Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
File: I6ejqG_MgpkfsH6OSL1SPi54Msk.mft (raw, json)
Hash identifier: DmgsPVH9HOVIbyAZR+x3bO0Yg5vTSUS4x8EL5wCz934=
Subject key identifier: A3:1B:A9:5F:B1:32:40:54:2F:F9:29:E0:81:72:E3:DD:05:2B:A2:9E
Authority key identifier: 23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
Certificate issuer: /CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Certificate serial: 01A0D98394B03E86DEAD32DDE93ED82AAE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
Manifest number: 0137
Signing time: Fri 25 Sep 2026 17:01:14 +0000
Manifest this update: Fri 25 Sep 2026 17:01:14 +0000
Manifest next update: Sat 26 Sep 2026 17:01:14 +0000
Files and hashes: 1: 5KHe4EKfZEY-oVJzaIVBG3mWL5E.roa (hash: ow+i1oVkQgzOG1bAJJCMmBDRllBuBSZ4j6eQrfepZu4=)
2: I6ejqG_MgpkfsH6OSL1SPi54Msk.crl (hash: hQaUhgiOJz8n1PkbpQAhyfM14tSek51R8w/LlwPe3zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:94:b0:3e:86:de:ad:32:dd:e9:3e:d8:2a:ae:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Validity
Not Before: Sep 25 17:01:14 2026 GMT
Not After : Sep 26 17:01:14 2026 GMT
Subject: CN=a31ba95fb13240542ff929e08172e3dd052ba29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ed:b1:3d:0d:d6:bb:10:e6:de:45:0c:ca:8a:
68:ed:22:c6:ff:3a:13:6e:9f:f0:87:4d:48:24:77:
e8:35:71:b6:5c:02:a0:d8:78:e3:f3:87:24:67:ec:
f0:08:13:9c:0c:95:06:19:73:aa:f7:9e:04:c5:34:
90:2b:86:24:dd:b1:54:bf:1c:28:d7:9b:09:5c:91:
20:bb:54:08:5b:df:84:f5:9a:e4:18:b9:c0:e8:2a:
50:e1:be:cd:98:19:d1:62:14:7b:cb:5b:8a:a7:83:
a2:68:5d:d3:0c:dd:ae:5f:50:32:02:98:de:0e:a6:
3f:62:e1:18:af:ad:05:3c:17:73:53:6b:82:74:b9:
84:a4:18:c1:5f:1f:99:ab:6e:3b:f8:7b:c9:c2:9f:
bb:00:a9:60:0f:d6:fa:41:0b:88:39:52:e7:44:b8:
0b:67:48:c4:55:3c:27:80:ef:7e:c3:f5:30:fa:9a:
29:8a:b6:ac:f6:15:97:28:0f:4b:2c:c8:39:21:0d:
ff:c0:88:7c:98:5c:89:e8:be:82:5b:89:08:0b:72:
8e:8d:f3:3f:75:d1:fc:31:66:0f:58:6d:ad:07:f8:
22:6e:ef:78:e4:73:6e:82:13:3a:05:21:3d:a3:63:
58:7c:ce:17:a5:1c:c8:70:3e:2c:56:81:50:4a:c5:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:A9:5F:B1:32:40:54:2F:F9:29:E0:81:72:E3:DD:05:2B:A2:9E
X509v3 Authority Key Identifier:
keyid:23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:d7:27:47:41:3d:e5:41:01:11:3d:30:59:da:bf:a0:7e:
44:7e:66:10:09:a1:cb:a5:35:ee:b4:e3:43:5a:a3:d6:6a:bd:
80:c6:91:05:0b:75:dd:44:75:e3:9c:12:40:41:41:81:59:46:
2a:dc:ea:aa:0b:a8:00:0c:ab:31:3f:46:95:ad:dd:99:da:f9:
17:cd:aa:c7:23:02:f8:73:10:d2:ff:87:3b:b3:8e:b2:0f:03:
ff:c1:c3:53:f7:e6:2a:c0:12:c2:9e:86:ce:63:72:d6:81:1b:
bf:21:28:1a:01:52:59:85:ba:e0:29:66:49:51:b3:cc:5e:99:
54:89:e3:55:1f:67:b7:6f:7e:6e:b1:3c:06:8b:e6:c3:89:9c:
75:00:1e:33:50:2a:38:6e:c1:76:53:3c:1f:b0:23:f4:00:c3:
6f:f9:c4:a7:00:a7:95:d4:b3:c7:40:09:46:52:6a:2e:de:e9:
b2:08:1e:a7:20:20:ec:cc:84:9a:e7:56:f1:68:68:44:3e:d2:
7f:e8:61:6d:e8:47:34:7c:2b:7a:67:fc:c3:fa:e5:23:da:3c:
1f:51:4c:66:5c:76:f9:49:95:01:7f:82:06:70:91:3c:79:a0:
ae:ab:53:a1:4b:38:f1:3a:1c:f8:d9:58:a2:58:9c:8e:06:82:
a1:af:96:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:44:26 2026 by rpki-client