Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: g0qmINLduSRlyrFcp0sQP539xk02E7cpZJZWfbZdpNI=
Subject key identifier: 21:05:16:66:85:78:3A:14:66:66:04:AE:04:8D:05:F8:9B:1F:32:BC
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 01A1DFBA4CA1DB8C6EF1D9C466321A9CFB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 04A6
Signing time: Sun 15 Nov 2026 15:01:30 +0000
Manifest this update: Sun 15 Nov 2026 15:01:30 +0000
Manifest next update: Mon 16 Nov 2026 15:01:30 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: V3w9Q70W4O3MTmIN6QlL/bzPuObsy5EmkrH9UkSOxow=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:4c:a1:db:8c:6e:f1:d9:c4:66:32:1a:9c:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Nov 15 15:01:30 2026 GMT
Not After : Nov 16 15:01:30 2026 GMT
Subject: CN=2105166685783a14666604ae048d05f89b1f32bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:4f:3d:d8:d7:91:c7:6b:bc:20:c2:b5:e7:
cb:3e:7c:40:3a:ef:93:3c:84:79:86:5f:d3:0b:47:
de:e0:f3:e1:d0:90:ae:4e:b7:f9:30:12:6d:07:27:
5b:1b:4f:11:f9:22:ad:67:71:5c:57:29:a0:64:f2:
81:e2:56:dc:47:aa:d3:fc:2c:8b:40:45:d4:ec:be:
03:f0:d4:db:81:2d:bf:e2:68:48:55:eb:2c:8d:e7:
c7:1c:49:8d:42:ee:79:17:7f:1b:35:51:41:0c:82:
db:1d:89:87:85:8e:8e:a3:47:5d:c1:a5:99:3d:92:
d7:cf:63:71:7a:06:8f:b9:9d:bd:b8:68:d2:0d:8a:
14:b0:a1:a3:e9:8d:bb:3a:0d:c0:33:7d:32:e8:55:
7c:2e:e3:68:a3:f2:11:d4:ed:0f:9c:f6:00:1b:88:
c2:1b:02:e5:96:0c:2c:b9:f6:a1:46:13:e5:45:b2:
c5:57:d5:45:17:2f:b8:fd:47:01:66:1d:84:64:80:
6c:ae:e7:a8:a4:89:f2:68:e8:b2:75:10:0b:1b:32:
2f:25:b7:3e:0f:84:f6:79:20:dd:4c:70:09:57:9c:
5c:c6:3c:78:60:20:55:bb:26:ea:e9:55:af:a1:dc:
f0:96:1b:5c:f9:1b:0c:68:cd:6e:dc:b5:36:75:4c:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:16:66:85:78:3A:14:66:66:04:AE:04:8D:05:F8:9B:1F:32:BC
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:58:56:cb:4a:25:1a:5b:77:0d:c6:4f:df:47:e7:11:d1:4c:
cf:90:97:41:6a:27:d8:5f:98:d6:fe:b5:97:ce:e5:94:af:ac:
5b:4b:48:9e:96:4e:71:b6:b4:b3:a1:65:00:55:06:b0:40:f8:
9d:5d:db:28:bd:e1:01:e0:65:d0:7a:76:cb:ff:1a:cd:5f:ca:
4e:43:39:0a:2c:d0:80:a7:09:e7:b3:85:49:28:1b:e2:15:1b:
44:bc:ab:42:13:3e:73:1c:df:c6:1d:33:f1:a9:6c:a6:99:34:
31:09:62:73:21:1c:1e:6e:18:96:e0:16:29:90:32:0a:82:32:
fc:46:34:4e:ce:2f:c9:03:02:a4:7a:b0:c8:ab:a9:b0:7b:49:
33:f1:5c:15:e9:c7:c7:f4:19:b0:7b:7f:e2:2d:c3:a2:69:13:
62:e4:b3:d8:02:77:63:32:b3:4e:b7:71:73:00:a0:7e:30:5c:
01:fa:40:f5:0d:ed:9a:32:6f:d9:75:27:f9:cf:8c:ab:a7:00:
a4:e5:16:eb:8d:2f:ba:d3:3c:b2:e9:fc:72:7c:38:0a:8f:d3:
d1:d2:96:df:6a:dd:ab:47:75:8f:de:14:9f:7f:41:99:d0:5f:
48:c3:60:63:4e:f9:09:2f:4d:bd:85:1e:67:79:9a:98:5e:78:
3b:07:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:14:46 2026 by rpki-client