Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: kJ0i7ewsi9//6eGjX6WJuDswUFGJQ5fTNztpn6Rgf6c=
Subject key identifier: 98:78:05:2A:EF:23:5B:81:C5:DD:D0:F6:A4:F5:0F:FF:AF:D9:1D:97
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 01A0D1C987D19162465542D5ADF32B633C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 14B5
Signing time: Thu 24 Sep 2026 05:00:40 +0000
Manifest this update: Thu 24 Sep 2026 05:00:40 +0000
Manifest next update: Fri 25 Sep 2026 05:00:40 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: WsGGF0JpCXdoSQKc3TM2t+xf3I2JA0Q9MxA8B944ijw=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:87:d1:91:62:46:55:42:d5:ad:f3:2b:63:3c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Sep 24 05:00:40 2026 GMT
Not After : Sep 25 05:00:40 2026 GMT
Subject: CN=9878052aef235b81c5ddd0f6a4f50fffafd91d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:86:51:10:a2:3b:02:32:dc:c8:a0:ed:2c:
2c:2b:b1:6d:f6:00:37:75:99:50:c9:47:6d:a5:53:
d3:e9:75:0c:9c:2a:80:2b:f7:78:a6:c5:b0:3e:37:
fc:82:d5:8e:9e:ff:38:d2:61:68:b6:7c:51:1e:69:
ec:47:fe:09:1a:95:17:14:d1:81:99:76:6d:dd:3c:
f2:07:ba:f7:39:4c:54:84:39:5b:be:c8:d1:09:7f:
ad:83:6c:13:f9:57:fa:68:0f:92:8d:12:f0:48:98:
90:d5:45:57:9c:83:d1:0c:ca:8e:17:d9:c3:e8:6c:
95:70:3f:22:83:35:8a:92:35:95:a2:74:49:42:31:
a0:b1:39:f3:ab:20:84:3f:53:70:e3:26:70:52:07:
93:a2:43:6a:4e:cd:e6:3e:01:57:a0:27:ad:b7:04:
6a:9b:00:0c:89:0d:1c:4c:a4:2c:35:7d:bf:ac:a9:
d6:51:95:b4:62:07:da:c5:e5:16:aa:ca:1c:78:d6:
db:b1:11:87:ae:bb:7f:ed:d7:8c:57:88:88:55:07:
44:ef:93:f4:34:d0:25:2e:fb:40:8d:32:91:14:ae:
dc:2a:d3:0e:f8:8c:56:10:27:b9:cb:55:0c:54:96:
aa:8b:e0:36:2b:5e:59:e3:96:7a:1c:e4:1c:d3:c3:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:05:2A:EF:23:5B:81:C5:DD:D0:F6:A4:F5:0F:FF:AF:D9:1D:97
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:33:fa:ef:b5:e1:e7:9b:f9:32:34:8e:e1:99:2f:67:5b:48:
60:1a:30:f4:65:fe:f9:0b:e8:f0:bc:36:05:ef:be:e0:5e:ed:
cf:38:e6:d5:f4:1e:6a:53:64:38:f9:6b:88:f0:be:7a:cb:ab:
82:e7:49:3a:00:3e:32:2c:d4:9e:a7:f9:fa:9a:87:e6:85:3b:
c8:b7:17:7d:f8:48:53:d9:d3:a9:46:56:59:85:d5:24:0d:51:
a7:4a:33:01:11:d3:13:97:48:e9:7f:3b:6d:92:d9:43:54:6f:
e6:a4:05:61:e3:8c:39:f3:21:de:70:09:a1:e8:09:91:c3:6a:
95:e3:6b:09:0c:a7:f0:2e:13:d9:87:9e:55:24:1e:7e:42:8b:
88:76:18:0c:e1:ef:5e:87:35:08:e6:f1:b5:fa:99:29:b3:b6:
6a:71:d9:6a:d3:77:4e:e1:f7:70:9f:2b:29:c7:c4:02:ce:c5:
87:71:6b:b2:8b:f1:fd:e8:d6:a3:0f:b4:55:fb:c4:5b:a4:5f:
49:46:25:a0:c7:29:65:56:bb:f6:12:e0:b7:f2:44:31:e3:2b:
4f:e9:93:e0:5f:44:19:0f:b3:43:13:5f:42:44:da:e8:aa:82:
e1:9c:09:e4:d9:ef:3a:f4:e3:25:53:7e:24:5b:a5:d8:36:b7:
5d:ae:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:09:43 2026 by rpki-client