Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: A15RtCdYUllAZEWSN2uOsmfrBicx6FDYcGO4hGhZoYo=
Subject key identifier: EF:51:BA:94:F2:63:FC:EF:81:D1:D7:BC:65:0F:59:C4:83:2B:07:61
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 01A124D41F2E9AFC7BCD863C75795298F638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 12B4
Signing time: Sat 10 Oct 2026 08:00:43 +0000
Manifest this update: Sat 10 Oct 2026 08:00:43 +0000
Manifest next update: Sun 11 Oct 2026 08:00:43 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: RyndOLkTX3fTrCVo9QdE1/y7kzmvc7uJlb8ljIAJxwg=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:1f:2e:9a:fc:7b:cd:86:3c:75:79:52:98:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Oct 10 08:00:43 2026 GMT
Not After : Oct 11 08:00:43 2026 GMT
Subject: CN=ef51ba94f263fcef81d1d7bc650f59c4832b0761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:b0:b6:47:46:54:1d:78:b9:eb:94:cd:38:
6b:98:90:2b:40:e9:ba:76:72:e9:34:c9:52:4d:51:
a0:82:02:2d:ad:cb:78:5b:dd:78:d2:ee:ba:83:35:
f4:51:2b:ce:a3:11:76:9b:83:85:30:b0:e4:9c:b0:
2a:50:a6:6f:64:14:f2:5b:73:1f:37:10:fa:68:37:
84:87:e5:7e:2b:02:03:6c:79:1b:2e:b1:42:ec:e1:
ad:cf:1c:09:f2:d0:1e:04:93:08:9c:69:99:22:ce:
f5:7b:e6:78:37:56:06:b6:e3:54:31:e9:31:f0:19:
a3:73:4c:5e:55:70:49:4f:ef:7a:ec:e5:7b:25:d6:
44:60:52:c9:1b:1e:87:19:0e:aa:16:55:c7:76:3e:
34:42:26:61:73:8c:fd:fa:de:a5:4a:f2:d4:b1:25:
a4:3b:f7:3e:3e:d3:77:4a:1b:f3:b8:11:62:0e:1c:
d6:3c:b3:3c:c2:2d:5c:93:61:33:92:e0:f8:4d:3b:
fc:f9:8f:3c:6b:a8:14:87:08:f7:97:39:ca:9b:cd:
87:af:84:ee:92:ae:ff:c5:f0:97:2c:3a:56:be:ba:
eb:5c:9b:6f:8b:3c:e7:fd:f9:1e:2d:17:fa:66:4b:
43:24:db:90:1d:a2:9a:ef:75:32:04:87:02:60:c2:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:BA:94:F2:63:FC:EF:81:D1:D7:BC:65:0F:59:C4:83:2B:07:61
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:af:44:95:1d:ef:9b:1c:f2:5a:25:67:67:a5:9a:f9:46:7b:
46:fd:02:8a:b5:ad:96:03:ff:62:9b:13:87:82:44:fb:43:61:
2e:22:62:27:4b:91:dd:99:c5:18:b6:b2:2d:2e:2b:33:3a:6b:
60:6e:70:53:52:86:28:7a:e7:66:63:4f:00:59:57:8b:2b:2c:
3d:8e:00:67:bc:02:7c:a0:53:ea:73:71:27:0a:50:3e:8f:8a:
3a:32:02:01:4f:b7:eb:0b:74:08:04:5f:b1:b6:32:9e:e2:11:
52:ea:1e:8c:1a:0a:b4:c2:10:00:61:ee:5d:bf:2b:b1:77:a0:
99:fe:6e:5e:20:c8:e6:33:ad:79:9a:fe:41:1c:c0:29:bb:0f:
91:79:fb:68:85:a5:0a:b3:fc:31:ce:b0:0f:d4:8c:cb:4d:5e:
1e:c0:12:23:3d:0c:b5:58:be:69:b1:8b:70:4a:92:44:c4:a8:
a8:cd:5a:5d:99:96:e6:0e:ae:25:34:42:e4:c5:e7:c0:dd:ac:
4e:4b:d8:3a:23:e6:8e:27:47:b9:26:43:18:49:60:3a:69:a7:
46:2b:db:58:52:68:f7:fa:61:5a:ab:fe:93:05:a3:b2:db:0c:
74:2c:a1:75:e7:45:b1:d0:e0:09:69:17:9e:55:ac:44:85:fb:
95:54:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:18:02 2026 by rpki-client