Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: rjmJNZ2wlc5k6DENzYluipCrVmc66MGbRtSrBsmNetk=
Subject key identifier: 7A:29:79:68:A1:FD:BA:ED:BF:D7:93:40:30:0E:CE:5A:EE:8E:56:55
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 01A0E7AEF93EC6151EEEAC8A0B24E5E22CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 11:03:19 +0000
Manifest this update: Mon 28 Sep 2026 11:03:19 +0000
Manifest next update: Tue 29 Sep 2026 11:03:19 +0000
Files and hashes: 1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: 39WOFFvyCu4ejWjpHCnozsOa2BsA9wx0zXQtUGQS9Ws=)
2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:f9:3e:c6:15:1e:ee:ac:8a:0b:24:e5:e2:2c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Sep 28 11:03:19 2026 GMT
Not After : Sep 29 11:03:19 2026 GMT
Subject: CN=7a297968a1fdbaedbfd79340300ece5aee8e5655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:66:ff:b6:c1:83:9e:9d:85:37:18:e6:2f:
76:1a:57:27:a2:69:35:13:bb:99:64:cf:fd:7d:26:
ad:48:55:e1:65:51:15:07:b5:89:21:33:d2:36:77:
e1:b1:61:39:44:ef:5b:e4:8b:ac:e9:a3:5d:b1:ea:
9d:ab:39:2d:67:3e:9f:0f:30:7b:97:ab:10:5c:99:
cd:77:40:66:ca:41:40:64:9e:ee:ae:c7:13:98:51:
22:ae:0b:c3:79:5f:99:ce:2f:1d:bc:dc:4d:58:ff:
f0:b7:31:ac:5a:22:a2:a0:b5:44:66:99:b4:e6:7c:
21:78:72:b0:cf:3c:54:fa:98:78:4b:3f:0b:c0:83:
42:05:d5:ef:f4:f9:af:5b:e8:fe:b1:f9:99:57:3c:
c1:b7:5a:5c:03:c0:a5:25:98:62:65:1c:67:3d:05:
51:ec:99:d0:4e:13:aa:b7:a5:1f:f8:4d:a5:48:b0:
b8:01:83:d7:b1:14:7e:d6:a9:5b:f6:4d:90:7a:c2:
e4:54:c2:57:01:1e:5e:02:75:d8:58:2a:bd:ce:36:
c0:73:56:d4:49:42:65:c2:86:6f:98:62:48:44:f4:
d5:f4:48:66:5e:5d:cc:5a:03:fb:8a:32:b8:c3:cb:
98:f0:73:b7:b4:f5:e4:2e:73:bf:c3:64:d8:52:1a:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:79:68:A1:FD:BA:ED:BF:D7:93:40:30:0E:CE:5A:EE:8E:56:55
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:84:e7:03:43:c4:b2:31:d5:f6:33:b6:ad:4f:bc:5b:c0:e1:
f1:e0:6b:f5:11:c9:23:8a:a3:21:f0:2d:e6:a0:34:47:cc:81:
f9:87:fb:a4:12:60:62:1d:bf:85:64:20:d3:bd:2a:52:61:5d:
39:9b:24:f1:76:11:1c:80:0a:25:39:c3:e3:b8:31:30:a6:67:
5c:c5:d9:76:2d:30:ca:90:08:60:47:24:e2:28:12:62:76:c4:
ca:f2:6f:ac:8e:c4:d4:fb:7c:cf:a8:98:6c:71:f7:d7:45:51:
08:cf:9d:c3:10:47:26:24:64:43:56:5e:8e:f5:8a:0d:cf:8d:
31:57:68:72:0b:de:23:26:d3:cd:27:15:89:61:bf:b1:25:63:
9a:54:e3:ef:63:1f:90:70:a9:70:b8:0b:c7:94:30:a7:06:26:
23:5e:07:c1:19:ce:9c:7e:a8:e0:bc:27:87:67:6a:fd:d3:be:
7e:b3:0c:46:88:e6:d8:58:58:df:34:ff:c4:5a:b5:17:c4:24:
0f:af:dd:43:3f:67:55:5b:3f:56:d1:21:90:b4:10:71:19:54:
c7:7a:75:9a:29:de:01:05:25:61:d4:0c:1f:c5:c5:ec:33:8d:
69:61:2a:d5:37:c2:14:4d:70:2b:31:db:77:c6:06:9b:a4:bd:
55:b7:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:42:25 2026 by rpki-client