Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier: IMTOX+gSs1wDex/XTDbKflPuLh7k8llBBmJ3372BMyc=
Subject key identifier: BB:53:50:66:76:18:9B:04:03:A3:40:3D:00:B4:96:3F:50:30:BB:FC
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial: 01A0E5BEFF45094E79B0B124AB68B2483BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number: 059D
Signing time: Mon 28 Sep 2026 02:01:34 +0000
Manifest this update: Mon 28 Sep 2026 02:01:34 +0000
Manifest next update: Tue 29 Sep 2026 02:01:34 +0000
Files and hashes: 1: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (hash: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4=)
2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: RCT8i+b4LJ9eoxEqF35yqmXpi6Uxit4kHrRN4VLFzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:be:ff:45:09:4e:79:b0:b1:24:ab:68:b2:48:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Validity
Not Before: Sep 28 02:01:34 2026 GMT
Not After : Sep 29 02:01:34 2026 GMT
Subject: CN=bb53506676189b0403a3403d00b4963f5030bbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:01:5b:f7:01:66:bf:ac:8c:da:a9:3c:61:
bf:5e:4a:41:62:b3:64:c4:57:8b:76:e4:98:c0:52:
9a:21:47:72:f3:21:81:5a:11:2a:12:fc:b0:4b:d1:
14:42:31:7f:a6:e3:6c:5a:f9:f1:4e:88:51:31:8f:
c1:01:bc:2a:01:32:ae:29:e3:b4:d1:6f:77:94:f8:
84:19:ed:a4:fd:5d:a7:c5:a0:50:5c:a1:14:44:f2:
a9:37:8e:42:38:f9:b3:b3:6c:e7:b7:20:df:63:ac:
6d:a4:8a:1a:4c:81:67:a6:9b:0c:d1:e4:f7:4a:96:
af:08:3a:7d:b1:37:0e:5e:fd:40:4b:52:0a:3a:c0:
c2:cc:d3:fa:62:a1:e9:39:1c:9e:d6:cd:07:46:07:
6a:1f:e9:1c:9d:f1:bc:53:b7:2b:22:33:2c:b9:db:
f6:ed:7a:a6:e0:87:b9:7c:92:4d:3a:9b:ee:36:e5:
14:9e:5f:ee:fe:e6:65:33:21:2d:32:be:5f:4b:16:
a4:b8:63:75:c4:85:8e:02:3b:e0:0c:25:49:eb:b9:
1f:92:59:f3:b1:c0:f7:22:ed:f2:47:6c:b8:11:e2:
80:15:cb:5b:65:18:be:be:0f:06:99:74:90:ad:22:
e3:1f:42:f5:04:63:74:5c:7f:91:19:bf:bb:af:8a:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:50:66:76:18:9B:04:03:A3:40:3D:00:B4:96:3F:50:30:BB:FC
X509v3 Authority Key Identifier:
keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a9:db:48:e7:5e:97:e7:43:a3:9c:2f:cb:c0:3b:a6:1a:7f:
f4:4e:9e:e0:00:a6:84:f5:ab:3d:79:51:67:5b:0a:9f:7d:36:
e9:52:6f:b5:e5:fd:c7:81:89:58:7d:5a:e9:3a:27:cc:91:34:
ba:47:63:f1:98:11:b3:e6:7a:6a:4b:de:64:a5:42:72:cb:a8:
da:08:95:68:00:c8:1b:55:74:1d:76:11:4c:97:f9:e8:e2:82:
93:18:45:f1:8a:64:28:23:80:77:d6:7a:d0:30:2e:a7:8d:3a:
ec:1e:5b:23:69:a4:c2:d9:0e:1c:70:3a:32:9b:28:c7:e3:ca:
c3:d0:9f:15:32:26:66:3b:74:11:3f:61:47:ac:77:d4:5e:d6:
f5:ca:9f:96:c1:de:cb:fd:59:96:bf:f0:3d:4b:68:57:88:f7:
a9:7a:9e:60:2d:17:75:2d:ea:10:34:43:d3:63:3d:e4:9e:e5:
d3:81:5e:5e:73:5a:b0:0e:b9:01:40:75:79:e8:cd:8c:e2:3f:
c0:78:06:91:af:a0:19:d3:69:09:a2:ef:e5:06:8b:46:db:35:
fd:66:3e:f5:20:4f:22:bb:6b:2e:14:11:17:45:f5:a4:64:11:
48:fa:37:7c:be:23:c1:d2:12:df:b9:aa:c6:7c:a9:f6:e4:a6:
b7:bd:a8:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDlvv9FCU55sLEkq2iySDvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNWU1MDJjMzE0ZDUxMDRmN2M2MGNjZDY5Nzg5Y2I4NDhm
ZjVlMDcwHhcNMjYwOTI4MDIwMTM0WhcNMjYwOTI5MDIwMTM0WjAzMTEwLwYDVQQD
EyhiYjUzNTA2Njc2MTg5YjA0MDNhMzQwM2QwMGI0OTYzZjUwMzBiYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidoBW/cBZr+sjNqpPGG/XkpBYrNk
xFeLduSYwFKaIUdy8yGBWhEqEvywS9EUQjF/puNsWvnxTohRMY/BAbwqATKuKeO0
0W93lPiEGe2k/V2nxaBQXKEURPKpN45COPmzs2zntyDfY6xtpIoaTIFnppsM0eT3
SpavCDp9sTcOXv1AS1IKOsDCzNP6YqHpORye1s0HRgdqH+kcnfG8U7crIjMsudv2
7Xqm4Ie5fJJNOpvuNuUUnl/u/uZlMyEtMr5fSxakuGN1xIWOAjvgDCVJ67kfklnz
scD3Iu3yR2y4EeKAFctbZRi+vg8GmXSQrSLjH0L1BGN0XH+RGb+7r4osXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtTUGZ2GJsEA6NAPQC0lj9QMLv8MB8GA1UdIwQY
MBaAFCNeUCwxTVEE98YMzWl4nLhI/14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAt
YTU2ZTY3ODQ4ZjExLzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAtYTU2ZTY3ODQ4ZjEx
LzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6nbSOde
l+dDo5wvy8A7php/9E6e4ACmhPWrPXlRZ1sKn3026VJvteX9x4GJWH1a6TonzJE0
ukdj8ZgRs+Z6akveZKVCcsuo2giVaADIG1V0HXYRTJf56OKCkxhF8YpkKCOAd9Z6
0DAup4067B5bI2mkwtkOHHA6Mpsox+PKw9CfFTImZjt0ET9hR6x31F7W9cqflsHe
y/1Zlr/wPUtoV4j3qXqeYC0XdS3qEDRD02M95J7l04FeXnNasA65AUB1eejNjOI/
wHgGka+gGdNpCaLv5QaLRts1/WY+9SBPIrtrLhQRF0X1pGQRSPo3fL4jwdIS37mq
xnyp9uSmt72oCw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:43:00 2026 by rpki-client