Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
File: I7KazNTA1fX4N36n9GNDt2Brq3w.mft (raw, json)
Hash identifier: SIHBKApPoNq32PBE2UUtq+ihwvvwjuroiRmKn1oeUCY=
Subject key identifier: 5A:A1:E3:30:FE:82:03:00:42:F5:E3:6E:80:7E:9C:4E:E9:90:F8:1D
Authority key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
Certificate issuer: /CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Certificate serial: 01A12A9FA2F551B8A41EF06AEB0DE9C0F04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
Manifest number: 1115
Signing time: Sun 11 Oct 2026 11:01:07 +0000
Manifest this update: Sun 11 Oct 2026 11:01:07 +0000
Manifest next update: Mon 12 Oct 2026 11:01:07 +0000
Files and hashes: 1: I7KazNTA1fX4N36n9GNDt2Brq3w.crl (hash: NvIu5YaF+iPB2kk/s+TTqZrKJoePQ5LXHuM2ESWQhbk=)
2: wr7KLyV4ClQnnTs8IQ6sq5gv_Bs.roa (hash: FVBmo5lpUPz2mK7tntWE423EtofmHFC0fD+FAYIPFZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:a2:f5:51:b8:a4:1e:f0:6a:eb:0d:e9:c0:f0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Validity
Not Before: Oct 11 11:01:07 2026 GMT
Not After : Oct 12 11:01:07 2026 GMT
Subject: CN=5aa1e330fe82030042f5e36e807e9c4ee990f81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:ef:92:c8:1e:07:74:30:71:e8:7d:f2:21:
67:eb:02:8b:8e:d9:24:ef:26:c7:24:9f:c5:4c:eb:
fa:b8:b6:e4:0d:59:6a:c0:a4:d2:77:bc:49:8a:5b:
a3:a0:3c:fd:fa:16:20:e3:6d:01:f0:be:63:c9:1c:
85:38:98:68:ea:02:fe:68:d2:fd:ec:9c:06:7e:0b:
32:85:5b:77:c1:7e:e9:44:56:f5:d8:34:a3:27:84:
40:ed:da:9b:3e:22:ed:3f:b5:9d:92:48:36:14:a4:
e6:7e:0d:5f:52:83:7f:1b:01:07:9e:9b:09:71:75:
34:d6:2f:f7:2d:2c:56:9b:2e:b7:6d:f2:d6:8f:5d:
4c:44:f1:dc:57:1d:5c:95:f4:87:6c:72:52:9b:d4:
9d:d0:b9:a0:1b:83:59:59:c1:9c:6e:86:36:a9:1f:
16:a2:08:69:55:58:92:53:df:b7:19:4d:55:ee:bc:
e7:05:15:2a:26:71:2d:d9:2c:33:ce:0c:aa:02:73:
2a:47:de:6a:35:9f:ae:83:a0:12:3e:88:06:70:b6:
78:9e:de:5f:5f:bd:09:80:09:63:a8:af:e3:27:b0:
82:98:20:a1:8d:f0:b2:14:09:42:d7:5a:c9:73:1f:
9d:c2:0d:a1:44:e9:0b:1d:75:09:02:cd:c0:ca:98:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A1:E3:30:FE:82:03:00:42:F5:E3:6E:80:7E:9C:4E:E9:90:F8:1D
X509v3 Authority Key Identifier:
keyid:23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f0:04:dd:e2:ec:8f:df:30:b6:7c:ca:ba:8e:0f:23:b2:8a:
8c:28:1a:0e:6e:eb:e1:7e:3c:e6:20:19:30:76:e0:07:a3:a3:
85:c0:41:0b:6f:a4:37:96:fa:65:cd:d0:0f:f6:4b:6e:84:2a:
59:00:1c:20:22:9d:ac:7c:13:1d:68:6a:39:6d:df:80:82:4f:
6e:13:fd:ca:fe:fb:87:2c:a2:3a:d8:54:cc:2a:16:99:1d:91:
11:81:7c:bb:f8:cb:5b:89:aa:63:bd:db:92:1a:64:df:3e:94:
1f:da:5c:f2:b6:24:33:31:ae:c2:7c:1f:24:e7:45:08:9a:c6:
e4:20:00:a4:ee:9d:1b:08:9c:54:66:9e:71:f9:db:d2:fc:64:
06:bc:46:ec:e8:7d:dd:9c:50:1d:c3:72:0e:ad:48:88:53:7e:
71:d2:b7:5b:0b:8a:ad:ab:2a:37:6b:70:02:bf:37:9f:bb:af:
ce:98:80:f3:30:55:21:84:ef:5a:5b:f4:f3:30:89:7e:5b:79:
09:51:cb:bb:41:76:99:d2:46:57:ea:38:73:e9:9b:ca:9e:63:
b2:9c:84:b9:50:84:d6:d7:b3:f4:1e:e2:28:96:0d:6e:b5:6f:
b5:b3:cb:16:d7:9b:ad:1c:b5:8e:5d:5a:ad:62:77:3c:ee:77:
c3:bf:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:00:05 2026 by rpki-client