Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: IOYqIvWnb9iOoNb5Ly7Lo7P9LM6N+SqGX4MvqKbnztc=
Subject key identifier: 47:D9:76:32:5C:A2:A3:38:E3:CC:03:C0:14:56:B0:86:E1:BF:1B:26
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 01A1DD5D883679088BF9BFEDADC450BBE6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 18F8
Signing time: Sun 15 Nov 2026 04:00:56 +0000
Manifest this update: Sun 15 Nov 2026 04:00:56 +0000
Manifest next update: Mon 16 Nov 2026 04:00:56 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: rDoqUcNRScSJHdtKAM7ji/PuP9UO1ceXOEhA2rP96uk=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:88:36:79:08:8b:f9:bf:ed:ad:c4:50:bb:e6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Nov 15 04:00:56 2026 GMT
Not After : Nov 16 04:00:56 2026 GMT
Subject: CN=47d976325ca2a338e3cc03c01456b086e1bf1b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:5c:20:a8:ea:83:2a:1d:e1:4c:20:10:23:
b1:d7:83:5e:aa:59:02:5c:a9:42:9c:b3:e4:a2:61:
e8:53:e5:be:af:5d:3a:45:c9:f2:24:e2:c0:f9:8d:
54:d5:8c:12:31:a3:13:11:36:4f:af:c7:d2:00:3f:
e7:78:e5:0c:33:e4:fd:8c:68:f0:61:8a:93:82:5a:
f3:a3:d7:65:c7:97:d2:50:e0:a6:77:f1:f0:5e:31:
4d:2f:ba:fe:9e:60:86:54:b6:64:54:e2:37:53:30:
64:31:be:4a:88:c3:0c:9a:60:c3:a5:fc:e1:60:36:
8a:3d:2d:58:54:f8:3e:1c:90:55:81:32:42:1e:1b:
17:18:cc:88:28:3b:72:80:aa:f3:5f:4c:09:13:4d:
f6:d3:67:7f:4f:97:f3:65:d4:ca:c8:10:da:79:e6:
86:20:07:5a:a1:cf:46:14:fb:3a:2c:6d:1d:34:90:
fc:01:d7:1d:f2:6e:13:22:56:f0:1b:0a:8d:e1:97:
8d:14:46:cc:d8:e8:fd:24:43:34:1b:55:93:2a:0c:
cd:95:9e:88:01:10:cd:7b:b9:b9:49:24:ff:61:4d:
65:1b:5f:03:6e:93:03:69:c7:93:1e:42:84:0f:65:
81:ab:cf:e7:01:50:a5:9a:0f:64:68:9a:ff:7d:bc:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D9:76:32:5C:A2:A3:38:E3:CC:03:C0:14:56:B0:86:E1:BF:1B:26
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:17:9f:0a:29:7b:73:45:bb:9a:25:e2:16:5e:c9:01:b2:57:
80:54:2f:7d:1e:05:b3:e5:71:89:5e:ce:a2:d5:ee:1b:38:90:
d2:b3:4c:f5:51:c3:d1:a0:07:a2:0a:6b:16:66:7d:65:4c:b6:
df:90:d5:13:39:76:37:42:d0:63:48:ab:33:0d:69:ba:2b:07:
cb:4a:a4:ea:5e:56:60:b5:61:e9:09:0c:0f:7e:87:df:ea:1e:
f8:4f:29:5e:db:76:5e:91:c1:98:65:2b:fd:0b:96:1e:2a:a9:
32:b1:2c:68:5a:72:2b:bc:06:3b:d1:f1:9e:83:ba:38:71:6c:
de:b6:fb:da:5c:a6:21:1e:e5:47:f8:e8:20:ba:43:a2:69:f6:
78:82:c6:e7:76:ab:65:6f:12:5e:ed:92:15:09:5d:bb:82:31:
e1:52:55:6c:46:ef:d7:26:3d:ae:b7:65:48:7f:9e:45:03:b0:
a0:21:3d:5b:67:0c:a5:bb:fe:d7:c4:a0:94:9d:f9:f0:dd:65:
1c:62:d5:93:8d:dd:f8:91:83:89:98:2e:0d:e4:6a:62:17:25:
5f:a6:b4:c7:18:f5:f3:d2:28:32:6c:7c:99:3c:5c:e6:36:86:
68:6f:ce:4f:35:fb:84:33:74:04:3c:48:3a:e7:43:6f:cd:ea:
09:9e:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:33 2026 by rpki-client