Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: 8BDM8M7TxpyW2SpxwZmARWz8AbkeQihLhvKqYr8gxAw=
Subject key identifier: 60:1B:DA:F2:32:6F:F7:41:04:8E:42:E0:4D:51:8D:6E:D4:B5:CA:1F
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 01A0D917820057729941514131BC3F26EFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 041E
Signing time: Fri 25 Sep 2026 15:03:11 +0000
Manifest this update: Fri 25 Sep 2026 15:03:11 +0000
Manifest next update: Sat 26 Sep 2026 15:03:11 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: hbNUGid/VWm/GFhQmO1AVGlB6MPBrpoJJpyu5WT+RZI=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:82:00:57:72:99:41:51:41:31:bc:3f:26:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Sep 25 15:03:11 2026 GMT
Not After : Sep 26 15:03:11 2026 GMT
Subject: CN=601bdaf2326ff741048e42e04d518d6ed4b5ca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:d4:d9:ae:d2:0c:90:3d:fe:fc:81:1b:60:
ae:f9:10:f4:6b:b3:2a:5c:ff:50:5a:67:a1:ee:d2:
39:ad:6d:41:51:cc:26:c6:72:66:5f:64:c8:b8:da:
6f:ca:5e:ff:21:e8:ad:0c:fc:30:01:fb:e9:28:74:
1b:34:4d:0e:27:75:2d:6f:9e:10:12:de:de:b8:70:
50:ab:92:e8:28:cd:fd:ad:42:3d:e3:e8:6a:72:21:
61:16:ee:7f:88:df:93:cf:c6:e6:05:ca:22:d2:23:
c4:0d:a2:68:54:f6:55:45:67:37:39:00:55:5c:b6:
2e:d9:8d:5d:e6:2f:a4:cc:84:46:17:65:fd:ff:1f:
11:01:51:55:e4:01:50:da:00:93:f6:33:18:ea:83:
24:90:d7:27:99:86:d3:30:67:1a:a1:b5:6d:7a:48:
e5:46:f3:34:c1:bd:fa:2b:a7:e6:03:aa:b4:68:7f:
62:b3:b6:0b:3e:31:cb:7b:9d:6a:e9:8c:db:04:8e:
23:4f:9a:2d:0c:19:1a:99:39:f9:ed:3e:b4:5a:ab:
48:ef:9f:21:7d:17:5d:30:00:b7:17:ab:bb:13:57:
1b:f9:16:92:79:db:b1:f0:c6:b3:ca:71:e4:df:bc:
01:e0:83:df:12:d1:e2:d2:fd:4d:01:6c:b7:bc:6d:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1B:DA:F2:32:6F:F7:41:04:8E:42:E0:4D:51:8D:6E:D4:B5:CA:1F
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:61:9c:23:1c:f3:39:4b:08:56:dd:75:27:dc:ec:db:9d:dc:
d3:0e:7b:8b:44:5c:ba:a0:8b:12:d4:1d:31:4b:d3:64:5a:71:
7d:8e:75:48:47:a4:1e:bc:26:98:26:bf:19:81:df:fa:aa:a8:
43:87:87:0c:c8:24:f7:ec:d5:32:2c:68:c1:73:16:e3:7d:53:
0c:62:b3:7c:c7:76:25:e9:36:f2:7d:c5:0c:3b:ab:38:61:d1:
4b:6c:24:12:66:6a:f6:27:d1:32:ee:7c:47:e0:70:82:dc:26:
3f:bb:98:3d:65:fa:ab:c6:b9:a5:93:77:b1:43:0e:b1:04:6e:
4e:9a:85:01:28:83:2a:71:7a:28:1c:62:e1:d8:3d:ce:be:02:
d0:0e:4a:33:f4:81:72:ee:d2:1f:35:d1:d5:da:17:fe:1b:1a:
00:fb:c6:92:6c:18:5a:04:d4:31:ea:fd:02:4e:b1:92:96:8e:
f7:b8:bf:9c:76:3c:19:9c:a9:b6:cb:4d:c8:98:36:e3:80:83:
24:1d:d6:e4:d5:23:11:38:2e:8b:36:fe:06:3b:97:2b:10:70:
9d:a3:56:94:6c:e8:2f:cf:48:82:63:9c:72:d4:0e:90:0f:18:
a1:0c:b9:c6:27:e2:4a:8b:b1:10:fa:a4:f4:a1:1f:90:a6:32:
c5:1a:ce:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:03:35 2026 by rpki-client