Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: WYY79QPsNbYZJR4U6qNmemrey9SE8MUxQEaRTrOMJcA=
Subject key identifier: 4A:28:9E:F7:A9:13:13:F1:39:49:C3:1E:C6:DE:84:20:50:8F:F4:82
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 01A0DEE0A228BBF6D3E76452AD6857C3EE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 18:00:58 +0000
Manifest this update: Sat 26 Sep 2026 18:00:58 +0000
Manifest next update: Sun 27 Sep 2026 18:00:58 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: jUQeoWupex/9XdFDhHCicOVwxP01KqVLzXYKAwUmngE=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:a2:28:bb:f6:d3:e7:64:52:ad:68:57:c3:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Sep 26 18:00:58 2026 GMT
Not After : Sep 27 18:00:58 2026 GMT
Subject: CN=4a289ef7a91313f13949c31ec6de8420508ff482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:7c:cb:88:b3:85:5d:94:5c:53:9d:fa:b5:
f9:3d:cc:13:5e:ea:3b:24:f5:2d:df:a7:34:91:26:
e6:97:6f:38:45:c0:49:85:ad:a3:f4:68:e1:85:24:
88:a2:3c:6d:33:2f:76:dc:ac:0a:ab:73:9e:c7:f0:
d0:42:99:f2:6c:95:c7:14:c6:11:25:6d:fc:87:73:
36:f0:0f:3a:5c:03:60:ff:50:a2:44:4d:99:d7:90:
34:86:ec:58:e0:d1:3e:49:f3:0a:84:6c:c9:3c:26:
49:54:d4:81:d1:59:b9:2b:96:6c:56:af:82:d8:17:
95:4e:aa:46:57:69:79:71:ad:59:0e:6d:ea:44:ec:
95:ee:1e:54:b3:a2:15:ed:18:8a:c3:bb:04:0c:fe:
33:a9:45:38:b4:05:fa:f0:c0:6e:fa:7e:13:a0:77:
da:88:77:50:0f:ac:71:2e:f4:7c:d2:f1:9f:ff:7e:
f1:8c:32:32:f3:46:73:7d:63:96:18:4f:fa:45:33:
0d:53:ed:97:ff:ca:d2:9b:0b:c9:c3:ed:d7:b1:33:
a0:ad:62:01:03:62:00:78:81:12:02:23:cf:86:05:
da:3a:15:4f:66:64:ae:66:4e:57:ff:11:7c:85:25:
d1:05:cf:73:0c:40:97:f6:15:77:88:13:0d:c9:5a:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:28:9E:F7:A9:13:13:F1:39:49:C3:1E:C6:DE:84:20:50:8F:F4:82
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:74:49:c5:fc:f6:df:7a:fd:59:b6:f7:cd:a1:d2:09:3f:3b:
9a:2c:e7:de:fc:da:fd:60:ec:19:fa:87:8f:db:54:64:a6:60:
8c:4b:bd:9f:5a:ab:b4:66:b7:03:b1:a2:ba:20:89:b7:e2:48:
51:a8:af:0b:c3:da:bc:45:c8:2b:f7:52:5a:16:ed:9c:80:66:
38:9b:9f:bb:e0:84:e2:68:09:69:a5:db:47:53:ef:f4:c6:ea:
a1:42:e8:d9:fe:78:5a:e9:60:4d:8f:5d:1e:83:32:3f:e7:1f:
a3:14:e0:27:c8:77:22:8d:8c:92:fb:b3:4f:66:1e:92:57:f3:
14:37:f8:0b:8f:d7:28:bb:85:93:5b:b3:fc:e0:a2:b8:88:02:
e8:f5:6a:1c:50:c5:48:04:58:60:c3:97:b5:a0:4a:a8:b7:75:
bc:71:f5:51:41:3e:25:fa:79:71:d4:fc:65:5a:93:3d:58:0d:
e6:54:d5:8d:40:9e:c3:d9:23:7f:a5:ad:9b:8c:2c:f0:c8:18:
a6:92:6e:43:4e:8a:2b:96:98:aa:e7:1c:21:de:28:47:f0:44:
20:7f:76:04:73:86:0d:a3:f3:04:94:18:4b:f4:6a:db:4a:db:
7e:2c:59:98:4e:65:b1:24:09:11:20:b0:4f:aa:c7:ad:90:bf:
33:d5:0a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDe4KIou/bT52RSrWhXw+6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOTdhMzExN2NhMWMxZDYyOTJhZTUyOTExYjRmMGNhNGY4
ZTkwMTkwHhcNMjYwOTI2MTgwMDU4WhcNMjYwOTI3MTgwMDU4WjAzMTEwLwYDVQQD
Eyg0YTI4OWVmN2E5MTMxM2YxMzk0OWMzMWVjNmRlODQyMDUwOGZmNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsZ8y4izhV2UXFOd+rX5PcwTXuo7
JPUt36c0kSbml284RcBJha2j9GjhhSSIojxtMy923KwKq3Oex/DQQpnybJXHFMYR
JW38h3M28A86XANg/1CiRE2Z15A0huxY4NE+SfMKhGzJPCZJVNSB0Vm5K5ZsVq+C
2BeVTqpGV2l5ca1ZDm3qROyV7h5Us6IV7RiKw7sEDP4zqUU4tAX68MBu+n4ToHfa
iHdQD6xxLvR80vGf/37xjDIy80ZzfWOWGE/6RTMNU+2X/8rSmwvJw+3XsTOgrWIB
A2IAeIESAiPPhgXaOhVPZmSuZk5X/xF8hSXRBc9zDECX9hV3iBMNyVrZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoonvepExPxOUnDHsbehCBQj/SCMB8GA1UdIwQY
MBaAFCCXoxF8ocHWKSrlKRG08MpPjpAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzkt
NzU1ZTNiOTZkNWVkLzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83ZjlhNGYtZTdlMy00OTczLWIwMzktNzU1ZTNiOTZkNWVk
LzEvSUplakVYeWh3ZFlwS3VVcEViVHd5ay1Pa0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenRJxfz2
33r9Wbb3zaHSCT87mizn3vza/WDsGfqHj9tUZKZgjEu9n1qrtGa3A7GiuiCJt+JI
UaivC8PavEXIK/dSWhbtnIBmOJufu+CE4mgJaaXbR1Pv9MbqoULo2f54WulgTY9d
HoMyP+cfoxTgJ8h3Io2MkvuzT2YeklfzFDf4C4/XKLuFk1uz/OCiuIgC6PVqHFDF
SARYYMOXtaBKqLd1vHH1UUE+Jfp5cdT8ZVqTPVgN5lTVjUCew9kjf6Wtm4ws8MgY
ppJuQ06KK5aYquccId4oR/BEIH92BHOGDaPzBJQYS/Rq20rbfixZmE5lsSQJESCw
T6rHrZC/M9UKjw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 21:35:11 2026 by rpki-client