Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: 2TcbqEsSaKCP0TBgApjxWwHoN+wH/QvDHYBIrzWneX0=
Subject key identifier: 78:98:CB:E5:34:89:90:38:16:80:90:D4:15:E2:A5:80:69:D6:4C:76
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 01A0D56F9B679B4AF9E60F2D426A7A8434C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 0BA7
Signing time: Thu 24 Sep 2026 22:00:56 +0000
Manifest this update: Thu 24 Sep 2026 22:00:56 +0000
Manifest next update: Fri 25 Sep 2026 22:00:56 +0000
Files and hashes: 1: 6JMmxrfiQpPlC_lOumLXACWDZqM.roa (hash: J1a3qyIyAUriipjYLsphj7xq5F7o8cCyCbTPqGYHNhI=)
2: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: PuxpajaTLhAq7ywRSawN7eXanYVveY+1vaQ+wKCEPZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:9b:67:9b:4a:f9:e6:0f:2d:42:6a:7a:84:34:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Sep 24 22:00:56 2026 GMT
Not After : Sep 25 22:00:56 2026 GMT
Subject: CN=7898cbe534899038168090d415e2a58069d64c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:a3:d4:23:8c:33:98:69:42:ba:46:e6:ec:
85:40:fb:ee:e4:44:a2:f6:e5:a4:e8:5f:df:21:81:
04:8d:83:eb:1c:dd:d9:ac:12:00:28:3f:ec:71:a9:
dc:3d:a2:37:da:7b:c3:30:ec:86:c3:71:e0:e0:4b:
e2:f7:01:68:4c:54:91:6b:5f:df:f3:d8:09:0c:47:
22:a5:bf:53:63:cd:8d:65:62:0d:5d:65:af:fb:09:
c6:a2:bc:c5:0e:5d:f6:91:2c:90:ca:01:41:91:6c:
d2:9a:50:e7:5b:cc:33:34:ce:c3:95:a9:1b:02:4b:
e8:d6:e0:77:db:8a:22:c3:51:c0:42:c1:63:ae:69:
45:07:f2:f4:f9:4a:e3:a9:f8:71:6c:0d:32:da:7e:
0d:09:b2:9d:88:ba:2b:40:c5:5b:c3:1c:01:2a:e1:
ee:eb:dd:fe:57:22:95:32:39:5a:42:13:49:0c:6a:
b5:b0:02:8d:4b:db:d3:da:54:92:b5:30:60:19:10:
9d:fc:ee:28:a7:03:ca:9b:91:66:45:f8:4c:6a:94:
e1:f3:f2:1a:76:53:76:1b:e3:26:f6:66:f7:9d:88:
34:2b:d4:ea:f3:73:91:93:84:32:e4:e1:93:0c:f0:
79:f1:d0:1f:31:f1:14:45:f2:6e:fe:23:e7:1f:18:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:98:CB:E5:34:89:90:38:16:80:90:D4:15:E2:A5:80:69:D6:4C:76
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:90:9e:08:77:e5:e5:24:d2:8c:b4:78:86:9e:4a:e5:01:
54:8c:d1:9a:f6:47:98:68:d1:2e:07:16:d1:e5:37:45:50:06:
37:d9:1b:ca:96:a7:5b:d8:2d:7d:fa:e2:b4:5a:b9:d2:66:9a:
31:92:01:18:63:8e:4f:10:46:67:09:89:65:ae:d9:d3:ae:eb:
4d:a3:64:32:1b:de:9a:0b:6e:a1:8e:11:ae:9a:53:72:55:a0:
8e:ca:81:b3:d8:3e:bb:d6:79:00:90:f2:53:86:46:76:0c:0d:
cb:c4:87:b2:86:81:59:82:42:3e:f6:27:38:7b:7e:6b:7c:8a:
3c:df:4a:3c:bf:94:ef:bd:f4:b6:46:30:95:19:de:3d:46:85:
42:d2:1b:33:4d:bb:b5:a4:91:66:9d:b7:63:14:ab:72:e6:bd:
22:de:ba:da:74:82:2f:0f:b3:a7:c8:f3:2e:53:a2:65:81:c0:
d2:a1:dd:f3:bb:7c:d3:01:d0:a4:59:1d:70:89:e7:93:7b:29:
cd:c3:33:50:f4:66:67:2c:65:68:b9:a1:3f:88:ed:da:32:cb:
a5:6f:b8:9f:5f:85:51:1a:50:b6:57:97:04:08:0d:a3:e5:c9:
84:51:5c:f9:7e:4c:71:b5:67:50:d7:29:75:be:da:ae:2d:e6:
4c:4f:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:04:38 2026 by rpki-client