Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: 7ysZZvnhgK6zB+GdlGTuIcu6/NC3jVDS71nj8D/+TME=
Subject key identifier: B6:40:59:45:64:D9:04:DE:CF:82:6D:82:10:D6:12:B3:A7:CD:83:74
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 01A10B4B8284D766AF6A0BC95DB1851F22DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 07C7
Signing time: Mon 05 Oct 2026 09:01:00 +0000
Manifest this update: Mon 05 Oct 2026 09:01:00 +0000
Manifest next update: Tue 06 Oct 2026 09:01:00 +0000
Files and hashes: 1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: YdUHtdcphGmGy3/uiJAIdTkPR9ddSkatqN0M0zRjmLI=)
2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4b:82:84:d7:66:af:6a:0b:c9:5d:b1:85:1f:22:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Oct 5 09:01:00 2026 GMT
Not After : Oct 6 09:01:00 2026 GMT
Subject: CN=b640594564d904decf826d8210d612b3a7cd8374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:1a:0f:9b:32:bf:ac:2d:1e:e8:c6:cc:f2:
31:4c:e6:fc:c5:77:4b:50:f3:37:46:22:49:9a:d3:
4a:1f:c3:49:65:ad:fa:e1:2a:65:79:e2:8e:4c:48:
8d:da:99:a9:b7:0b:16:c8:5a:e1:b5:ae:35:71:97:
49:87:92:dc:48:b0:f0:e8:5f:13:15:a0:a0:7f:ac:
13:8f:82:5c:fd:94:f8:7e:1a:6b:77:9b:86:3d:02:
20:9c:90:e1:c5:47:b5:62:53:bc:c4:fe:11:5f:d5:
57:ab:91:7d:c0:95:0e:2f:92:ce:53:07:02:33:b5:
e6:26:71:9d:b4:da:2b:a7:1d:bc:3f:c3:d0:99:1b:
98:c4:61:a8:8f:a0:41:ea:79:9e:a0:0a:7a:0d:b3:
39:86:ce:b7:b6:9e:0b:a9:ac:c6:cd:ed:ec:f8:b9:
c2:38:ad:a8:9d:c3:b4:23:4b:40:09:ca:a9:42:26:
54:03:e8:45:7c:64:b1:07:f7:df:a3:82:bd:67:4c:
cf:25:e9:11:31:ed:ee:7f:58:cc:ae:b9:ac:87:dc:
7e:a8:05:7d:5f:6b:18:92:2a:b5:96:be:7a:a5:d9:
a1:19:7d:16:4c:d1:c5:8b:ac:a6:6c:25:0a:61:5b:
9e:89:12:73:72:fb:2a:01:59:fe:2a:26:85:c2:5c:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:59:45:64:D9:04:DE:CF:82:6D:82:10:D6:12:B3:A7:CD:83:74
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:90:f4:62:6b:c1:9b:93:c4:b9:9c:17:00:93:1e:58:16:0a:
8f:e2:a1:8e:45:ed:85:1a:37:50:59:d0:43:07:9e:a0:b8:57:
ae:3a:48:a1:04:e3:39:0e:55:79:31:f6:b6:cf:98:1f:bd:03:
81:2d:c8:2d:af:a9:ff:06:11:7d:24:0a:1e:f4:e7:1c:fe:3b:
ff:79:f3:d8:cc:07:28:5c:f1:0f:e6:e2:6d:8b:8b:0c:0d:e0:
fb:2d:f0:e9:db:48:23:60:5b:b9:f9:aa:56:14:c3:18:61:f5:
e9:16:17:3b:64:e4:3f:21:6f:7e:25:3a:c7:af:15:68:8d:c6:
4a:26:21:83:b7:0b:87:ef:6f:98:99:5d:ee:6d:c6:37:61:34:
01:04:d3:94:77:a7:c6:1f:59:4c:a5:0e:d9:ba:a7:a9:bb:ad:
02:ef:2b:cb:75:22:64:4e:7a:d7:c5:74:bc:ee:10:a5:93:3a:
4f:ea:cc:c4:e1:e1:bd:0f:59:62:a8:0f:dc:15:c6:92:66:29:
a3:c8:d3:c1:72:42:ff:ae:34:0e:75:fc:b5:fa:79:ba:31:a4:
32:6a:d2:48:de:c9:9c:44:bd:9f:59:01:6d:3d:c1:0a:54:03:
bf:fc:63:32:16:b4:cf:7c:53:7b:b5:67:33:59:74:8f:07:39:
07:f3:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:52:33 2026 by rpki-client