Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: jM3KKQmjA+ghjDG05R+ViKwiTk6JjOTYoFTixTVzems=
Subject key identifier: B5:AA:55:0D:E1:CF:9D:D2:D7:0C:B0:89:C5:06:48:76:5B:5F:D9:F1
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01A0CD1132C00A9500E87E6CDBFB43D4B1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0DB3
Signing time: Wed 23 Sep 2026 07:00:51 +0000
Manifest this update: Wed 23 Sep 2026 07:00:51 +0000
Manifest next update: Thu 24 Sep 2026 07:00:51 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: smFt/ECLa1lZP6sNycKd06s1Dr8pJ5O2h3VZTs0RSKU=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:32:c0:0a:95:00:e8:7e:6c:db:fb:43:d4:b1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Sep 23 07:00:51 2026 GMT
Not After : Sep 24 07:00:51 2026 GMT
Subject: CN=b5aa550de1cf9dd2d70cb089c50648765b5fd9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:c3:e4:da:25:ef:aa:66:d2:2c:77:fb:b5:
c6:66:95:43:50:02:cd:87:1a:9b:af:11:f4:14:00:
d2:47:5f:0a:a4:9b:2e:2a:e8:18:88:92:bd:ef:43:
fb:95:fb:f7:22:2c:63:56:4a:47:2b:09:82:e2:a6:
7b:69:a9:bb:14:9f:7e:56:b4:e1:2f:3a:4e:97:be:
92:dd:b1:94:23:a5:62:2e:f6:d2:99:00:ba:29:40:
10:1d:e3:5f:67:0a:2a:23:22:f6:93:c2:de:6e:8e:
53:6f:3d:f0:ea:34:0d:2d:e2:f1:7f:4c:01:d3:01:
be:7a:4a:c3:b9:d0:2f:0f:da:9b:28:95:57:53:f4:
32:15:b1:f1:00:54:42:ef:f3:e8:17:27:db:4c:69:
6e:b9:13:b8:10:02:75:25:0f:75:7c:ab:8d:0a:e0:
f6:90:4d:2a:ac:49:71:15:2d:af:96:b4:b1:19:08:
80:87:58:36:5a:e0:78:c4:48:49:f2:40:60:f1:ec:
ee:c7:3f:23:93:53:01:23:46:be:79:88:0d:fd:06:
99:55:4d:cf:0d:bc:76:1d:33:81:38:06:ef:7c:de:
de:85:88:74:ad:20:c0:04:9f:18:06:05:22:23:f5:
c6:13:d9:79:7c:25:10:90:3b:c5:7b:93:76:55:5c:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:55:0D:E1:CF:9D:D2:D7:0C:B0:89:C5:06:48:76:5B:5F:D9:F1
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:de:05:91:59:7d:92:f9:84:d3:90:36:9a:5f:29:c0:7c:b9:
a6:5f:56:f4:f3:50:48:22:3a:16:9d:34:37:f7:7d:38:e2:db:
73:7e:85:29:31:c1:08:61:c9:4a:44:c0:d4:ec:5e:83:65:44:
09:0a:bc:bb:d4:ff:ae:0d:ad:8d:34:5b:67:e6:e0:30:28:cb:
df:c3:20:c8:9a:90:d9:fa:af:4e:d7:7b:73:88:67:28:85:94:
26:1e:99:70:85:9d:7c:bf:2b:56:7d:af:8a:91:0f:ff:ad:71:
bc:53:56:0b:1d:a4:c3:d0:62:79:4f:b6:1b:10:60:87:11:20:
d7:00:97:1b:5d:70:55:f1:f6:2f:8b:bb:a9:6c:ac:e1:b9:ea:
79:cb:1f:24:84:2c:71:38:62:9e:76:f9:05:ba:96:79:af:74:
87:84:4d:e1:c3:26:87:ab:38:c9:fc:c4:32:54:ac:c8:72:32:
60:0e:62:27:d7:ad:15:bb:c9:08:22:b2:85:4c:38:8d:a2:11:
f0:c5:c6:f1:64:4d:97:1e:52:36:e5:9d:81:4c:49:53:bb:6d:
80:fd:a0:a7:58:6b:92:54:89:67:e1:b7:b7:28:29:34:e7:66:
0c:b0:96:aa:56:ac:52:02:f4:a3:fe:93:22:ca:ae:2b:ca:0a:
8f:4a:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:27:14 2026 by rpki-client