Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: Zx8ZmjzxFjxEyxGRDaoywSvUgjadkGRo9dRHmn6Co8k=
Subject key identifier: 2D:51:83:E0:37:96:82:9F:48:1C:71:8A:50:C6:A7:DC:7C:75:9F:A6
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 01A0E8C13C9877E2AA989DD2B1612EF64FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 17C0
Signing time: Mon 28 Sep 2026 16:02:53 +0000
Manifest this update: Mon 28 Sep 2026 16:02:53 +0000
Manifest next update: Tue 29 Sep 2026 16:02:53 +0000
Files and hashes: 1: EBjSa7A-On9uI8_gmDnR7SDL_J8.roa (hash: cYEOk8Kxrw9KuVJI4MOZDU2QZ9S+tI4rD6Xrsxto8lg=)
2: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: QlPQevM3Y2DE13wLwkuBjxvuDXD2U0HHGzxNF+dorIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:3c:98:77:e2:aa:98:9d:d2:b1:61:2e:f6:4f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Sep 28 16:02:53 2026 GMT
Not After : Sep 29 16:02:53 2026 GMT
Subject: CN=2d5183e03796829f481c718a50c6a7dc7c759fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:c6:1d:b2:d3:5e:f1:1a:d3:76:27:95:aa:
cf:f4:19:9a:cb:11:5d:8d:a3:58:1b:16:84:2d:5b:
e5:e3:4c:95:ef:44:d4:31:04:ff:0f:92:6a:9a:8d:
49:22:bc:61:61:31:4b:88:36:ff:3d:c3:31:35:bc:
58:07:33:aa:a6:10:81:3d:4e:fc:f1:59:de:a4:99:
9f:c8:89:49:8c:95:d1:94:b1:7f:99:30:3d:1d:eb:
bb:54:7c:e4:68:b8:ec:2a:98:3b:8b:7c:71:9f:f2:
99:4c:da:9e:c7:a4:f6:84:84:91:03:9e:59:09:e0:
3d:8e:fe:3e:71:d8:ee:d7:7d:bb:2f:91:6c:30:3d:
84:bc:30:13:4e:c8:94:b6:ed:e3:44:fd:5a:44:29:
cb:33:81:ed:47:f7:0c:13:a5:5f:cb:86:7c:f0:be:
b2:b8:01:5d:7f:7c:15:8b:55:4a:e0:f8:7f:1b:31:
7e:45:ed:d6:26:30:72:9e:ec:9a:fc:31:79:0b:5a:
d9:1b:0a:c9:5a:40:20:c6:34:c9:30:36:90:47:97:
c8:0b:c6:3d:56:41:4b:f9:d4:8c:e6:89:19:29:26:
e0:ed:6c:2f:11:bc:01:28:42:db:a0:fe:b9:7c:b2:
d9:d9:25:2d:52:d6:a8:31:ff:b0:46:4b:83:b8:af:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:83:E0:37:96:82:9F:48:1C:71:8A:50:C6:A7:DC:7C:75:9F:A6
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5e:dd:e2:8b:e6:1a:23:f1:49:9f:20:7a:90:5b:58:54:40:
a6:fc:c3:b0:ff:07:24:91:29:d3:29:f5:b2:40:3d:6f:eb:67:
fd:50:83:b5:cc:68:a3:48:98:ae:87:0c:f9:2d:1b:fc:95:eb:
aa:6d:83:de:82:99:28:9e:fe:55:be:7b:ae:74:02:d4:42:c0:
23:e2:b0:86:31:9b:f2:40:ae:31:d9:e7:5c:c6:9e:f0:31:d3:
c6:71:1b:86:26:ed:1c:3f:91:e4:d8:35:20:98:ca:cb:bf:fc:
1f:d3:a1:ed:dc:4a:e9:73:b8:dc:14:43:6f:6b:eb:9e:c9:6a:
1d:19:0a:a1:83:ff:65:84:ff:8d:05:d9:05:15:8e:33:6b:ed:
a5:e0:7e:7f:25:d2:58:cc:70:93:2a:93:b8:14:a6:6f:17:2d:
e1:4e:cf:ff:01:8d:44:94:f0:27:ea:10:eb:12:c7:22:ec:31:
2c:94:b0:a4:0f:5b:35:71:e8:24:8d:81:9a:11:a5:57:0c:17:
1a:ce:6a:34:49:61:a5:3b:60:59:9a:80:7d:b3:a6:bb:f4:51:
9d:59:f6:b6:f6:86:5b:dc:6d:32:bf:37:6e:da:82:4b:d5:83:
50:d7:a1:d2:33:ef:35:ae:dc:e7:cf:47:77:8d:61:24:06:d0:
bb:7b:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:27:09 2026 by rpki-client