Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: 562BJU85X039X/jM357LCxrN5qzAN841K8LcDeSc0Hc=
Subject key identifier: D7:5F:3C:B5:8B:37:1B:05:7C:58:B1:FA:1F:9E:D7:67:55:2D:61:38
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 01A0D6151EF2ABEE103DDF5DE741F28B827A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 01:01:43 +0000
Manifest this update: Fri 25 Sep 2026 01:01:43 +0000
Manifest next update: Sat 26 Sep 2026 01:01:43 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: q8jTCac7jVG4n1BIQXcVaYmhhFAVc2/x6GVyaH1GZLM=)
2: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (hash: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI=)
3: tIEL4J6jSkAPZLSFtELamVkICgM.roa (hash: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:1e:f2:ab:ee:10:3d:df:5d:e7:41:f2:8b:82:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Sep 25 01:01:43 2026 GMT
Not After : Sep 26 01:01:43 2026 GMT
Subject: CN=d75f3cb58b371b057c58b1fa1f9ed767552d6138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:51:48:7b:cd:83:86:f7:5b:ad:56:58:40:
34:41:d2:4d:ba:f2:f1:62:cb:62:8b:53:8b:73:b4:
11:94:11:32:1a:23:8d:ff:91:b1:f3:6f:5b:79:9d:
fc:af:54:08:15:93:ca:0a:98:70:93:31:cb:c9:11:
3b:53:07:ab:87:22:2a:0d:b6:4c:11:94:f4:ac:e9:
67:b9:d5:50:82:3e:d3:d9:5b:06:6f:62:47:4a:b8:
c1:8c:9e:70:f5:ea:ab:1a:d9:cc:47:4c:e4:c8:59:
88:58:95:5c:0b:f3:f8:9c:e6:c4:01:8d:41:b8:bd:
08:b6:6a:39:06:75:1c:04:2e:f6:ec:66:2c:7a:7f:
6e:d5:73:ce:cd:85:76:ea:7b:f7:cb:71:1f:15:86:
8f:31:8c:b4:96:b4:2d:62:2c:88:a8:dc:fd:6f:f9:
8f:b1:60:29:17:e8:3f:1f:fa:0a:f3:f4:f1:5f:a2:
84:b0:46:33:0c:b0:fe:72:34:7c:0b:20:6f:2d:ba:
2f:8b:1c:17:46:b3:04:70:84:60:0f:4b:b0:b6:f7:
85:df:39:af:30:29:2d:d9:2e:ef:df:9b:bc:0e:2d:
5c:2d:e9:92:c7:c8:ea:fb:b4:0a:11:61:86:14:b1:
63:4e:79:f8:5d:13:1b:43:eb:7d:0a:17:29:5f:19:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:3C:B5:8B:37:1B:05:7C:58:B1:FA:1F:9E:D7:67:55:2D:61:38
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:df:ad:35:cb:a5:c4:1a:93:c4:cf:cd:9f:51:7e:14:66:57:
f1:67:2b:34:99:87:9d:b5:d3:b4:5e:50:d3:da:b5:7d:da:39:
d5:81:09:fa:ed:42:8d:fb:64:6a:7b:0b:ea:e3:6f:6f:d2:14:
76:d4:d6:62:95:dd:c6:aa:b2:53:00:a4:d6:3f:e2:cd:3e:73:
13:90:18:05:90:9f:d2:9b:4f:f6:06:dc:12:5a:17:76:cf:2e:
5a:1e:98:b2:03:01:db:58:44:c8:06:f1:00:fb:33:7f:62:fd:
13:14:72:35:ea:f4:72:bf:f6:3f:66:02:cb:89:a9:cd:65:d1:
38:13:a8:50:73:67:38:60:e6:2c:79:88:85:b0:1b:19:ba:af:
a4:93:5a:da:92:3b:1c:ac:c0:43:64:10:4b:1d:61:72:a1:59:
22:e3:d6:49:89:f6:72:32:a7:e7:0a:43:75:9c:3a:e1:35:5e:
b2:94:38:4d:d5:31:17:f9:7e:80:1f:84:15:d7:40:62:d8:c2:
ed:49:99:b2:99:66:2e:40:df:12:e4:40:89:d9:a6:c4:6e:8d:
c1:67:60:bc:f6:e8:7f:c6:18:4e:e9:45:4c:ca:5a:69:59:18:
4b:8f:68:94:f7:5e:b4:a5:c8:a4:43:12:43:f3:b1:4a:b0:65:
31:3d:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:51:34 2026 by rpki-client