Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: zMqzuMlzLwmfjSgkrMKWcc4qTbKzBXk6NuL7/7VV7ng=
Subject key identifier: 69:91:18:9F:54:86:50:3D:F7:E4:63:53:3D:EE:77:CC:E9:A1:8E:1D
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 01A10BB8FFD675DE2EF4EEF9393C1D9C64C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1A8E
Signing time: Mon 05 Oct 2026 11:00:35 +0000
Manifest this update: Mon 05 Oct 2026 11:00:35 +0000
Manifest next update: Tue 06 Oct 2026 11:00:35 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: pRHaq2HxdKJ8o1yaAJYFbgCPyxIn6ORtmJNwxonxFnk=)
2: di7BBo89yLvPzYRgI1CnXRkGKek.roa (hash: J2fGlbJBwYkKOrpnLxq93QttJnUWfvQ1tz5acXy/Cg8=)
3: jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa (hash: uJEOU0bJFwdOC2+0d4gL/okHKs1T55lvZjr01PdnJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b8:ff:d6:75:de:2e:f4:ee:f9:39:3c:1d:9c:64:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Oct 5 11:00:35 2026 GMT
Not After : Oct 6 11:00:35 2026 GMT
Subject: CN=6991189f5486503df7e463533dee77cce9a18e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:d0:47:46:8a:1a:ff:f5:eb:90:00:c0:77:
99:5c:b7:40:a0:3f:dc:e9:9a:99:95:e7:fc:1a:56:
3e:34:fb:1b:d6:a5:a4:63:c8:04:2c:7a:84:62:02:
5e:0c:d5:71:2f:62:2b:49:08:98:d1:b7:eb:7b:3e:
a2:83:aa:7b:41:0a:a4:12:ea:ea:ab:d5:cc:13:11:
28:2e:9f:6d:41:41:1f:c3:fb:35:73:1a:e9:1c:0d:
83:10:d1:7d:44:a1:d6:ac:cf:44:88:cd:fc:22:3b:
86:7c:c8:29:b4:95:df:db:06:e4:ec:2f:e6:0d:10:
86:8e:7c:f5:0f:81:93:18:c1:8c:0f:3c:2a:6c:d9:
06:d0:69:7a:ec:9e:dd:37:80:78:fd:bd:7d:6b:67:
f7:77:3f:6d:75:98:1a:ee:22:d1:a0:6c:b4:0f:e4:
4f:a8:60:70:3c:5e:3a:c8:8b:9c:47:90:96:9f:c3:
72:93:65:66:08:81:47:f3:c4:78:2d:40:47:6e:9e:
91:69:1b:04:6d:72:34:b1:1f:7c:43:75:e2:9d:27:
26:23:d4:33:eb:c8:2e:be:22:45:07:c5:9b:06:e6:
64:7d:57:f5:3d:32:52:8a:ab:5a:42:1a:54:32:fa:
2e:89:28:72:db:ea:5c:cf:fa:ff:ed:40:df:ea:06:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:91:18:9F:54:86:50:3D:F7:E4:63:53:3D:EE:77:CC:E9:A1:8E:1D
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a4:d2:d2:e9:d1:1b:f1:68:ae:e9:ee:44:6b:2e:21:37:15:
58:c8:5a:7a:12:46:3f:a8:31:92:2b:00:00:7e:8d:97:ba:c3:
8b:5a:1c:69:0e:bd:a3:c0:fe:ad:d5:71:ef:f1:e0:bf:26:8e:
f4:b4:95:c3:97:cb:ef:06:de:c3:9c:8d:9a:17:80:3c:c0:5c:
00:0f:5f:83:5e:f0:d7:35:06:31:bf:c0:27:c3:82:fd:f4:22:
c4:79:ea:dc:f1:45:c3:a9:d1:0f:d8:20:4f:cd:2d:e1:7e:d1:
b1:02:c4:c0:e1:5a:16:93:19:b0:0f:45:aa:5f:e7:53:2f:19:
8a:9a:68:fd:41:64:5c:56:9d:96:4f:7e:37:90:1b:30:64:5d:
4c:ad:e4:f3:3b:d9:72:97:d1:74:67:f5:af:c0:03:ed:ce:b6:
4b:68:95:c0:e4:45:4d:8a:32:ec:2d:5f:1b:56:3b:10:d3:ae:
25:8e:5c:7f:17:b4:ae:f4:93:01:19:d3:2b:75:d2:77:92:7e:
3c:d3:43:12:fb:d1:b8:0d:72:0f:0e:7c:28:66:50:b8:c3:80:
f6:60:43:39:a1:93:b3:05:22:e0:81:c0:26:52:05:fb:06:1c:
19:9f:91:73:c0:a2:0e:3f:bb:07:ef:d3:6f:a7:9f:be:5a:fd:
96:ee:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:19:48 2026 by rpki-client