Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: eNBAqWnMnvwYqUSuM0e7xi64OoBAgLK4sFEECQnYa7A=
Subject key identifier: C4:48:11:9C:D6:4A:89:08:3A:47:05:45:40:59:7B:EF:37:18:5F:11
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 01A0DB043C46F43DFB790AC618AAC204A3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 1258
Signing time: Sat 26 Sep 2026 00:01:22 +0000
Manifest this update: Sat 26 Sep 2026 00:01:22 +0000
Manifest next update: Sun 27 Sep 2026 00:01:22 +0000
Files and hashes: 1: CPndinjPYr6tuDu76KQaJ-aGMwI.roa (hash: nrsdPAkRRrAV3pIEBSnHKX1eqjnFVOeohTv704UK0JA=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: HsRukgMt2HbH+jn0gy4jdqSRbITj6aEYdNcuAhmMGqA=)
3: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (hash: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g=)
4: dmE1mURwbo1v9xYDFiuIvh4HZz4.roa (hash: E0j3Vog7/eKV4rz8QxbpUA9nxxFmMsDogYNNNnTdFVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:3c:46:f4:3d:fb:79:0a:c6:18:aa:c2:04:a3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Sep 26 00:01:22 2026 GMT
Not After : Sep 27 00:01:22 2026 GMT
Subject: CN=c448119cd64a89083a47054540597bef37185f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:3e:07:f5:1b:b0:ee:4c:7e:5e:fc:7b:e7:
ae:15:b2:49:9d:62:d7:61:cd:12:79:98:72:cd:77:
64:96:b3:8d:7a:88:0d:09:fa:6c:b4:11:d3:a4:d8:
d9:b8:88:ba:d9:84:dc:cd:a1:85:a2:37:b0:9c:c7:
cf:58:83:56:9e:72:f7:e9:dc:24:a2:7e:d6:b6:ce:
59:09:18:17:67:41:86:a1:9f:0a:eb:b5:84:c0:12:
07:2b:34:5b:87:09:86:42:1a:60:1f:a9:16:26:f8:
f3:c2:cd:6c:b0:80:81:92:72:d5:5b:c8:31:ed:d6:
90:cc:fe:e2:81:11:de:12:f9:23:d7:35:0a:71:14:
0b:cf:7f:dc:6c:9c:f3:79:07:74:35:12:e1:0a:7f:
7a:fc:cc:d8:2a:38:34:fd:94:a1:01:af:0f:27:b1:
0c:88:38:7d:ac:ff:6a:a6:86:e7:ef:d7:c3:24:c5:
62:31:f7:89:a4:c9:ff:1e:0d:ae:6d:a4:91:e7:79:
63:94:d7:3e:b4:43:35:f4:9a:e0:fb:73:78:b1:54:
ce:21:33:fe:ff:aa:5a:a0:16:ea:87:84:41:ad:e8:
fd:45:b4:de:85:b6:ba:35:6a:c4:c8:ca:8a:20:13:
ca:1f:92:df:74:69:06:87:32:4b:d4:7c:4a:59:d0:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:48:11:9C:D6:4A:89:08:3A:47:05:45:40:59:7B:EF:37:18:5F:11
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5c:3f:c8:a5:4f:1f:44:52:d1:bc:e2:5a:20:70:fd:08:9d:
04:7b:73:13:54:82:66:1b:94:d7:54:0a:1f:53:49:fe:51:d7:
4c:cd:56:21:d0:4b:b6:c0:99:b0:d9:ab:7b:59:4b:75:d8:45:
63:4a:b8:ac:4d:30:f0:74:53:ac:c0:cb:68:92:bd:94:49:cf:
06:03:39:65:3a:cf:93:64:d9:c5:fa:d1:7c:74:0c:44:a6:ec:
b9:a0:88:a1:c0:0f:83:53:76:f4:08:0b:a1:bc:4c:ee:96:b1:
7a:2a:d0:cc:85:25:65:10:ea:05:50:fd:a7:4d:84:3f:bb:40:
0f:30:b3:76:f5:95:1c:f9:5b:d5:a7:c7:c6:cd:92:2a:be:57:
52:17:c6:47:65:d0:15:42:75:24:38:14:b8:66:4e:97:39:79:
02:2f:81:34:4c:2d:c3:6c:df:ec:8a:f3:9c:20:29:b0:6c:8d:
43:9d:ef:3e:58:5e:34:a2:c3:d1:a9:a0:65:36:79:d6:3c:eb:
38:aa:fb:18:8d:c8:31:63:ec:8d:c3:82:44:8b:fd:a5:42:d2:
0c:c0:d9:2d:cc:6c:57:26:64:8b:a1:cb:8d:9d:5a:2f:fb:fd:
59:14:ec:d5:ef:8b:5d:2a:74:6c:32:55:98:79:07:bb:0b:4f:
01:11:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:48:37 2026 by rpki-client