Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
File: ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft (raw, json)
Hash identifier: i6Yl775+8A6403VXJIVW5QxBxV/qxdikTsJCgAcwQ2w=
Subject key identifier: 39:07:00:A8:3B:FA:B4:6C:3A:48:6D:2D:EC:92:84:A3:B3:78:C8:73
Authority key identifier: 8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
Certificate issuer: /CN=8b18de6736e258b5f1a008d529922229a2932393
Certificate serial: 01A0D1243D4C8BBFB06B4AF87E86C0EA1E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
Manifest number: 0123
Signing time: Thu 24 Sep 2026 02:00:07 +0000
Manifest this update: Thu 24 Sep 2026 02:00:07 +0000
Manifest next update: Fri 25 Sep 2026 02:00:07 +0000
Files and hashes: 1: IpDjDaen4M-VqbxT-HsQgW2lzN0.asa (hash: rQjAT1n9bsLsCJwTibsu+CoF2MQ8QmY/T0w14G7X9uY=)
2: ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl (hash: CKsRV8slbNU/xfEyioXwoMhNVVilM7kkh9uu2haaYKI=)
3: taKgYCsZGDvagGUF19ZXEeasAPU.roa (hash: nJ/FzSD5iy11Q8Vrz1U8qvB/SWPV18wb+knyLGsBd54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:3d:4c:8b:bf:b0:6b:4a:f8:7e:86:c0:ea:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b18de6736e258b5f1a008d529922229a2932393
Validity
Not Before: Sep 24 02:00:07 2026 GMT
Not After : Sep 25 02:00:07 2026 GMT
Subject: CN=390700a83bfab46c3a486d2dec9284a3b378c873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:00:ae:91:89:05:f8:66:21:32:b2:6a:a0:
82:0a:7a:92:8e:94:47:3a:2d:00:3e:ce:1d:ce:ca:
3d:19:52:75:9b:00:2d:6d:f8:46:80:58:f2:22:0d:
dd:ae:f3:16:8f:e8:7c:f5:01:85:2e:30:a8:e3:7e:
58:05:0b:3e:b6:46:b8:c9:9c:13:0c:18:e6:d9:ce:
fb:e9:de:30:56:d1:91:e6:c0:e0:ea:90:60:df:ef:
b3:48:d6:77:66:29:51:4d:43:25:c0:e3:2a:14:6b:
94:80:77:20:71:c7:64:b8:9f:32:6e:6e:a9:ad:f1:
c1:34:f0:b7:85:7b:70:95:75:97:48:57:ac:85:44:
d7:f0:b6:b4:15:7e:3e:90:a8:72:7b:a3:59:5e:ab:
db:37:fb:8b:4f:11:5e:a4:a7:db:81:99:26:64:c8:
08:46:4e:db:96:9a:3e:24:d9:26:ab:95:35:6d:e1:
e2:d7:04:37:5c:58:6a:c6:ae:06:8d:17:f0:fb:7c:
e9:f0:58:b1:20:5c:7c:5a:c0:97:6e:fa:44:8a:1b:
7e:a7:6b:e1:a2:5d:e9:74:ff:f9:d5:2a:e7:1c:89:
a9:d2:b1:c9:b8:ca:f5:7a:08:be:d5:55:16:52:99:
97:ef:e8:34:62:69:42:f4:3f:c0:24:63:34:fc:8c:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:00:A8:3B:FA:B4:6C:3A:48:6D:2D:EC:92:84:A3:B3:78:C8:73
X509v3 Authority Key Identifier:
keyid:8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:ff:7c:3b:72:46:32:16:08:43:5a:3e:4c:ed:56:81:c1:
dc:71:5d:b5:b9:bd:a7:1a:ed:66:7d:a0:f2:15:86:b9:9b:d2:
84:e4:08:21:45:e3:1d:8e:cc:4e:2d:8c:b5:74:b7:ca:96:53:
55:a4:d2:c9:4c:3d:83:da:af:5d:cb:4d:c1:e2:a9:82:c5:47:
f8:5f:82:95:57:9f:1d:99:64:4d:a7:ff:90:91:bb:0a:78:87:
50:39:44:08:e3:ef:fa:c2:ff:55:4a:dc:f4:1e:c9:77:19:e7:
27:5b:c5:58:95:8f:94:d5:28:e7:d8:71:92:67:24:1c:bf:89:
11:c6:68:77:76:b8:6a:84:b8:42:7a:0a:38:0e:d6:a5:cc:ae:
9b:f2:aa:1c:2e:dc:8e:80:18:a3:ae:0c:56:9a:c5:2b:02:e3:
78:16:92:c6:de:35:ef:36:bf:b0:75:66:ad:28:d6:65:a5:2c:
6c:d4:2a:cc:8f:a9:6d:9e:a2:f2:f7:2b:2f:2c:f3:8f:cf:02:
db:c2:7e:02:7e:fb:85:85:8b:2e:73:2c:6e:cf:4c:bf:b4:fb:
43:8e:b0:24:e2:8d:e3:17:64:f7:ae:7f:f6:74:72:3b:f6:84:
78:9b:6e:96:e3:39:0f:89:02:52:4d:42:86:cf:2a:02:5e:ec:
d0:aa:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:45:20 2026 by rpki-client