Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: URkPJM9olIX6rVAWYAKHuuDNV9pMuMS4hKdqYY2Gc+U=
Subject key identifier: 66:0D:9E:4A:68:85:48:4C:B6:16:E1:F0:4F:99:23:5A:3D:67:EF:8F
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 01A0BF8BF33A6553C66909931BCE4FF7BF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 164F
Signing time: Sun 20 Sep 2026 16:00:14 +0000
Manifest this update: Sun 20 Sep 2026 16:00:14 +0000
Manifest next update: Mon 21 Sep 2026 16:00:14 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: p5E0+Pcv6dcox0k2O1POkM1UwGUk34zWZFE7sUS6QFs=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8b:f3:3a:65:53:c6:69:09:93:1b:ce:4f:f7:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Sep 20 16:00:14 2026 GMT
Not After : Sep 21 16:00:14 2026 GMT
Subject: CN=660d9e4a6885484cb616e1f04f99235a3d67ef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:18:c7:9b:6a:e3:26:b6:91:11:0c:eb:aa:
53:23:f9:ba:c6:a0:82:a1:fc:f2:7f:83:86:ff:48:
08:7d:c3:7f:7a:c2:7a:6d:63:7a:08:1b:e9:41:4d:
95:88:cd:cd:a9:05:64:0b:43:8c:5d:fa:10:99:72:
ba:11:76:a0:fb:eb:ab:d1:e9:53:8b:f7:9d:96:04:
bf:83:e1:ad:5b:d1:36:94:55:ac:8e:10:98:97:87:
dc:94:e4:0d:18:d6:87:9c:8d:4a:28:40:51:15:22:
fb:8d:fa:c3:8a:95:61:be:c7:69:86:82:f2:44:47:
28:f3:8e:f3:62:b7:9b:61:c0:2b:ea:34:1a:8e:9b:
6d:51:ad:ee:f3:ac:dd:73:ab:8f:dc:e3:83:56:35:
8f:61:71:2d:9a:32:e8:85:99:7d:fe:24:02:63:50:
e3:ec:6c:81:b4:24:98:91:6b:38:70:53:17:50:fe:
d1:0d:fe:71:ad:00:7b:c7:d5:68:26:44:9e:16:37:
d1:99:4f:dd:91:ca:f6:a6:6d:d6:e8:52:51:1d:df:
8e:02:ce:b3:f4:d5:ae:76:34:0f:42:3b:5e:a7:b7:
c0:f8:a8:02:40:60:db:70:9e:87:2b:57:9f:c0:27:
45:a6:55:bc:8f:a2:de:19:fc:65:98:1e:40:92:ea:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:9E:4A:68:85:48:4C:B6:16:E1:F0:4F:99:23:5A:3D:67:EF:8F
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4c:7f:05:94:2d:1c:d3:65:d5:da:89:e5:39:03:1f:84:2a:
63:89:4b:a8:41:44:33:fa:3d:6b:f7:20:24:3c:c4:14:52:61:
33:2a:40:ac:d7:3b:0e:ae:af:32:e1:d6:e7:fb:29:e2:90:bb:
d3:3b:74:68:ca:1b:c6:2e:1f:0b:5f:eb:b2:ac:5f:32:d5:99:
20:ab:09:92:c4:49:5d:26:85:38:5b:6c:15:26:93:d0:b1:c8:
b8:8c:63:13:4c:92:97:02:05:69:0f:fa:85:ca:97:65:ef:07:
c3:e2:86:49:06:fe:87:06:8d:f0:2d:a7:2b:ae:bc:20:cc:cb:
1d:e5:c1:5c:25:f6:53:b9:b8:9d:4a:9b:69:0b:e3:93:3b:4b:
c2:48:57:f5:8d:31:e7:e5:f7:67:62:ab:96:b5:7e:e0:04:b3:
40:9a:7c:4f:7c:24:1d:c4:23:0b:2b:9a:0c:53:1c:bc:2c:f1:
12:ca:ef:b8:43:fe:27:eb:10:04:d9:4a:b6:33:16:67:63:14:
25:70:37:a8:0f:42:2b:08:ae:a1:76:9e:14:ed:cb:b7:76:36:
81:5b:a3:03:d5:4f:29:ad:93:ab:b2:59:be:08:12:05:7b:ae:
bc:20:ba:b3:2c:5a:df:98:35:3e:48:ad:51:04:c0:7b:51:f8:
fe:23:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:36:23 2026 by rpki-client