Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
File: IxYwcMcaZRYOwhi4n98LGv8GCpY.mft (raw, json)
Hash identifier: bY60VVBsYvo6qz6+Y14m7nl4GC2p7VN3XD3dYG6Ui3E=
Subject key identifier: AB:96:78:FE:D7:92:78:C2:7A:74:2C:46:46:79:23:CF:10:76:1A:75
Authority key identifier: 23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
Certificate issuer: /CN=23163070c71a65160ec218b89fdf0b1aff060a96
Certificate serial: 01A0CD485A3DC74610A150FF11E6ACF299DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
Manifest number: 5D
Signing time: Wed 23 Sep 2026 08:01:05 +0000
Manifest this update: Wed 23 Sep 2026 08:01:05 +0000
Manifest next update: Thu 24 Sep 2026 08:01:05 +0000
Files and hashes: 1: IxYwcMcaZRYOwhi4n98LGv8GCpY.crl (hash: Z20jgBs1TVEIt/utF/ndJMdM1pcTC7PWnR8jzQEB0II=)
2: q7ThTrs0g513Vx_EsM-SNJd-9QU.asa (hash: tmMU4Zq5R5GAkYxxYk1nWgXxt8gVsZJujQN6NpzHTjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:5a:3d:c7:46:10:a1:50:ff:11:e6:ac:f2:99:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23163070c71a65160ec218b89fdf0b1aff060a96
Validity
Not Before: Sep 23 08:01:05 2026 GMT
Not After : Sep 24 08:01:05 2026 GMT
Subject: CN=ab9678fed79278c27a742c46467923cf10761a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:25:ca:0a:b3:e8:1d:0c:a9:b0:a6:08:bf:
bf:e9:dd:13:74:7b:87:f5:ba:f1:e2:1b:99:20:5c:
4c:19:d2:10:f2:ad:29:57:8a:57:c0:2a:89:0a:1f:
e0:01:10:51:35:ad:18:b1:ad:56:d9:ad:6f:d2:b4:
af:29:6a:ec:51:f1:52:3f:42:8d:88:31:a1:d5:87:
3d:bb:9e:70:b5:c2:af:ea:eb:5f:cd:5f:70:cc:9c:
ef:fb:82:30:8d:ca:aa:c7:d6:9f:06:f2:88:e4:99:
40:0d:14:e5:7d:17:14:30:06:14:a8:c9:9f:78:f2:
d7:cb:83:f5:f5:fa:4f:3d:22:66:a7:ed:29:e0:34:
42:75:e5:f4:af:0d:79:39:dd:c8:06:a7:60:34:80:
f1:9f:89:df:c1:a4:c4:1d:07:95:dd:1c:1f:09:bd:
0b:9e:4b:42:fe:6b:8d:de:28:d9:73:f4:0f:70:bb:
ab:90:4b:4a:74:ff:39:6e:0c:5d:a7:94:0f:a2:b8:
e7:0c:b2:52:cb:8d:0b:7d:f9:d0:8b:67:fa:3d:cf:
e3:7c:4e:f1:ae:8d:c0:f7:36:21:63:ee:aa:ea:e0:
85:8b:30:f7:f3:79:0e:75:2a:84:1d:f4:11:a0:42:
a6:9c:a7:ed:e4:05:ec:78:7c:a2:de:86:2d:8a:34:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:78:FE:D7:92:78:C2:7A:74:2C:46:46:79:23:CF:10:76:1A:75
X509v3 Authority Key Identifier:
keyid:23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:a5:2a:70:9e:bc:27:34:b5:36:af:8d:64:db:7d:c0:b3:
df:ec:de:60:9f:1b:da:b9:c8:3c:57:4b:a0:30:b3:e7:55:d3:
52:a4:6b:13:96:5a:63:04:8b:58:ce:60:1d:fb:55:42:f0:a0:
a5:11:cf:69:d7:8c:c9:b1:9d:81:ef:3b:6a:90:b6:ab:7b:08:
a9:0c:4a:ff:df:79:d8:4f:54:38:6a:0f:2b:96:24:75:d4:ac:
e4:55:a7:5e:25:b9:fa:7e:eb:59:54:3a:ad:23:99:b2:83:7b:
b4:19:2e:7f:e3:22:10:74:b9:48:e2:ed:54:53:a4:dc:60:2f:
df:63:c0:a5:21:2e:6e:b4:1f:f5:f3:2e:8a:1f:fc:c4:f2:14:
3d:17:9d:92:78:fb:2f:28:c5:06:81:72:34:d0:a0:a5:36:3d:
28:1e:5f:fe:0b:32:98:75:f0:53:c6:59:49:79:b2:f7:07:49:
98:9e:fe:bc:9c:fc:0b:32:e3:34:b7:bf:90:a1:4a:69:75:de:
a3:c5:11:9c:10:a6:29:06:a5:c8:c8:55:59:79:65:7f:f3:cd:
45:c9:75:97:3e:db:27:65:73:d2:3a:5b:e4:65:c0:23:84:66:
28:5e:bb:63:8f:7a:cf:fe:1e:20:93:02:ff:ed:8e:e6:75:e7:
a6:96:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:55:57 2026 by rpki-client