Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: xgQ6y+wqNjC0+PucRdYTIKY60FoaWnGejoGhqSPrTVU=
Subject key identifier: C4:65:0D:0A:60:4A:B4:29:18:B9:7D:AA:07:BE:43:2D:AA:1D:30:A7
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 01A0C858732858728CC269E2FCAAE4F52968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 1484
Signing time: Tue 22 Sep 2026 09:00:34 +0000
Manifest this update: Tue 22 Sep 2026 09:00:34 +0000
Manifest next update: Wed 23 Sep 2026 09:00:34 +0000
Files and hashes: 1: 3kj2IZUmhg4c3fn_vDNshjS1bYM.roa (hash: F1j+Rw7AK0w/RfaxR+vC5zwL/WwgyQ05RgO+QAvekpY=)
2: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: mMkW/ORtpslf8Kx7M2mXy36Dw/Im5tx6lMLXbc7DK2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:73:28:58:72:8c:c2:69:e2:fc:aa:e4:f5:29:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Sep 22 09:00:34 2026 GMT
Not After : Sep 23 09:00:34 2026 GMT
Subject: CN=c4650d0a604ab42918b97daa07be432daa1d30a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:bc:b9:1a:0c:50:d4:88:f4:f3:70:4d:fa:
28:16:0f:39:36:05:c9:35:ee:f2:2b:e3:db:e4:61:
5d:ec:72:2a:06:43:3d:22:32:1c:a2:80:d3:56:8b:
a8:36:5e:de:45:64:eb:6a:ce:3d:bb:b6:de:28:76:
98:9d:22:84:36:4b:ca:aa:a2:fb:ca:82:2c:6c:7b:
e7:86:e8:e0:97:88:a9:1d:12:70:f9:f9:f5:1b:93:
62:6f:a1:e6:7d:c4:be:e2:7e:f9:23:5d:4a:2f:5e:
8f:7d:bb:17:b5:7e:24:23:66:5f:1b:9f:bb:1b:8f:
43:93:34:aa:20:52:1e:79:d1:1c:35:5f:e9:6d:6c:
7d:cf:4a:98:a3:04:2e:bd:da:1c:66:6a:99:e3:20:
f5:aa:42:38:86:7d:97:f2:80:60:ac:47:b2:9d:1d:
2c:8d:1b:ac:0e:56:72:0d:0d:7c:4a:32:ba:02:3d:
74:5a:d9:b1:4f:09:f5:ec:d1:11:03:07:9b:e3:d6:
06:d9:c5:db:72:bf:5e:94:08:ba:10:6f:5b:15:8e:
dd:f8:ec:68:ec:c7:25:a6:f9:5b:21:e8:fa:53:8b:
1c:04:f1:29:8f:62:4f:63:7b:21:13:61:ac:7d:8a:
17:45:9f:52:fc:ce:e7:e6:c8:38:6d:7e:92:49:a0:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:65:0D:0A:60:4A:B4:29:18:B9:7D:AA:07:BE:43:2D:AA:1D:30:A7
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ac:ac:cc:57:7a:bf:55:d1:76:be:e2:54:55:10:cf:29:e4:
13:92:4a:1d:6a:71:0f:5f:9c:32:84:cd:02:f0:e0:9a:f0:47:
1e:9a:68:8c:5c:28:d3:5f:bc:33:29:e8:bf:19:d1:47:08:8c:
ca:94:7e:c2:f9:ba:ed:51:7f:6c:a0:66:4e:b0:23:50:8b:6c:
2c:39:a3:6e:09:8a:ff:f8:03:3b:29:fc:31:2b:53:22:02:69:
6b:44:68:5f:d5:56:28:bf:17:57:0f:b1:9a:30:e4:5b:28:22:
9b:da:af:8c:03:cd:89:13:9a:b4:2b:c2:99:f4:1e:a9:b8:29:
0c:be:94:99:85:56:f6:29:6b:03:64:26:a2:2c:ba:0b:df:8f:
a9:db:3a:71:b2:ef:b0:fa:7b:53:cb:a6:cf:d7:f6:95:b1:f6:
7e:59:c8:c4:7f:a1:4f:e0:37:e7:1d:49:c5:98:4b:ef:5e:13:
d1:d4:8a:af:5b:16:47:51:58:f6:01:bc:d0:fe:e5:82:ad:19:
79:3c:ed:9d:05:f0:d4:cc:c8:73:df:ac:1a:85:8d:c3:34:86:
8c:85:9e:af:d9:30:8e:bd:69:a1:b5:94:68:2e:42:81:8a:d8:
78:10:98:37:b7:08:2d:87:65:e0:cf:78:e5:7e:c4:71:18:d5:
bc:b5:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:45:56 2026 by rpki-client