Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File: iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier: 15Ges1QjNkPVqeJ+8vIRFSOQB8z6kVHyu1H6ALJCHRQ=
Subject key identifier: 99:60:2D:9A:55:86:33:66:AB:49:24:7B:66:F4:7B:6C:CF:8C:45:79
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer: /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial: 01A0C6D791FD8F42DF821EFBB408F6E258CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number: 0267
Signing time: Tue 22 Sep 2026 02:00:11 +0000
Manifest this update: Tue 22 Sep 2026 02:00:11 +0000
Manifest next update: Wed 23 Sep 2026 02:00:11 +0000
Files and hashes: 1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: f06qx7GVcg05hIl2XLrcA/iIxuL6zk9efSz8yuKKZ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:91:fd:8f:42:df:82:1e:fb:b4:08:f6:e2:58:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Validity
Not Before: Sep 22 02:00:11 2026 GMT
Not After : Sep 23 02:00:11 2026 GMT
Subject: CN=99602d9a55863366ab49247b66f47b6ccf8c4579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:90:c6:13:fc:45:be:75:fa:9b:c0:f7:19:
5e:69:02:cc:20:8b:a1:14:d3:61:2a:fa:65:f5:82:
f2:cd:4b:d4:a3:0d:03:7f:2a:59:cd:9e:21:b4:c9:
f9:b3:ab:d4:6b:cf:40:0d:d4:78:60:e3:37:39:39:
d8:53:90:15:50:28:38:47:d0:78:cf:88:13:57:89:
04:8e:b3:46:56:c0:fc:c0:3f:e8:34:1d:a1:cc:f6:
c6:f9:b8:1c:ca:cb:98:9f:a8:79:60:b9:f3:d5:2b:
41:3e:a4:bc:c5:ed:9a:cf:86:fa:9d:3b:22:98:f5:
2e:5c:96:bd:06:0c:5c:73:91:33:40:e7:d6:31:35:
10:8d:c9:13:61:f4:e5:9b:fd:6c:a6:c4:d4:90:32:
ee:f6:2a:be:ec:e0:01:00:20:5d:ce:a5:4b:44:3f:
b0:7f:d1:6e:99:87:ec:e8:ad:13:d1:37:cd:d9:84:
e7:f0:eb:63:3a:c1:f3:b6:1a:51:7e:78:b9:20:dc:
c3:36:24:8e:97:26:cf:bb:a2:03:76:2c:77:a7:28:
6b:cb:c7:13:30:64:7d:ba:7d:48:e8:ff:c2:af:11:
9e:68:f6:76:57:73:fb:4b:c0:a5:79:e5:b6:ae:1b:
af:c8:f2:0c:e7:f5:03:50:6c:c6:ec:13:79:76:57:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:2D:9A:55:86:33:66:AB:49:24:7B:66:F4:7B:6C:CF:8C:45:79
X509v3 Authority Key Identifier:
keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:86:6a:76:1e:74:7a:98:b4:64:54:74:6c:0f:72:d7:86:3a:
26:b9:8c:ba:05:a9:b2:74:5c:0d:4a:83:b3:49:56:9b:6b:06:
f3:b3:9e:df:a6:53:ed:ba:8b:27:92:81:60:ca:04:12:14:93:
e2:5c:2d:0f:c2:f3:30:cc:f7:2e:ba:52:28:cb:27:66:e5:a5:
7b:fb:0f:cc:24:f0:19:57:e2:0e:1e:f7:f3:04:6a:f9:77:bf:
0f:48:f3:0c:87:b4:0b:6a:cd:74:7a:84:f7:14:e0:37:93:7f:
f3:a8:af:83:28:93:9d:8b:52:54:5b:7a:3c:ff:17:2a:8a:62:
83:8e:59:ba:44:f7:08:08:46:2e:4f:ff:23:11:98:f3:94:5f:
29:c2:11:2c:98:5f:79:fc:e2:d0:27:0b:5d:6a:c5:32:94:cd:
a4:aa:59:75:6a:d2:3c:d9:7e:e4:21:cc:cf:13:81:6e:a2:4e:
cd:15:ac:d3:62:a3:77:8b:30:c8:db:9e:65:8b:57:c6:c2:3e:
f1:e2:63:6b:a9:b1:6b:54:5f:c7:17:80:0e:f1:33:57:f2:ee:
3c:ab:98:a5:e9:ac:89:75:e1:a3:12:32:48:af:fd:ef:22:1b:
50:55:89:ce:e4:ec:55:30:ec:ba:2d:f0:65:d1:1c:2c:3d:29:
b1:67:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:44:14 2026 by rpki-client