Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
File: I3_mTWhI-AEgq-aV4x-sScpdB_M.mft (raw, json)
Hash identifier: SOjUbWDgnnN9LwJUeHN8xr26/d6TY2cJNwecbNqTOf0=
Subject key identifier: C3:85:F5:1A:CC:BA:18:E4:4E:93:87:3E:D9:E8:6B:20:A6:EE:7C:77
Authority key identifier: 23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
Certificate issuer: /CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Certificate serial: 01A0D048B3E62984C81B356492DE6DD02321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
Manifest number: 076B
Signing time: Wed 23 Sep 2026 22:00:20 +0000
Manifest this update: Wed 23 Sep 2026 22:00:20 +0000
Manifest next update: Thu 24 Sep 2026 22:00:20 +0000
Files and hashes: 1: H8UNN8H7VPAPeU8HfY2pZ9baom8.roa (hash: aa3mwH6a5yy6jaHkG9FnSEuRMRDZi+0YDMCMC7O4/3M=)
2: I3_mTWhI-AEgq-aV4x-sScpdB_M.crl (hash: mexlKElqYO9kTfxdU17DVnDadf1LWwb7oEAnDIB7ky8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:b3:e6:29:84:c8:1b:35:64:92:de:6d:d0:23:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Validity
Not Before: Sep 23 22:00:20 2026 GMT
Not After : Sep 24 22:00:20 2026 GMT
Subject: CN=c385f51accba18e44e93873ed9e86b20a6ee7c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:9e:15:69:74:6f:d7:03:01:c9:b1:de:92:
b8:1d:00:ed:4b:f3:ac:e6:3e:d9:db:87:99:a1:bc:
a3:5a:4b:54:77:1f:4a:cd:63:9b:2c:6e:06:9e:e7:
43:9e:79:6b:28:eb:50:c9:72:81:ac:e6:b9:66:04:
97:fb:b0:f0:69:55:39:d5:fb:c5:76:8f:99:43:90:
ca:24:df:53:90:c0:63:09:03:0a:b7:18:ec:41:e8:
80:f1:3f:3d:98:62:3a:a9:88:12:d1:6e:8b:70:0e:
76:c7:c5:30:6d:f5:2d:c4:2e:d6:40:e2:41:d1:db:
ad:22:0e:41:c7:92:d9:20:1e:d2:21:9c:a2:5c:b1:
c9:1f:2c:e6:af:60:50:5f:52:93:b7:92:98:84:15:
06:31:0b:49:cc:53:8f:d0:7e:eb:12:c0:f0:bc:50:
91:1d:55:15:0c:3d:10:97:82:34:07:8a:f5:a5:6d:
b1:af:53:e6:1a:d9:67:03:1b:48:bf:46:73:c4:7d:
4c:32:fe:2d:24:0b:f5:70:29:4c:dc:61:30:11:58:
0b:fe:0d:47:f7:91:df:4b:ee:3f:ce:53:24:cc:5b:
3f:b1:5a:63:49:a8:32:e6:65:ac:4e:a5:84:50:19:
66:e0:16:e1:19:9f:f4:dd:3a:82:1b:21:b9:56:0b:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:85:F5:1A:CC:BA:18:E4:4E:93:87:3E:D9:E8:6B:20:A6:EE:7C:77
X509v3 Authority Key Identifier:
keyid:23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:39:a7:bb:f0:d7:fd:10:c3:ca:12:5a:19:3d:bf:ed:38:
69:d2:6b:32:e6:32:0d:e1:8e:61:74:ea:1c:06:35:13:f5:26:
b6:70:d4:25:71:c8:5b:39:e0:fa:2a:4e:39:dc:89:71:78:dc:
a4:79:4c:c0:91:b4:c5:91:19:30:b3:4e:1c:fd:58:d7:55:59:
f7:95:d8:e1:4a:2c:7c:cf:c7:e7:17:b8:27:0e:e4:5d:78:7b:
8b:d2:cf:26:e0:19:d6:34:45:97:da:fa:ef:89:c5:67:00:4a:
d6:b2:2a:d4:a7:fd:ef:01:28:40:35:d1:06:ed:51:2c:34:e7:
4a:28:69:16:0c:1c:76:5a:ad:48:d0:e1:e0:9d:ea:64:73:bf:
07:a4:d7:2b:5c:e2:40:9a:ee:05:87:c3:c0:c9:62:c7:0e:e8:
47:5a:19:78:11:f7:9b:a9:6e:08:1e:eb:ce:af:d6:e6:84:49:
dc:37:05:63:b0:2a:bc:ee:30:48:f0:4b:ca:c1:9a:4a:2f:f7:
39:7f:6a:52:ae:02:ba:30:16:45:c2:ea:3b:53:58:a2:f4:65:
9b:85:a6:73:1a:f5:f9:1c:7e:63:b9:b0:cd:c2:95:d8:a5:2b:
ad:b4:4d:41:50:48:a9:26:3f:21:5e:d8:80:92:ff:35:bc:43:
8e:49:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:54:29 2026 by rpki-client