Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
File: IH_lA3M22POUAym_Ct23kzhO9SI.mft (raw, json)
Hash identifier: hpWYegEc6dou+4l6oc5psqkiid49BFOcsUPFX5lgrn0=
Subject key identifier: 86:5C:80:82:E7:03:D0:22:AF:BE:69:16:C5:AE:60:BB:01:D8:B5:7F
Authority key identifier: 20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
Certificate issuer: /CN=207fe5037336d8f3940329bf0addb793384ef522
Certificate serial: 01A0F2D55BFD665430C55A18AFE326794A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
Manifest number: F7
Signing time: Wed 30 Sep 2026 15:01:03 +0000
Manifest this update: Wed 30 Sep 2026 15:01:03 +0000
Manifest next update: Thu 01 Oct 2026 15:01:03 +0000
Files and hashes: 1: IH_lA3M22POUAym_Ct23kzhO9SI.crl (hash: JePk3/TIBjxWynnfbaMzv3pC75N8iUQJAZg3Uo6YHPA=)
2: TsdPJx7OiywMM122PIYNYWmJFCc.roa (hash: x07yC7l/UbYraclqrFWdPKzw6DYUXEN90KFVFdpgkOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d5:5b:fd:66:54:30:c5:5a:18:af:e3:26:79:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207fe5037336d8f3940329bf0addb793384ef522
Validity
Not Before: Sep 30 15:01:03 2026 GMT
Not After : Oct 1 15:01:03 2026 GMT
Subject: CN=865c8082e703d022afbe6916c5ae60bb01d8b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:f3:1d:59:46:55:1f:5e:d8:36:86:62:a6:
b0:fc:40:47:18:a0:03:34:bb:c6:9d:98:78:ce:39:
1b:bb:00:4c:a6:d7:df:46:a3:b5:31:59:e1:d4:52:
d7:81:85:be:75:cb:d0:08:51:25:7b:fc:5b:19:0f:
c1:f7:ff:67:54:54:ce:eb:16:6a:5b:e4:98:77:10:
51:d0:d0:ca:a0:7b:06:04:56:e0:d9:e6:f3:0d:f3:
64:03:62:c7:cc:35:da:26:91:36:e3:80:8a:66:17:
4c:ef:ad:7a:32:a6:e9:b9:7d:a7:10:bb:25:e8:9b:
55:1a:3b:f3:9a:c3:a5:8b:38:3c:5b:68:fb:0e:cd:
cf:fa:7c:1f:c3:fe:45:44:c8:7d:9e:a5:9b:d6:5e:
a6:51:c6:4a:b5:ab:44:19:12:a3:37:3c:40:60:8a:
d7:f0:e9:af:40:f3:c9:a4:96:a6:c2:5d:25:29:c5:
ed:c9:e1:80:8f:83:ea:d3:81:d5:7c:64:21:34:c5:
2e:6f:eb:17:ea:fb:9b:e4:e1:d6:4d:82:1f:fe:cd:
af:7c:79:4a:2b:78:b5:ee:76:70:47:64:f3:83:94:
14:3d:4a:bb:78:59:bf:5d:9f:44:4b:d5:bf:31:9b:
77:ae:3e:1e:85:1e:2d:77:4d:e3:ce:64:a1:53:d1:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5C:80:82:E7:03:D0:22:AF:BE:69:16:C5:AE:60:BB:01:D8:B5:7F
X509v3 Authority Key Identifier:
keyid:20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:21:bf:e5:50:eb:f7:8f:74:5c:81:21:72:cd:c8:d3:e9:24:
3c:d9:cf:e3:0e:72:78:dd:68:69:4d:94:ae:5d:89:51:22:e3:
18:3d:e0:4f:8a:57:2b:c4:7d:f1:06:cd:26:62:03:7c:ab:e3:
41:49:c3:7a:e3:9b:8f:49:44:21:9e:b9:d8:de:b8:9a:59:ed:
99:08:42:91:a9:7f:e0:a0:d8:40:79:69:75:25:39:93:c3:26:
cb:8b:48:ae:c5:62:41:98:ee:ee:17:cd:f0:9c:dd:a7:a2:95:
ed:a7:da:21:58:5b:a7:a8:25:8b:01:13:56:c3:ab:84:72:a8:
ea:0f:df:f2:aa:92:bd:c0:da:a4:17:bb:14:21:55:66:d2:ce:
de:76:7e:ec:02:b9:48:8d:98:2f:56:a1:30:da:78:33:f4:1e:
94:19:3e:dc:ca:85:ce:88:6b:17:e6:ec:c7:13:75:c1:fb:ac:
7c:90:39:76:78:5a:ce:5a:35:0f:96:61:1b:3f:c8:2b:58:0c:
1b:19:58:80:c4:54:e7:c5:ba:06:fc:c5:c1:5d:d3:18:15:60:
3f:3b:c4:ae:e1:95:d7:69:c3:ae:b4:7e:34:04:40:7a:6f:86:
d4:ef:73:eb:55:e2:ca:f8:96:51:ab:40:2b:1e:35:bd:2e:1d:
6a:d5:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:07:09 2026 by rpki-client