
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: Z/kkoJFHOUBjp0nnDkk1nJK4fuQeEWMf/tT1Cq9cw7Y=
Subject key identifier: 64:B6:13:D3:39:E1:9D:49:70:AC:7D:F2:8C:79:4C:33:46:6D:68:99
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 01A0D3B8DC50484F336405A62E86C415DA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0DB7
Signing time: Thu 24 Sep 2026 14:01:42 +0000
Manifest this update: Thu 24 Sep 2026 14:01:42 +0000
Manifest next update: Fri 25 Sep 2026 14:01:42 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: JjvdPqe4WfAPnXueBp4zDu33ROW4hKR5tZwd9zCWe68=)
2: vvIw8F-IOEioMYu93B5YO0Hq9vk.roa (hash: WtTZswHjYBJIgKk4bHAyXKnVfNJT2/jg2Qz9ZX4kuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:dc:50:48:4f:33:64:05:a6:2e:86:c4:15:da:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Sep 24 14:01:42 2026 GMT
Not After : Sep 25 14:01:42 2026 GMT
Subject: CN=64b613d339e19d4970ac7df28c794c33466d6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:72:a1:8a:d3:7f:55:12:4e:fd:92:53:5a:
7a:45:9c:58:af:dc:a4:5c:f8:7f:b3:55:8f:70:b1:
d6:b9:d2:ae:0a:ae:61:68:a1:3b:cf:08:df:c7:35:
28:e6:52:62:4c:c1:08:b6:2c:5d:3e:78:63:f2:3b:
30:4c:60:86:26:48:5f:91:26:3c:cc:eb:27:12:e2:
15:7c:85:af:f4:3d:0a:c5:bc:ea:0a:96:67:52:7d:
7b:1a:6c:c3:9f:48:3a:df:34:58:aa:44:97:1e:54:
98:dc:08:51:4d:ca:6e:08:31:04:72:de:e4:81:24:
97:97:4b:cb:11:4c:b8:dd:1c:9e:17:f7:7a:76:60:
df:2a:8f:89:16:4f:49:25:73:da:64:14:5d:ba:ff:
51:08:25:c4:f3:80:99:ad:1a:77:c2:cc:2c:9d:d3:
8a:83:0d:c2:83:cd:9f:ca:08:24:26:d9:d5:c9:e2:
07:3c:c9:d2:49:5c:88:32:fc:de:a5:4d:ac:3e:43:
90:8e:cc:2c:95:bf:83:90:14:cc:03:3f:20:e4:13:
a3:c5:95:5c:e8:e6:c6:e9:3c:2e:b5:97:6b:d4:ca:
9c:be:c9:95:bf:dc:a2:7c:6a:b8:c6:28:27:96:7e:
b9:f5:af:d8:81:d4:ee:26:8d:5b:32:db:fe:fa:07:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B6:13:D3:39:E1:9D:49:70:AC:7D:F2:8C:79:4C:33:46:6D:68:99
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:56:b0:42:71:35:25:ab:88:6b:f5:a8:81:03:52:5a:db:a3:
5c:d8:5e:9d:0e:35:6b:eb:d1:f0:5e:eb:9f:a0:17:88:88:39:
4d:46:11:b0:bf:4f:40:4d:ba:5f:3f:34:af:e0:08:ea:00:b8:
3b:98:b6:9a:3a:53:9b:2f:46:57:c8:f5:77:15:67:fa:14:e5:
5c:58:be:55:46:aa:cd:ba:8b:1d:f7:45:4b:df:3a:96:2a:c6:
82:2a:69:8d:41:e3:78:0f:10:37:ba:55:c8:8f:cf:49:44:a6:
7d:38:96:b6:ea:70:e1:8e:41:4c:af:4f:a6:ce:e3:0f:43:fd:
a1:ca:62:36:50:d3:74:40:29:dc:6d:cb:d5:d3:74:5e:33:1c:
b1:28:63:b6:75:49:71:7e:ba:de:11:14:03:08:8a:d5:7d:7d:
d4:c6:a9:6c:d0:94:68:da:24:35:a9:80:3b:1c:63:cb:ae:12:
ce:a1:5f:b1:59:d8:dd:97:7a:ea:04:cb:18:ec:68:5a:72:d1:
a8:03:aa:be:a1:b4:e3:88:a6:c3:99:c2:21:fd:11:36:ec:a1:
94:ff:1f:29:2d:41:28:14:7d:13:19:47:64:6a:74:fb:4f:e2:
ba:09:1e:0c:d5:99:73:3c:62:71:22:06:f0:ac:2d:e7:1b:71:
be:08:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:28:09 2026 by rpki-client