Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: /tmoFUtiyX0cQcLY1ZAAcYhe5azlf2oVW0xRSYlFh6Y=
Subject key identifier: E4:3A:53:5E:00:C3:D1:FE:35:14:4F:79:55:B4:9A:9F:A6:F7:50:49
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 01A123F8F13F778981CE1EE48958C6C22933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 1A2A
Signing time: Sat 10 Oct 2026 04:01:19 +0000
Manifest this update: Sat 10 Oct 2026 04:01:19 +0000
Manifest next update: Sun 11 Oct 2026 04:01:19 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: dToZOpCqQPKeIrz+HY+qQbFaWd1JUM/VRpXyOQJgK+A=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:f1:3f:77:89:81:ce:1e:e4:89:58:c6:c2:29:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Oct 10 04:01:19 2026 GMT
Not After : Oct 11 04:01:19 2026 GMT
Subject: CN=e43a535e00c3d1fe35144f7955b49a9fa6f75049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:d2:1f:29:38:0a:b4:0d:16:01:2a:8b:51:
d6:c1:33:34:ff:02:66:b5:17:c0:1a:01:35:0f:93:
39:e6:99:d9:83:4f:8d:2b:86:e6:31:7a:f9:cf:c4:
68:0b:97:8c:12:5e:0e:5a:f4:04:75:54:00:dc:e8:
81:84:a4:eb:17:15:59:b7:60:1f:dd:fe:4a:22:83:
c2:cb:da:54:98:8e:3c:1e:49:89:cc:ef:23:5f:f8:
e9:71:cb:a9:1b:d9:dd:7f:1b:21:89:4e:24:78:eb:
d4:a0:18:c3:28:4b:c1:a0:a0:89:67:52:8e:43:9c:
5b:96:17:b0:c1:1c:99:9f:9e:e6:b9:bc:e0:49:64:
d9:c9:4c:65:70:77:9f:43:3d:77:c7:7f:20:27:cb:
df:d5:a8:0b:49:ff:01:6e:ae:33:28:41:ed:cd:7a:
46:bd:5c:60:98:d6:19:e6:a8:51:f7:19:52:1d:39:
da:e5:e0:df:f3:a3:fe:05:d6:71:e2:a7:3a:0e:ec:
94:ca:be:a6:cf:d0:4e:44:75:ff:ac:51:c6:85:b8:
78:b6:fa:b5:a3:46:1b:01:fa:0f:c1:7d:39:e5:33:
73:ec:30:03:5c:96:6f:aa:67:44:bf:4c:0a:10:6f:
c3:d4:4a:c1:43:17:43:f1:89:c9:8c:20:dc:9d:5c:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3A:53:5E:00:C3:D1:FE:35:14:4F:79:55:B4:9A:9F:A6:F7:50:49
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e4:99:f5:71:6a:31:65:ef:90:86:91:e1:2a:4b:db:12:4a:
96:c3:f7:30:fd:c8:50:43:6a:c2:8a:b1:c6:03:02:aa:ee:b5:
d5:87:53:ea:c9:b9:14:1b:9a:06:de:94:56:37:ab:69:a7:fc:
97:49:49:1f:c4:f5:b3:e7:a9:20:61:21:e0:82:9a:75:ac:5c:
20:c4:38:aa:ff:bd:ec:98:36:43:bd:7b:4c:86:0f:54:08:88:
ba:b2:7d:f8:e3:ce:4f:45:83:89:61:3f:aa:89:4a:5c:d2:77:
a0:9a:fa:38:9c:7a:3d:db:c3:c6:66:70:9b:38:55:37:a9:81:
4d:40:8d:c0:a7:13:1c:14:c5:a9:cb:91:10:a3:7b:d4:7c:73:
ce:05:7c:cc:35:c4:80:f6:99:38:ab:2a:1b:b4:67:57:72:23:
c8:30:6e:05:93:80:fd:4d:c2:62:d4:23:b2:d3:40:78:d1:0f:
3a:4f:1f:5e:aa:63:ca:f3:b8:10:5e:e6:9d:c1:1a:3e:53:0a:
7d:3f:c6:1c:4d:6e:58:4f:e1:2e:94:a4:c3:9e:79:b8:c2:57:
ee:c7:ba:fb:55:8e:96:44:9d:e3:43:e5:e8:b6:1f:fc:45:d5:
ab:f7:98:72:e6:0f:5f:9f:41:db:3d:7e:ac:6b:f4:31:25:42:
76:d9:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 09:29:22 2026 by rpki-client