Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: ZsyA9Io60L7vWDUJHXOuXPSkDQXoNgHu5VHf6fhAoR4=
Subject key identifier: 33:7E:E9:D2:4E:8E:A6:8C:AF:25:87:D2:A9:85:AF:5A:60:A4:F9:09
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 01A0C9340C902D7DA72E1049FA478648956B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 13:00:26 +0000
Manifest this update: Tue 22 Sep 2026 13:00:26 +0000
Manifest next update: Wed 23 Sep 2026 13:00:26 +0000
Files and hashes: 1: 0fY2-frVSg1jq699GFwRUoCBlNc.roa (hash: eUT643x5xx8hSJT1XefBsreuEw6p88bqGvTup19SiEs=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: Tukad+babQjRImqPKl1DxkJ9m1GmgdRnq6OjF4J8oIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:0c:90:2d:7d:a7:2e:10:49:fa:47:86:48:95:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Sep 22 13:00:26 2026 GMT
Not After : Sep 23 13:00:26 2026 GMT
Subject: CN=337ee9d24e8ea68caf2587d2a985af5a60a4f909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:e0:45:f5:c8:d5:2f:b1:14:d3:8b:04:4f:
58:d3:13:b8:f5:a8:9d:d5:24:87:f8:f8:0c:a5:63:
78:8a:e0:c7:7c:34:bc:12:00:86:69:32:4b:1f:37:
53:07:2a:23:df:22:8b:6f:fa:f0:af:40:62:d1:c3:
20:39:32:49:da:1c:76:d3:13:27:bc:c8:45:81:88:
ae:d4:79:01:33:a5:a4:03:85:e2:7e:f6:0a:9c:ab:
de:2d:84:1e:8b:38:a1:6e:69:ba:93:70:6e:b3:0b:
8e:bf:9f:10:76:26:cc:2d:02:88:fc:6b:da:7e:44:
ad:14:84:be:13:c5:78:39:d2:62:58:19:40:29:b6:
81:cc:6f:ba:14:a0:d8:6c:43:00:bf:ea:71:53:89:
27:93:a4:54:c9:3a:bb:e8:5d:39:d5:93:b3:e5:70:
c0:ea:5c:a4:3b:e0:0a:a2:6d:cb:46:a1:55:bb:43:
d0:9e:6a:02:9c:26:f9:5e:57:ed:be:42:4b:52:56:
fb:0b:e3:ee:75:f5:0f:df:ac:b8:34:87:33:4d:a1:
9e:3b:d5:c5:0a:98:30:87:e4:39:b8:e9:f0:8a:15:
3a:74:41:f3:a1:b0:8c:bd:62:29:02:0e:38:04:d6:
e2:2d:b1:13:72:0c:1b:53:61:7b:44:24:ca:3e:7e:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:E9:D2:4E:8E:A6:8C:AF:25:87:D2:A9:85:AF:5A:60:A4:F9:09
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a3:c5:78:28:8a:01:d3:e7:ac:de:25:dd:83:12:45:b2:20:
aa:97:05:70:96:97:18:40:56:71:ed:ad:b9:d2:08:14:11:d3:
19:ed:24:a8:2c:34:e8:a0:e5:18:c9:cf:39:66:5e:26:03:90:
be:e9:c9:fb:7b:c5:e6:43:d6:37:76:bd:02:3c:7b:f2:f3:e3:
74:31:be:31:a2:0d:6a:00:1b:74:71:90:de:33:97:30:db:15:
64:a9:3b:2f:02:8d:10:11:24:de:47:45:eb:c1:e8:cb:a7:1b:
b6:c6:7d:48:49:60:2a:2c:f1:ab:65:9b:03:d6:05:0f:8a:90:
1f:34:07:54:f5:05:19:f6:ee:1b:60:0c:4b:a3:b4:70:cd:fb:
06:4f:07:8f:9e:4f:ca:3e:7d:41:de:c5:6b:31:2f:e6:ac:57:
9d:a7:57:b1:5c:ff:78:60:c3:72:f1:ec:ac:be:f8:1a:59:29:
fb:97:71:3e:a2:2e:ac:0c:8a:63:69:48:8a:f0:76:17:47:be:
2d:1b:15:4f:6a:d0:7e:13:22:3a:fa:02:e5:0c:dc:78:49:d4:
2a:70:9e:12:8a:fa:03:4f:e9:da:54:2d:27:49:11:b4:49:81:
b9:f7:dd:9c:d1:db:7c:bb:00:40:0a:c5:dc:8c:40:22:fa:8f:
ba:a3:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:09:55 2026 by rpki-client