Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
File: II3G2-Xnc9eq1wBdbP8m5HFDyng.mft (raw, json)
Hash identifier: uJUyIk/4AteM5cptQ4YLgWPMC/SCuqvs2z0ou+WJlp8=
Subject key identifier: 9D:83:E0:3F:CF:ED:A5:B2:36:2C:2B:56:B9:DD:F6:4F:85:BE:62:7E
Authority key identifier: 20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
Certificate issuer: /CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Certificate serial: 01A0CE24A1EE6C4AEFE2CE23119DFC904B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
Manifest number: 024A
Signing time: Wed 23 Sep 2026 12:01:42 +0000
Manifest this update: Wed 23 Sep 2026 12:01:42 +0000
Manifest next update: Thu 24 Sep 2026 12:01:42 +0000
Files and hashes: 1: II3G2-Xnc9eq1wBdbP8m5HFDyng.crl (hash: yJKKvS/wyb+OfA09zIeIobWtiKJGHrTuK4XysZ/nZpY=)
2: VD6M1TalIBGQDQhDlzk5W__Y3uc.asa (hash: jjpCurqNQ5oMU8caZ7eCROEYaNl81c0Drp5VvZH2RWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:a1:ee:6c:4a:ef:e2:ce:23:11:9d:fc:90:4b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Validity
Not Before: Sep 23 12:01:42 2026 GMT
Not After : Sep 24 12:01:42 2026 GMT
Subject: CN=9d83e03fcfeda5b2362c2b56b9ddf64f85be627e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:62:20:0b:61:65:67:24:94:6e:18:16:b4:
e8:a3:74:90:b6:11:b4:11:88:55:db:26:ea:b9:ea:
b2:b0:ff:bb:a3:8f:08:7e:f2:7a:57:54:64:57:a0:
27:2f:ca:f9:8c:3e:32:a9:00:2c:d6:69:10:0f:b2:
e7:ce:51:72:9c:e7:0c:11:ad:8a:0a:95:24:ce:c2:
ea:4c:37:98:30:60:28:c8:e8:fd:f5:ea:19:f0:b3:
cb:67:07:b2:1a:3d:8a:11:ac:e4:f6:f8:ba:1d:f0:
cd:bd:bf:d8:e7:bc:b9:c0:24:ea:e4:45:0a:71:c9:
99:27:b8:42:fe:de:9d:81:4f:47:b4:d4:91:2c:af:
a6:1c:c1:9b:b3:bb:e9:fc:96:80:77:96:cd:17:e7:
06:24:28:2b:d9:37:cb:2b:f9:6d:da:4d:e4:f6:41:
05:ed:1e:7f:d4:c8:6c:f4:19:1e:88:93:a0:7a:29:
59:9f:5c:c0:f0:fc:c2:ec:b2:87:61:a2:32:62:15:
f1:93:3e:ec:38:26:c9:70:9e:f1:08:b5:a5:51:e9:
52:2b:52:5f:96:c8:5b:0a:e6:bc:f0:ba:50:92:49:
cc:51:f5:b3:95:82:9c:47:04:4e:96:71:cc:14:7b:
32:f7:e7:bf:88:67:e4:71:b5:08:d6:93:1c:f8:b6:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:E0:3F:CF:ED:A5:B2:36:2C:2B:56:B9:DD:F6:4F:85:BE:62:7E
X509v3 Authority Key Identifier:
keyid:20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bd:d8:fa:6f:b3:d3:f2:ee:03:2e:09:85:da:af:ff:69:84:
77:e4:de:fb:da:13:08:f6:d4:d2:57:ee:b0:d8:8e:28:d7:98:
a2:7d:4e:d5:3b:05:2f:5c:17:01:6b:e0:95:39:bc:d8:ce:a7:
7f:01:e2:9e:02:97:26:97:42:3d:02:ea:9a:69:95:f5:fb:e6:
8a:42:64:3c:c0:28:36:dc:21:6a:04:c5:b9:d1:6e:93:2b:13:
2b:d6:02:1f:a0:6e:49:81:83:99:4b:63:30:c2:82:0a:d7:93:
61:e7:3a:9f:dd:e7:34:db:32:f5:00:5a:b9:b0:d4:f5:87:11:
a3:c0:43:cc:cb:1d:6f:df:5d:5a:66:56:16:c8:48:ae:36:23:
5c:71:9f:3b:6b:b4:9e:eb:90:63:d2:e4:4e:9f:3d:11:53:3e:
1d:11:0e:d4:cc:49:48:01:7e:76:f8:3c:78:0c:c0:b4:04:fb:
64:f1:48:49:e0:2b:61:c8:9d:bb:3e:d3:ac:c3:2b:84:0b:67:
cd:1a:2e:cb:5f:67:25:79:bb:31:c7:97:aa:33:96:f0:6b:5e:
87:81:3a:e1:cc:72:18:f3:3e:b0:96:e3:26:a2:e7:aa:a5:90:
3e:64:fd:1c:5e:3b:c7:d9:32:d7:88:3a:46:17:65:f7:cf:62:
43:67:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:39:48 2026 by rpki-client