Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: 6k2jmbI3CwYk86WDHoZ+3oFJClpL7mc50jJqJl0In/Y=
Subject key identifier: 7F:B5:C7:C5:B7:A4:AB:68:B0:16:A8:5A:03:4A:4B:98:EA:BA:12:3C
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 01A0EFD4FDFBFEB743CCE8BB476BE5CB6FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 1711
Signing time: Wed 30 Sep 2026 01:01:48 +0000
Manifest this update: Wed 30 Sep 2026 01:01:48 +0000
Manifest next update: Thu 01 Oct 2026 01:01:48 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: f4hX+zSNK9eFjMGvxyx5/beiu1/3/s/CA8IvCLkZ3OU=)
2: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (hash: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI=)
3: e3q1V2fD2QBr302Nmb_jtOVn5-M.roa (hash: kNGhLH15D9N/CBFSD4P6hJtpDjbOe8kg0SMmM1H5/j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:fd:fb:fe:b7:43:cc:e8:bb:47:6b:e5:cb:6f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Sep 30 01:01:48 2026 GMT
Not After : Oct 1 01:01:48 2026 GMT
Subject: CN=7fb5c7c5b7a4ab68b016a85a034a4b98eaba123c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:b4:3c:88:e4:04:b1:f3:80:53:dd:1b:3e:
8c:aa:92:65:22:54:e0:2e:e0:91:53:01:81:f3:15:
7e:73:9d:16:04:ee:e2:e1:83:c5:53:ac:ca:26:d2:
14:0d:9c:38:51:a4:70:17:1a:26:4c:4e:78:b5:63:
f3:7c:68:60:d6:04:53:0c:9e:4e:f1:d9:ae:33:e3:
8c:d5:00:78:64:ac:dd:b0:60:05:69:ce:fc:a9:52:
e1:9e:83:8a:d6:17:0e:ef:7d:56:c3:af:dd:37:0c:
ad:c1:76:36:e7:a5:67:4f:c0:35:25:ef:5f:00:69:
b6:89:1e:7a:d5:27:aa:6c:9e:25:c8:33:4b:a5:24:
3f:7d:5a:f4:40:74:c5:35:9b:2b:b6:93:4d:ee:d7:
f9:d5:b3:c2:ae:59:bc:0a:ea:6d:e6:e2:f2:d3:2f:
c6:4f:23:97:37:d7:44:e7:8e:4e:87:ff:73:b5:e4:
bc:6e:99:7c:6e:6a:10:d0:a6:c4:08:03:ff:b7:d0:
92:ab:da:88:53:ed:5a:8d:5c:02:22:1d:98:4f:f1:
97:4e:5a:3d:82:8f:cd:73:e6:64:70:e6:73:c8:2f:
5f:9c:74:55:cc:03:8c:e0:e2:66:2f:63:18:c8:99:
91:eb:63:e6:b1:91:9d:43:5a:08:46:f8:fd:36:6f:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B5:C7:C5:B7:A4:AB:68:B0:16:A8:5A:03:4A:4B:98:EA:BA:12:3C
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:12:e0:9f:f5:e8:d2:ff:02:11:59:6d:b4:42:95:d0:f5:02:
82:e2:17:46:2a:cd:49:33:a1:16:db:0b:dc:bf:1d:f6:00:15:
02:d4:b2:5d:28:d1:ef:ff:05:1d:e9:e9:54:3a:bb:36:8f:fc:
4a:4b:9d:0e:d6:b4:11:af:2b:2b:a3:65:05:36:f6:0d:52:9b:
9e:c7:1b:63:98:88:7d:fe:79:d5:b2:4c:a4:cc:3f:56:9f:65:
e5:12:f8:ca:d3:05:d9:13:85:0f:21:91:ae:56:05:10:72:44:
e2:fd:4c:b1:db:14:58:1e:6b:ac:64:91:37:09:5e:30:73:6a:
07:f1:92:90:de:a4:53:20:03:11:9e:3d:66:09:78:cb:0f:3f:
d1:0d:c3:0a:8c:71:e3:4d:28:4b:d3:44:a1:05:91:cd:f4:d8:
44:02:d1:18:72:7f:4a:7e:95:1a:cc:0e:06:d9:5e:5b:fe:7b:
74:a6:e8:d0:72:ca:eb:fd:7a:bc:fa:6b:9f:be:99:95:40:a3:
cd:89:a2:c2:7d:7a:47:82:08:a6:a1:95:bd:db:08:b3:13:bf:
b8:2a:d6:0f:52:e0:97:38:58:5c:18:ab:c0:a7:4f:28:ef:2f:
24:3e:f3:91:06:f6:70:8c:e5:8d:e8:54:60:98:31:1a:6e:31:
ea:03:29:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:06:57 2026 by rpki-client