Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: +bvtlm6Q+wYVaQ0Bz/zH1gnNfkAzV+JEFUtCSbe2REw=
Subject key identifier: 70:DE:72:E2:EB:06:80:35:83:16:85:0E:06:1A:2C:53:96:C4:EF:0D
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 01A0BE0B536D6BFFDA16C63470DCD82EF831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0E5B
Signing time: Sun 20 Sep 2026 09:00:08 +0000
Manifest this update: Sun 20 Sep 2026 09:00:08 +0000
Manifest next update: Mon 21 Sep 2026 09:00:08 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: b0krmqiA6lAZGIV0J/GhHNaMRIPEmib+nSMSJjd4Ayc=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:53:6d:6b:ff:da:16:c6:34:70:dc:d8:2e:f8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Sep 20 09:00:08 2026 GMT
Not After : Sep 21 09:00:08 2026 GMT
Subject: CN=70de72e2eb0680358316850e061a2c5396c4ef0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:3f:ea:a0:16:84:06:e5:c5:fd:df:4e:9c:
03:e1:c8:b1:39:ff:2f:1a:2b:a1:93:15:5d:e4:02:
52:21:a7:d1:6b:ae:ac:d9:0b:4b:29:3b:31:62:f5:
ec:da:e5:54:0e:06:57:55:39:bd:49:58:fc:1e:6a:
36:c9:11:cf:55:82:a5:e4:0f:df:ba:96:55:e3:09:
e7:4f:98:a1:1d:b8:3e:a7:e0:91:36:78:6d:78:cb:
de:47:c7:43:39:25:67:cf:6c:3e:d6:f1:66:7a:10:
f4:c8:17:3e:da:75:40:78:bd:05:a8:1a:e0:96:0b:
98:4a:2c:03:7f:c6:62:3e:c6:eb:60:34:b1:d8:ad:
8f:83:a7:31:d1:76:08:0d:36:8d:43:75:28:cf:b7:
dd:29:55:f5:69:44:10:6f:cd:c6:ec:0e:da:70:99:
17:f1:25:68:89:64:5a:92:69:39:7f:f8:ee:e0:b5:
6e:29:fc:0d:da:34:44:b5:11:ce:59:f5:e6:26:00:
40:3c:b2:60:34:1d:31:59:ca:c2:7d:6f:2a:bb:bf:
af:9a:93:54:c4:8e:2a:3d:05:95:a6:37:9b:ad:c6:
21:94:1b:96:be:80:83:4d:56:16:85:a1:2d:0b:72:
87:f5:06:40:6e:af:5e:6c:38:7d:f8:84:e5:31:6e:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:72:E2:EB:06:80:35:83:16:85:0E:06:1A:2C:53:96:C4:EF:0D
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a2:e2:37:4e:96:a1:f8:a3:b3:19:fe:f0:b7:e5:23:43:58:
08:54:46:41:7c:6b:01:56:ad:e6:0f:43:9f:75:1c:6c:79:f7:
80:98:be:50:22:ba:82:fa:3e:75:d6:fc:a8:68:3a:3f:ee:7b:
16:a1:ae:30:92:90:db:dd:7a:55:32:51:2b:47:b9:a5:e9:4e:
a4:55:28:d1:23:d1:e6:d4:41:ea:7a:69:43:48:dc:2d:57:23:
96:f5:d5:8f:a1:43:19:dd:af:62:6d:bc:ba:44:13:c4:f2:b4:
b3:40:cb:83:ed:e0:56:7a:cc:3d:c2:4d:98:f1:02:9a:6f:8f:
ed:65:25:cf:16:7a:27:5e:9b:12:3b:f1:49:da:18:eb:5b:6f:
e4:9a:ae:be:3f:94:3b:88:ec:3c:c1:d7:9a:c5:8c:38:99:36:
87:0d:d1:f1:7e:b7:c1:33:8b:ba:6c:78:93:1f:37:0b:e6:c8:
7d:14:c8:df:a7:6f:36:95:11:e2:c3:2e:d7:2a:c2:f5:fb:cb:
f1:1b:7b:47:db:c0:07:e5:c2:cc:15:c1:b6:a6:9a:0e:10:72:
af:13:fd:f0:68:f7:2d:4e:be:e7:27:32:71:cf:15:cf:9c:ea:
4d:8e:c8:ac:ef:3c:33:d8:97:b4:12:fd:ea:c0:ba:12:02:b7:
e8:b3:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:05:20 2026 by rpki-client