Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: 7ZaHKdQyGmRu0z3tMgp844Oxhb5bOaxmFBEnBz//8QU=
Subject key identifier: 47:3F:F1:3A:14:A1:15:63:70:DB:42:3A:A3:1A:7D:76:28:AC:D2:C8
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 01A0E43EF0F4EF84E80CD23D5540E6AFA5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 1877
Signing time: Sun 27 Sep 2026 19:02:05 +0000
Manifest this update: Sun 27 Sep 2026 19:02:05 +0000
Manifest next update: Mon 28 Sep 2026 19:02:05 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: M2O63BjA5CHMibwl1YuHo168V0ZMhdeqiFWOp0AtQvU=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:f0:f4:ef:84:e8:0c:d2:3d:55:40:e6:af:a5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Sep 27 19:02:05 2026 GMT
Not After : Sep 28 19:02:05 2026 GMT
Subject: CN=473ff13a14a1156370db423aa31a7d7628acd2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ea:b9:93:87:31:a4:ca:f2:8b:9d:40:c9:44:
b5:5f:44:66:5e:c3:6d:8d:18:36:d9:68:79:d3:b7:
c2:b5:ce:a2:aa:c3:25:09:90:0e:49:d5:20:69:43:
6c:21:9e:db:fc:71:5b:d1:26:66:b5:b7:d4:4a:d0:
8d:fe:61:21:5d:17:26:d7:b2:bc:42:5c:d7:1d:40:
c3:f2:f4:49:28:f2:df:f4:1e:c6:40:3f:2f:c0:db:
46:ba:59:cc:35:aa:2d:c9:e8:1b:14:52:f8:b2:af:
7a:cf:ea:79:c0:b9:5f:ca:22:5b:04:92:54:13:a3:
19:0f:7f:c1:26:10:c6:a1:3c:6a:f2:14:a8:0a:b5:
de:52:4a:45:dc:62:09:75:a6:f5:45:02:b7:9a:9c:
8d:5e:5a:fa:34:3b:0e:ee:c3:8f:a7:05:6d:f1:7a:
af:69:23:2c:37:a0:06:6a:5d:95:6e:4f:15:f5:01:
34:2e:fe:c9:fb:61:e4:0a:cc:23:b4:18:8d:2d:1c:
ad:bd:62:72:7a:0e:01:7d:f1:13:25:ca:fd:a3:ec:
54:2c:1e:31:6a:60:70:53:fa:f7:46:bd:72:94:ce:
d9:17:41:04:0b:4b:4f:16:96:42:0c:14:ed:5d:d8:
05:f6:16:0a:7c:84:f1:90:fc:f9:88:bb:a6:4d:7d:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3F:F1:3A:14:A1:15:63:70:DB:42:3A:A3:1A:7D:76:28:AC:D2:C8
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b7:6e:26:82:fa:56:2a:af:31:f2:1a:e5:44:e5:8c:b4:b4:
78:19:cb:94:c5:b5:fa:b0:06:3d:2e:0f:45:5a:4e:2c:8f:dc:
9e:1b:35:26:6e:bb:93:e8:69:5e:b8:89:24:5e:ec:b5:fb:36:
c1:c3:a0:ba:2e:ea:3c:30:7c:63:bf:ab:df:c9:b9:c6:55:ea:
4a:ef:7a:94:54:32:1d:66:91:37:8c:1b:27:0c:0a:75:c4:8d:
bd:95:b6:58:df:e2:2e:22:07:ac:9d:c7:cc:2d:fa:6b:47:8c:
71:ad:98:cc:cf:eb:01:72:d7:ef:eb:a3:f5:a7:29:2d:98:f6:
8d:29:60:ea:9c:79:3f:d9:da:18:57:f4:0c:ca:1d:b5:89:af:
aa:27:88:95:03:bf:b3:d2:1b:0e:ca:88:49:05:6e:e6:37:95:
b0:dd:29:cf:d3:09:b9:fb:34:43:a2:9f:93:97:c5:af:40:59:
25:24:79:d7:2d:d3:09:c8:fc:68:57:3d:b7:17:1b:a1:1a:6e:
f1:4c:a3:c4:12:a2:e1:cc:41:88:e9:40:70:ff:1b:19:53:fb:
8e:36:bb:3a:87:ba:7b:03:70:16:a7:ec:ab:6b:22:7a:c4:a8:
97:d6:66:6e:14:ec:c8:0a:1a:14:dc:36:5c:60:ac:0e:b2:11:
3d:99:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:08:15 2026 by rpki-client