Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: tb7rSZsTpjOI11YYl/1hfpKd9Vvzv1OQ4s4m2Q2pq/4=
Subject key identifier: E5:5C:15:1A:9D:D0:76:48:3A:49:E4:E3:77:86:91:75:D5:64:B2:3B
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01A103928A5A5C5E4A3176ACE06ABC8C1D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1A8A
Signing time: Sat 03 Oct 2026 21:01:37 +0000
Manifest this update: Sat 03 Oct 2026 21:01:37 +0000
Manifest next update: Sun 04 Oct 2026 21:01:37 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: bieDQYyy6OOpjwczaNBrkAALvXKD/l9NuQXxJkYeY7k=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:92:8a:5a:5c:5e:4a:31:76:ac:e0:6a:bc:8c:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Oct 3 21:01:37 2026 GMT
Not After : Oct 4 21:01:37 2026 GMT
Subject: CN=e55c151a9dd076483a49e4e377869175d564b23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:7f:2d:40:31:ad:f2:9a:a4:11:58:46:ef:
ff:17:e9:96:26:ea:95:f7:58:2e:d4:4f:e4:e3:d1:
84:e4:88:14:b9:ed:ed:3f:2d:b0:33:1d:e0:89:fe:
84:74:ce:50:56:8f:9f:80:89:a6:33:de:08:68:c6:
81:d2:99:b3:f5:2a:6c:a7:ee:05:e0:bb:7d:63:e7:
a5:99:df:99:f3:27:9c:96:f8:e3:4e:d7:bf:52:9e:
91:2f:8d:50:04:2d:e9:8e:e9:14:ec:7d:e4:65:41:
3e:76:2c:79:8a:64:b9:83:8e:bf:d9:b0:0b:29:c9:
55:74:56:04:17:9e:7f:ac:6f:da:25:d4:11:69:7f:
99:5f:df:c0:ab:c3:a1:c3:00:85:97:5b:f3:95:ee:
0d:78:57:c7:73:b8:3b:24:5d:34:ac:5c:f4:d7:ad:
74:4d:78:e1:1b:0e:ea:b4:3a:cb:c4:30:d1:bc:74:
af:52:ba:64:bc:01:2a:4a:f9:e0:12:d3:3c:a4:2c:
a8:8b:8b:26:79:59:5a:c3:14:63:33:89:20:0c:d6:
c8:33:f1:ca:a5:bd:93:68:fd:76:fb:9d:16:e7:ac:
67:c0:e9:99:7d:47:14:ee:bb:65:0b:0a:cf:1a:bd:
08:f9:2b:4c:10:90:a4:8e:b0:d6:d4:ac:63:09:7d:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:15:1A:9D:D0:76:48:3A:49:E4:E3:77:86:91:75:D5:64:B2:3B
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3a:15:d8:b9:fe:ee:d8:aa:3a:5b:b3:e0:2d:75:02:b5:cf:
5b:38:2c:48:9a:f3:0f:ba:b3:d7:ca:2c:1c:52:ab:ea:25:84:
6e:62:6b:fc:d2:35:3b:32:04:42:5b:70:e4:25:eb:89:4d:7f:
58:d1:67:81:06:46:ab:65:30:92:a4:70:61:dd:5c:1c:c3:23:
6d:9a:e5:85:2b:08:c7:77:e7:aa:70:2a:f8:de:f0:60:be:3f:
10:33:d7:7d:1e:26:17:93:4e:32:3b:de:4b:e2:21:73:48:de:
9f:a8:94:d3:fa:1b:86:89:78:15:5c:74:43:4e:c9:14:d3:b2:
22:89:88:76:18:8d:de:19:02:cc:99:ef:0a:f6:00:c6:b5:21:
59:f7:5a:44:09:7f:cb:27:5d:40:8e:80:51:ae:e6:34:7d:86:
21:eb:76:11:28:c8:a5:96:30:ba:d5:40:7c:2a:6d:23:4a:42:
9e:0a:ca:51:02:fd:c9:a8:29:56:40:89:e6:25:db:f1:f4:45:
8b:ba:d5:f7:a1:5c:49:55:0a:6f:83:5a:cc:d4:77:d0:ab:4e:
1e:7d:03:01:75:1c:54:92:20:ae:22:2e:68:04:d2:01:e8:04:
0f:9c:c6:66:6e:43:9c:0a:9c:d1:7c:16:c1:90:f3:87:4a:44:
0a:be:b9:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDkopaXF5KMXas4Gq8jB0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1
NWFkYjYwHhcNMjYxMDAzMjEwMTM3WhcNMjYxMDA0MjEwMTM3WjAzMTEwLwYDVQQD
EyhlNTVjMTUxYTlkZDA3NjQ4M2E0OWU0ZTM3Nzg2OTE3NWQ1NjRiMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GN/LUAxrfKapBFYRu//F+mWJuqV
91gu1E/k49GE5IgUue3tPy2wMx3gif6EdM5QVo+fgImmM94IaMaB0pmz9Spsp+4F
4Lt9Y+elmd+Z8yeclvjjTte/Up6RL41QBC3pjukU7H3kZUE+dix5imS5g46/2bAL
KclVdFYEF55/rG/aJdQRaX+ZX9/Aq8OhwwCFl1vzle4NeFfHc7g7JF00rFz01610
TXjhGw7qtDrLxDDRvHSvUrpkvAEqSvngEtM8pCyoi4smeVlawxRjM4kgDNbIM/HK
pb2TaP12+50W56xnwOmZfUcU7rtlCwrPGr0I+StMEJCkjrDW1KxjCX0HvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVcFRqd0HZIOknk43eGkXXVZLI7MB8GA1UdIwQY
MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt
MGY4NzZhYmQxZTMwLzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw
LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjoV2Ln+
7tiqOluz4C11ArXPWzgsSJrzD7qz18osHFKr6iWEbmJr/NI1OzIEQltw5CXriU1/
WNFngQZGq2UwkqRwYd1cHMMjbZrlhSsIx3fnqnAq+N7wYL4/EDPXfR4mF5NOMjve
S+Ihc0jen6iU0/obhol4FVx0Q07JFNOyIomIdhiN3hkCzJnvCvYAxrUhWfdaRAl/
yyddQI6AUa7mNH2GIet2ESjIpZYwutVAfCptI0pCngrKUQL9yagpVkCJ5iXb8fRF
i7rV96FcSVUKb4NazNR30KtOHn0DAXUcVJIgriIuaATSAegED5zGZm5DnAqc0XwW
wZDzh0pECr65jA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:16 2026 by rpki-client