Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier: WeZbIkAsvZS/mf0mHPl3TWS6dixwNo74138iAIoBVhc=
Subject key identifier: 40:90:8D:CA:D1:8C:56:AA:14:8F:D3:E7:1E:31:92:7F:5B:21:CC:F2
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial: 01A1032497BE9926BEC0BF3DFC1BB1C61265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number: 1A83
Signing time: Sat 03 Oct 2026 19:01:31 +0000
Manifest this update: Sat 03 Oct 2026 19:01:31 +0000
Manifest next update: Sun 04 Oct 2026 19:01:31 +0000
Files and hashes: 1: 1QjvKCsvTR0ccDdXAfoDfJPSyJE.roa (hash: qPTH0R4OHCDFXj8DShsOufuFq2W68jfp5X6XHwRILiE=)
2: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: Lj8fX/baNbhoAz3hkGGYbM6yRQlqkZj0KR2UQbO0GMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:97:be:99:26:be:c0:bf:3d:fc:1b:b1:c6:12:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
Validity
Not Before: Oct 3 19:01:31 2026 GMT
Not After : Oct 4 19:01:31 2026 GMT
Subject: CN=40908dcad18c56aa148fd3e71e31927f5b21ccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:df:2e:e7:87:08:50:99:bd:81:80:9a:af:
f1:b5:bb:40:c0:ce:0d:60:2f:b6:7a:aa:7d:01:90:
21:70:18:fe:c2:35:1e:33:67:6e:32:3f:75:38:1e:
30:43:ba:6d:4c:80:96:79:b8:c6:c7:37:24:f6:4d:
51:a6:5a:d6:53:51:1a:ae:87:45:a8:b3:44:5e:83:
80:02:1f:1a:94:6e:c8:5c:69:1c:41:69:bc:a4:fe:
c3:33:fb:14:c7:26:b6:83:03:1b:29:af:4f:3f:02:
b2:3e:f6:f3:bb:23:f1:9d:f8:48:ab:e4:9b:e1:de:
2a:60:6b:ae:dd:47:0a:c3:5a:5f:5d:6b:87:1c:27:
38:9e:22:15:78:1a:d3:b8:db:30:90:aa:be:59:d1:
c5:9a:ef:de:df:60:4d:bd:c0:ab:5a:23:87:93:c1:
c4:11:1d:cc:c1:11:b1:64:33:4c:2f:55:14:ec:88:
89:f1:3f:71:41:8a:39:55:26:e9:c0:13:fc:fe:e6:
ae:00:e3:5e:b8:e0:94:6e:8d:e2:99:11:53:08:a8:
be:de:57:49:3b:52:cd:16:a2:11:45:78:73:15:d7:
2a:d2:cb:bb:32:71:24:04:8b:00:f3:45:51:3d:5a:
b9:70:1b:00:a0:a3:6a:01:be:7c:4b:28:04:34:ea:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:90:8D:CA:D1:8C:56:AA:14:8F:D3:E7:1E:31:92:7F:5B:21:CC:F2
X509v3 Authority Key Identifier:
keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:55:e8:09:be:ee:61:25:be:40:be:18:92:15:5a:a8:e0:02:
33:2e:f7:d9:f5:ec:03:ce:9e:8b:b2:1d:04:86:8d:bd:35:36:
d3:9c:59:6f:f8:53:71:88:95:b2:23:4e:9f:18:fd:43:12:2a:
ca:95:70:af:56:9a:49:cb:44:35:4e:9a:7b:83:ab:12:ec:6d:
6b:1c:fa:da:6b:ad:46:83:bf:3e:3c:27:20:be:db:34:af:0e:
55:fe:f2:f1:9e:a8:ef:da:63:14:9b:97:98:04:bc:9a:62:86:
f0:55:ca:79:46:a4:ae:2a:87:2d:06:be:fe:7e:cc:57:98:e5:
0f:22:ab:61:0d:a6:2e:6e:d1:7b:67:35:42:8b:b4:ff:66:20:
ac:cf:3e:82:2a:3f:90:b0:09:c4:02:8b:fa:78:5a:95:0b:e3:
1b:18:e3:2a:20:9f:be:a9:79:49:d0:e6:41:24:25:a3:ca:70:
ca:cb:7b:04:91:9a:e7:e3:6a:61:35:27:ca:21:d8:d6:af:d9:
a0:5d:2f:c6:eb:d4:37:2d:ea:f5:7b:fc:11:29:00:33:6a:ef:
32:6f:95:c4:8b:32:15:5c:d6:1c:1b:19:47:0e:c4:ee:42:28:
7b:b7:0f:e6:04:a5:78:0e:be:01:c7:9b:32:0c:67:46:3c:92:
ac:90:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:13:54 2026 by rpki-client