Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: 7haPwLjOph8LkCva4o8a5K2qFaMuHW7UVNPqXYREfnQ=
Subject key identifier: 6B:5F:20:E1:78:8B:B5:3E:C6:6D:4A:21:14:DB:5F:36:9A:AD:5C:39
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 01A0D94C60802AA471722230552CD028AF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 16:00:55 +0000
Manifest this update: Fri 25 Sep 2026 16:00:55 +0000
Manifest next update: Sat 26 Sep 2026 16:00:55 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: KG1CD+UTJsVTYKs/dAvtYzxf8YD/7z6Iuf7CM4DyE48=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:60:80:2a:a4:71:72:22:30:55:2c:d0:28:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Sep 25 16:00:55 2026 GMT
Not After : Sep 26 16:00:55 2026 GMT
Subject: CN=6b5f20e1788bb53ec66d4a2114db5f369aad5c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:8e:b5:82:3c:c0:18:4f:bb:e4:5f:e1:bd:
af:22:c5:2e:7e:68:1a:4a:34:f5:75:0f:38:61:51:
af:93:d4:b1:4c:f0:cc:7b:86:7e:19:1e:60:1b:8d:
b8:a5:17:88:c3:d5:b8:66:bf:ec:56:56:9d:d5:a2:
53:04:9b:68:9d:9c:c7:35:f1:91:bc:8a:c8:c9:96:
ab:cd:21:61:ca:cf:83:f5:66:80:8e:6b:e3:48:52:
c9:b9:30:23:80:8c:ae:14:f7:3a:ee:da:c5:fa:06:
60:6a:c6:77:49:27:bb:79:e6:24:0d:4c:ca:cb:fe:
76:34:45:78:f4:30:ca:7d:be:c3:40:9e:da:40:98:
56:bc:b9:68:63:17:36:0b:fe:a2:07:bc:c3:54:ce:
97:da:aa:52:2c:36:96:e3:8a:a6:04:52:e2:c9:21:
be:54:21:8e:31:27:eb:86:80:de:88:3c:e0:17:57:
c9:90:d2:39:9e:79:9e:c3:06:c5:d9:25:19:46:e6:
1a:70:d2:dc:ca:c0:55:af:1d:95:86:0d:4d:5e:43:
47:09:18:4d:42:3e:ff:86:7a:9c:2d:7e:13:1d:e3:
0a:01:c5:ab:50:29:79:94:42:77:0b:16:33:91:c2:
be:00:49:61:33:2a:c3:69:1f:52:a1:5c:4b:7d:43:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:20:E1:78:8B:B5:3E:C6:6D:4A:21:14:DB:5F:36:9A:AD:5C:39
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:fe:02:9e:56:1c:f5:f7:58:98:46:ec:87:4c:14:49:d1:
9a:a0:13:31:0f:3a:b9:7d:4c:46:bc:19:12:ee:84:1c:08:2b:
c8:7f:f3:a5:11:d0:85:a8:ab:fa:94:60:24:ef:8e:0c:15:24:
f7:b2:2d:b5:c0:48:73:4e:a9:ce:f5:32:5c:a5:61:68:b5:b5:
3c:aa:18:8f:fa:24:48:83:c9:8d:33:28:c7:87:4a:84:16:db:
fe:33:4b:3a:c3:73:3c:64:bd:65:34:26:40:01:6c:3b:6b:8b:
81:70:60:57:ad:eb:11:0a:69:61:09:70:8e:1e:19:f8:af:22:
95:8a:3c:57:f3:20:bd:7b:1e:0a:5c:ad:59:70:38:5e:83:a1:
1e:65:fb:d5:a8:3b:55:68:74:49:e5:99:02:da:9e:88:3c:f0:
b4:aa:08:b2:77:61:93:09:e7:7b:1a:8f:1a:1a:49:3c:03:88:
d1:aa:0f:9a:e1:5e:2f:68:25:17:4c:f2:5c:e9:d1:4d:0e:3b:
55:7e:12:bb:05:a8:bb:35:a9:a8:5a:40:c8:3f:a0:cf:2a:23:
50:a6:f8:40:76:a1:7f:d9:7e:2f:67:1f:da:2b:4c:78:b8:1e:
e1:83:a9:7f:ef:89:10:cf:aa:04:2c:83:cc:69:1f:26:29:7e:
c6:32:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:57:05 2026 by rpki-client