Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: TKb3V7OtQp0DEgldvmxB3D3qsPhZ7LjRnggL+oHYqUw=
Subject key identifier: 05:C7:26:27:B1:F7:05:73:F1:68:90:46:C3:B1:A7:21:E4:38:F7:0E
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 01A0D5A6D475BFBEC22079BB2AD39B228AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0DB8
Signing time: Thu 24 Sep 2026 23:01:15 +0000
Manifest this update: Thu 24 Sep 2026 23:01:15 +0000
Manifest next update: Fri 25 Sep 2026 23:01:15 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: UbF5owwHhqnEqHGhmRwpWElfUB5PsH+Y20FUo93mffk=)
2: vvIw8F-IOEioMYu93B5YO0Hq9vk.roa (hash: WtTZswHjYBJIgKk4bHAyXKnVfNJT2/jg2Qz9ZX4kuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:d4:75:bf:be:c2:20:79:bb:2a:d3:9b:22:8a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Sep 24 23:01:15 2026 GMT
Not After : Sep 25 23:01:15 2026 GMT
Subject: CN=05c72627b1f70573f1689046c3b1a721e438f70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:27:c9:a4:50:0d:4e:23:87:b4:f9:e9:dc:
54:34:19:33:09:d7:d5:4e:fc:82:b4:48:8c:28:42:
bf:27:c1:40:4e:f3:ad:4b:8b:50:76:5b:38:da:bb:
72:2d:48:5d:d4:6c:bb:da:9c:82:9d:61:b7:f4:22:
91:38:75:21:70:57:96:23:48:c3:7c:fe:63:78:76:
50:62:bd:96:aa:de:a6:ce:cb:f1:d2:12:7f:d8:df:
4e:f0:c4:1c:e9:6c:a1:32:19:72:ce:73:91:91:27:
17:99:37:00:19:26:6e:a1:9c:58:7a:83:53:fe:cd:
b0:54:c4:41:4d:1a:cc:da:f8:da:78:09:6d:ac:e8:
b4:01:9d:c0:73:f6:33:99:66:f2:2a:44:ce:e6:98:
28:a2:99:20:45:1c:a9:5c:2a:b7:8f:39:41:57:22:
51:9d:4a:4d:95:4d:fd:22:7b:ee:d6:52:b8:a2:a1:
4e:23:ff:de:5b:ec:6c:3f:56:e2:65:7d:1b:c2:44:
4f:b1:4b:ca:e0:41:fb:07:c1:2e:b9:3b:b4:47:15:
16:5a:35:1f:9c:cd:37:1c:3e:8f:4e:77:6f:26:c8:
8e:39:73:09:84:48:ce:01:9d:25:c0:23:d9:64:b3:
93:1e:b2:a6:97:ac:70:68:2b:93:63:5c:1f:b8:17:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:26:27:B1:F7:05:73:F1:68:90:46:C3:B1:A7:21:E4:38:F7:0E
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5b:06:14:da:b0:c1:36:e6:eb:98:03:95:9e:44:a4:95:08:
a9:99:01:fe:08:09:c0:2f:6e:33:29:25:ae:e3:f1:4f:0c:43:
dd:6c:0c:48:31:6b:a6:b9:da:dd:9b:33:5b:dd:63:bf:1a:ef:
d0:bc:2b:0b:41:d1:4d:16:d2:55:52:81:04:5c:28:aa:bb:3c:
e9:2e:ac:df:86:cf:17:29:9a:18:65:9d:73:46:38:40:52:75:
f7:5c:ac:c1:51:7f:69:9a:39:47:1b:51:f7:8c:4f:2d:47:ad:
21:ab:73:c4:43:a0:ca:8c:27:b9:af:e1:a0:9e:9b:f8:9e:81:
c6:72:56:be:5b:c8:86:fd:29:02:ec:67:38:46:c2:72:0a:b5:
53:6c:6b:39:bb:c5:02:b7:06:0b:ac:33:c4:2e:3c:bd:39:6f:
cd:6d:cb:75:d9:32:d5:3f:1f:a0:88:93:96:df:9c:84:52:ea:
9a:16:21:19:f4:cc:2e:b6:f0:d1:97:68:34:af:af:c0:cb:11:
39:f4:48:4c:5c:1d:dc:81:47:5c:21:e4:b8:bb:80:ab:2f:37:
eb:92:63:e0:80:a9:29:37:c7:b8:a0:05:5a:38:74:26:d8:77:
d2:9f:ea:e6:5d:8a:76:30:fe:4b:09:80:69:3d:95:0c:54:a7:
51:79:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:05:17 2026 by rpki-client