:a8:8f:e1:
2f:3c:3d:75:d2:d3:df:cd:be:31:26:81:fc:9c:14:
1f:ce:0a:90:40:c7:6a:d4:d2:d9:91:28:ac:33:99:
4f:2a:27:8d:96:02:cb:bb:1f:e2:b4:5a:ea:d9:05:
fb:80:16:f0:7d:b8:10:0d:b2:dd:a3:fc:ac:16:b8:
2a:65:c7:74:3c:8c:1a:2b:1e:d3:6d:10:5a:4c:03:
7e:cd:1e:b7:32:54:5e:5a:51:59:5d:18:d7:88:96:
65:9a:90:03:19:35:a1:1b:04:fc:d8:a7:a3:f0:1b:
4b:ba:ed:30:fb:f4:10:08:23:41:18:03:44:43:0c:
9e:83:dd:98:78:44:96:d8:af:d7:d8:20:28:4a:24:
7b:3a:69:c8:76:84:5c:00:c8:88:7c:cd:85:96:b8:
07:36:80:87:70:39:72:dc:08:18:14:8e:15:37:e2:
66:f0:8c:46:e7:b1:db:0f:40:0f:64:2e:52:5d:cd:
50:91:32:8d:10:39:33:c1:91:87:6f:52:30:7c:e7:
9c:38:8b:6c:a1:15:4c:eb:e3:35:3b:c7:06:81:8f:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C3:A6:9A:C0:DD:F5:01:05:AD:64:7D:6F:8E:DC:22:06:4B:1F:E7
X509v3 Authority Key Identifier:
keyid:23:8B:D0:FA:94:D0:08:25:D6:A9:1E:2D:FC:E6:A9:2A:36:F2:5F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:66:e7:82:93:3e:44:b8:ed:23:58:52:09:c2:a0:5d:9e:f5:
d3:33:0b:39:9b:59:a6:57:bc:b6:cd:f5:ee:f0:bc:d6:76:b5:
8b:e4:87:08:f6:dd:6f:69:9f:97:d8:ab:8c:76:1f:2b:95:e3:
47:18:c2:c3:4c:e3:0d:c2:03:15:66:c9:fc:9c:ab:1b:3d:95:
a1:ce:5d:22:22:a5:df:f6:16:e6:25:d4:eb:1f:3f:3e:9b:18:
b7:eb:cb:c2:ee:5d:40:d0:50:c5:fc:ee:b4:bc:d7:c3:49:ec:
fb:48:6e:7c:c7:57:8e:7f:c4:f2:1d:13:bd:0e:ff:0a:c7:4b:
6b:58:ab:9e:6c:ba:7f:44:1f:ff:fa:0b:4a:81:57:fb:75:1f:
41:d3:35:a4:2b:fc:ba:3c:8c:97:ff:4b:3f:4c:7f:21:31:71:
62:33:63:e4:28:d1:59:58:75:6c:3b:7b:61:eb:bf:a0:52:ef:
42:58:41:d7:7d:16:87:cb:5a:4a:b4:fd:0e:1f:97:a4:06:58:
39:4e:8a:ac:6c:bd:ab:6d:b0:2e:3c:e1:70:e0:b4:2b:bf:e4:
e7:4e:9e:c7:be:f2:a3:1f:c9:62:b7:06:99:a1:1c:43:c7:c2:
56:e0:eb:4c:e1:60:3e:f2:8c:e6:dc:5b:e1:d2:a9:0d:29:bb:
48:88:3b:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV1+lKC4uUb5KF3qMRqsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOGJkMGZhOTRkMDA4MjVkNmE5MWUyZGZjZTZhOTJhMzZm
MjVmYjkwHhcNMjYwOTIxMTkwMDMyWhcNMjYwOTIyMTkwMDMyWjAzMTEwLwYDVQQD
Eyg4MmMzYTY5YWMwZGRmNTAxMDVhZDY0N2Q2ZjhlZGMyMjA2NGIxZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumLmGNqqCobi2BmI8/Ft0WL/QKrG
6JXS5WGKnHenH2qVqYRGq5Og1NOoj+EvPD110tPfzb4xJoH8nBQfzgqQQMdq1NLZ
kSisM5lPKieNlgLLux/itFrq2QX7gBbwfbgQDbLdo/ysFrgqZcd0PIwaKx7TbRBa
TAN+zR63MlReWlFZXRjXiJZlmpADGTWhGwT82Kej8BtLuu0w+/QQCCNBGANEQwye
g92YeESW2K/X2CAoSiR7OmnIdoRcAMiIfM2FlrgHNoCHcDly3AgYFI4VN+Jm8IxG
57HbD0APZC5SXc1QkTKNEDkzwZGHb1IwfOecOItsoRVM6+M1O8cGgY8g/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILDpprA3fUBBa1kfW+O3CIGSx/nMB8GA1UdIwQY
MBaAFCOL0PqU0Agl1qkeLfzmqSo28l+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTR2US1wVFFDQ1hXcVI0dF9PYXBLamJ5WDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZWUyNTktOWZhMi00OGRmLTlkMDgt
ODg4Njc3ZGI3NjRmLzEvSTR2US1wVFFDQ1hXcVI0dF9PYXBLamJ5WDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZWUyNTktOWZhMi00OGRmLTlkMDgtODg4Njc3ZGI3NjRm
LzEvSTR2US1wVFFDQ1hXcVI0dF9PYXBLamJ5WDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAembngpM+
RLjtI1hSCcKgXZ710zMLOZtZple8ts317vC81na1i+SHCPbdb2mfl9irjHYfK5Xj
RxjCw0zjDcIDFWbJ/JyrGz2Voc5dIiKl3/YW5iXU6x8/PpsYt+vLwu5dQNBQxfzu
tLzXw0ns+0hufMdXjn/E8h0TvQ7/CsdLa1irnmy6f0Qf//oLSoFX+3UfQdM1pCv8
ujyMl/9LP0x/ITFxYjNj5CjRWVh1bDt7Yeu/oFLvQlhB130Wh8taSrT9Dh+XpAZY
OU6KrGy9q22wLjzhcOC0K7/k506ex77yox/JYrcGmaEcQ8fCVuDrTOFgPvKM5txb
4dKpDSm7SIg7Iw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:00:11 2026 by rpki-client