Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: KzrZITzECiaRpH7/KoKmDK7QZQDwHZD9ly+xLH6gEn0=
Subject key identifier: 13:C9:A4:2D:3D:AB:8B:CA:6D:CE:45:68:AD:BF:7E:5F:B4:81:06:0C
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 01A0F7FC2D4FCB2890D0758EA0CEC33F3750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 07BD
Signing time: Thu 01 Oct 2026 15:01:33 +0000
Manifest this update: Thu 01 Oct 2026 15:01:33 +0000
Manifest next update: Fri 02 Oct 2026 15:01:33 +0000
Files and hashes: 1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: XL/3z5JSExL6dhuEf2L3zwbXciiEfbEIpVtFNlhB920=)
2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:fc:2d:4f:cb:28:90:d0:75:8e:a0:ce:c3:3f:37:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Oct 1 15:01:33 2026 GMT
Not After : Oct 2 15:01:33 2026 GMT
Subject: CN=13c9a42d3dab8bca6dce4568adbf7e5fb481060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:94:38:19:32:fd:37:cb:1b:cd:f5:90:0e:
f7:b5:79:9e:86:2f:27:4b:7c:63:cf:23:bc:57:f9:
45:e0:af:52:2c:79:6f:36:c6:dd:7b:93:a8:bb:6a:
74:33:2f:79:85:b0:c9:55:50:21:02:54:ff:ad:21:
d1:67:4e:ff:6e:1a:0c:ce:18:d5:e8:cc:f6:30:11:
8d:96:c3:cc:63:0e:c0:ab:d5:6e:a1:50:86:ce:93:
cd:67:0e:bc:d4:c2:b3:a6:5a:3f:4c:05:b2:7f:f6:
87:01:1e:ae:10:93:db:07:f3:44:b7:c3:af:ef:07:
fb:0d:92:8f:da:98:e1:14:d7:6f:f6:64:08:f5:01:
71:3e:61:fb:e8:d3:55:11:b7:92:55:a8:a6:0b:8e:
da:1d:ff:ab:f4:ce:d4:38:5d:6c:d9:1a:3e:22:74:
90:ef:f1:ec:1d:14:08:dd:94:4f:b1:0c:11:a4:b9:
e3:f6:84:8b:22:8a:bd:a2:8d:2c:25:0d:1d:df:c3:
b6:5f:3b:90:92:7d:6b:ac:b3:3c:92:09:c5:82:a6:
37:45:a9:36:f8:8d:03:e6:f3:78:21:1a:d9:8b:62:
2e:11:ff:14:56:3f:23:9f:69:d1:16:dd:8c:96:90:
53:35:5e:17:f2:84:bb:ea:d7:2f:e7:2e:0b:c2:63:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:A4:2D:3D:AB:8B:CA:6D:CE:45:68:AD:BF:7E:5F:B4:81:06:0C
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9b:1a:0b:85:2f:c8:35:1e:be:48:ce:f1:1a:94:9d:0b:e9:
c1:a5:31:41:61:8c:26:12:65:f5:1f:b2:20:df:22:f5:01:d5:
c0:15:bd:16:e9:9b:04:23:43:04:cf:a9:95:6d:65:96:54:59:
93:83:76:18:e7:a7:9a:6b:00:12:b9:f5:54:ae:e2:80:03:a1:
f3:2c:01:26:02:f2:9a:9f:44:32:87:14:04:a9:a0:ed:06:4e:
f6:28:15:82:f8:7b:35:3f:88:5e:ae:74:0c:a5:22:bc:bf:06:
da:39:91:27:ef:5f:18:71:fd:36:35:99:f7:e2:f9:e4:8b:51:
aa:02:36:21:52:2a:27:7a:18:e3:63:f9:38:9d:69:32:bf:9e:
aa:b7:0b:cf:29:bf:f0:88:c6:40:16:7f:93:ab:c1:d4:62:9b:
75:68:89:bc:d9:3b:23:e5:e5:2f:90:bf:57:a2:03:d0:07:93:
23:49:35:67:09:f2:05:1d:c7:d8:79:73:df:20:d2:e8:84:2d:
8c:09:55:b1:25:28:c2:7a:4a:2a:e4:6c:dd:a3:b5:22:54:02:
1d:eb:a1:53:2a:65:59:14:58:fc:99:fb:02:7a:20:60:1e:c3:
17:5b:f3:41:c3:df:7f:92:0f:7c:30:45:70:00:be:8a:b2:df:
04:d8:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:58:43 2026 by rpki-client