Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
File: IpRcZ95iIC3YbfmripBuZv4XcYY.mft (raw, json)
Hash identifier: YHUWpvRG/Q6+Mr5jUEUGXlIu9OREK9PBfmpy9RtW+Kw=
Subject key identifier: 45:3A:E3:F8:4F:ED:9C:83:E6:EC:A4:34:EB:60:7F:ED:51:13:92:9F
Authority key identifier: 22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
Certificate issuer: /CN=22945c67de62202dd86df9ab8a906e66fe177186
Certificate serial: 01A0CB90D1E5B66817A26B24FB97C6A290BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
Manifest number: 81
Signing time: Wed 23 Sep 2026 00:01:00 +0000
Manifest this update: Wed 23 Sep 2026 00:01:00 +0000
Manifest next update: Thu 24 Sep 2026 00:01:00 +0000
Files and hashes: 1: 0-Kq8JhekEwMATB4Jq4vPV1o2EA.roa (hash: x3WbjY2+9e4VpCttB1stFL71S7XcyqEUBA1zxosZSo0=)
2: IpRcZ95iIC3YbfmripBuZv4XcYY.crl (hash: RgYe8cGZ/DRLI+zsfx83cRo6BKvMa/z0VkVMTwR76pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:d1:e5:b6:68:17:a2:6b:24:fb:97:c6:a2:90:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22945c67de62202dd86df9ab8a906e66fe177186
Validity
Not Before: Sep 23 00:01:00 2026 GMT
Not After : Sep 24 00:01:00 2026 GMT
Subject: CN=453ae3f84fed9c83e6eca434eb607fed5113929f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:92:99:1d:ec:3b:2c:a9:12:b6:90:a5:1c:
bd:2c:ca:05:9c:4f:32:e4:f4:d6:b3:f3:ad:57:37:
84:05:a0:90:7b:85:60:d8:e6:89:bb:70:6b:3d:de:
5d:92:90:d5:f9:fb:e9:72:77:ab:d9:ac:0e:91:19:
19:52:c7:62:40:3a:92:13:87:e6:88:97:52:d6:9a:
93:45:1d:a8:44:17:5b:26:67:64:38:2e:bd:69:d3:
67:3e:02:93:83:b2:6f:9c:1a:e9:82:a5:39:c7:22:
a9:62:b5:73:28:88:15:b7:26:9b:1f:27:22:46:f3:
30:98:8b:04:24:ff:26:0f:8f:d0:99:80:29:a9:32:
f9:c9:27:ad:0a:3b:a3:b8:0f:37:a6:0b:98:0b:49:
4f:06:95:fa:90:52:c3:e4:37:f1:6a:8d:a9:51:7e:
00:37:5e:eb:d3:95:5f:4e:b4:99:bc:92:a0:8e:04:
3c:e5:46:5e:5b:95:d1:34:1f:98:39:16:79:ec:58:
ff:d5:60:68:ae:f4:e6:64:27:b1:27:e1:08:83:99:
ce:c6:e2:10:47:10:de:e4:17:47:b0:30:b5:a7:94:
fd:88:e8:9b:b9:16:6c:14:18:01:af:2f:3b:0f:35:
ec:eb:42:e7:f2:b9:d3:a9:9a:8e:68:ad:3c:a2:20:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:E3:F8:4F:ED:9C:83:E6:EC:A4:34:EB:60:7F:ED:51:13:92:9F
X509v3 Authority Key Identifier:
keyid:22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c8:3b:dc:85:28:f4:40:14:c9:94:2d:d5:ff:f6:08:1d:bd:
d2:a2:8d:d6:f7:67:0a:c8:f3:e9:52:34:b0:4d:02:b6:56:0a:
fb:23:a0:1c:3d:86:b3:02:1e:bf:af:34:92:bb:4b:2f:9d:74:
68:37:51:f5:f2:f4:44:6d:fa:e7:1f:2a:20:be:9d:09:8d:65:
6c:ce:38:9a:28:71:73:e7:f2:ec:fd:8f:7a:8f:86:18:7b:d7:
42:82:58:14:c8:0e:5e:db:06:f4:6e:47:47:af:52:86:f3:a1:
74:f5:ba:75:c3:b9:11:33:d5:43:80:90:8b:87:54:de:74:1b:
2a:f3:80:e3:49:0f:58:f3:2c:d2:a7:56:5e:d9:7c:49:7c:53:
d7:93:4d:26:aa:6d:0b:7e:20:f3:c3:35:5f:a6:fe:98:ac:5a:
73:ee:28:a0:a8:45:1c:a4:a5:69:f6:81:e1:ea:71:aa:f0:a1:
13:28:2a:20:53:c6:ad:82:1a:e2:37:a5:e6:73:c7:09:69:7e:
a0:73:2e:49:7a:f5:c4:b5:33:5a:77:95:ac:fc:4f:7b:82:b3:
68:a2:ba:8e:7d:92:76:fc:3a:8a:6c:30:69:c8:b1:2b:6d:cb:
d0:a3:99:7a:cf:8f:95:5d:a0:82:77:e6:e5:c3:5a:80:53:1a:
fc:a1:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:39:17 2026 by rpki-client