Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
File: I88dx_xD6BSDngDYBNPgRTEhqEI.mft (raw, json)
Hash identifier: 6ekeT1JBSS2NO5Ug02q2cqtReIlrJHGac7FOg31nl9g=
Subject key identifier: D1:B4:BA:4D:C1:13:94:07:66:64:19:D4:72:1D:01:82:83:60:48:CE
Authority key identifier: 23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
Certificate issuer: /CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Certificate serial: 01A13CA59FA3D6EAB107702F90EFE0548A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
Manifest number: 011E
Signing time: Wed 14 Oct 2026 23:00:49 +0000
Manifest this update: Wed 14 Oct 2026 23:00:49 +0000
Manifest next update: Thu 15 Oct 2026 23:00:49 +0000
Files and hashes: 1: I88dx_xD6BSDngDYBNPgRTEhqEI.crl (hash: U8u2uvX6qSvr+QsyXxvlhjBJly9Tl2TtzLaL5XjZDZM=)
2: I8vS97tvtkNgegC1NkyYJZ9EbQM.roa (hash: 65Bo/mCQt2n4+sp0dAv/y7zwG2eGPWv7JSdd7Q3lwQA=)
3: wjFSWz7vhMciO3NWgq7EOeol478.asa (hash: JJd/1+R2h9nS2P/GXQBEhk+xRvz/fMCd/yGwQQm5K5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:9f:a3:d6:ea:b1:07:70:2f:90:ef:e0:54:8a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Validity
Not Before: Oct 14 23:00:49 2026 GMT
Not After : Oct 15 23:00:49 2026 GMT
Subject: CN=d1b4ba4dc1139407666419d4721d0182836048ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:18:1f:26:78:39:b6:84:3f:ed:fb:46:88:
f9:47:56:d8:07:73:63:d9:f8:ca:70:f2:6e:30:42:
11:3c:bc:1b:0d:43:93:ac:37:05:5e:25:38:11:ae:
52:eb:cf:b4:bf:9c:8f:13:f9:7f:5a:d7:eb:d5:4b:
e6:5b:bd:20:6c:73:d2:8c:61:27:4b:a6:d6:eb:d8:
fe:b3:ff:cf:ce:23:a3:34:df:b0:4e:57:0d:3f:bd:
00:2d:f0:0e:03:25:59:2a:d2:c9:98:89:32:34:7b:
f0:bf:e3:8e:1e:5f:81:c1:fd:1c:be:8b:55:b9:6f:
ef:8a:ae:61:af:06:bc:e2:47:90:3f:35:3d:44:28:
b4:15:2f:e7:ce:38:7f:59:c6:9e:6e:3c:8e:26:f5:
8d:b7:c4:45:ba:7f:88:8a:f0:b4:55:d9:b2:dc:c9:
df:48:01:54:28:7a:a3:a5:9e:65:0a:03:1b:ea:97:
40:16:a0:ea:8e:46:38:2a:d9:dd:66:7d:6b:96:b8:
3a:26:b3:84:d1:7e:56:fa:ba:ee:72:78:93:0a:4b:
2f:76:fc:c5:0d:a5:50:de:73:89:11:de:3d:8a:5b:
79:4d:11:36:c1:9d:2c:66:91:f1:4d:5c:65:fc:4a:
01:fd:fe:63:4c:99:7e:35:85:4d:1b:47:c2:30:41:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:BA:4D:C1:13:94:07:66:64:19:D4:72:1D:01:82:83:60:48:CE
X509v3 Authority Key Identifier:
keyid:23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cc:75:f6:a5:ca:9c:29:9c:db:53:2c:75:01:ac:d3:39:f2:
f4:1d:a0:c7:d3:e1:25:bd:b4:66:2d:26:50:a9:a2:e9:bd:de:
a2:77:09:ec:93:80:a1:d1:d4:62:41:61:95:ce:77:dd:26:1a:
28:bd:24:07:8e:94:ae:32:fa:b1:ca:24:e9:d8:c6:f0:32:65:
c7:93:18:e6:b6:20:93:98:fc:d8:90:be:d3:1f:cc:fa:ca:52:
96:9a:c4:4b:24:80:95:67:9f:b1:d7:ae:f9:50:cc:1e:48:02:
b4:d6:31:33:07:34:b7:d8:6c:0b:30:49:96:d3:b6:3d:b8:d4:
91:a9:65:0e:f5:81:35:76:ae:d1:d2:6f:fb:35:eb:a1:f4:c0:
cd:07:e2:43:61:b4:95:5d:10:fa:02:0d:8f:35:8f:ac:ee:83:
95:f6:38:d6:3e:aa:57:9b:ca:d0:ab:7a:3f:8f:14:2a:99:a2:
8e:74:6a:f1:24:d0:e1:39:6c:1b:60:15:db:16:1f:98:33:ec:
c6:a7:02:9c:00:e5:54:60:fa:9f:cd:f8:4c:3a:26:83:41:32:
3d:3f:a6:d9:6c:99:81:2f:5e:53:cc:c1:bc:75:30:10:2b:bc:
08:37:ed:42:1d:b5:3c:69:15:a5:f5:8a:4e:e2:10:72:e3:dd:
ee:45:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:02:36 2026 by rpki-client