Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: NfwYxBK8w9lqL7U9ZTMZwGrHIUc/nyx9BAORzFnfjbA=
Subject key identifier: 1F:37:C6:78:C7:93:C0:BC:0B:99:12:A9:1A:E9:B2:50:B7:42:1E:1D
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 01A0F1F9CBC7F388742703053F46A3947067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 17D1
Signing time: Wed 30 Sep 2026 11:01:14 +0000
Manifest this update: Wed 30 Sep 2026 11:01:14 +0000
Manifest next update: Thu 01 Oct 2026 11:01:14 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: ayZIfDAqnqe/SNzDxhO2/vMpjfQjxVvEXaXzdMgB7CA=)
2: K7k2wTc_sjyYfFx23FMzKfg8QD0.roa (hash: FDPYoITUuwad+pKyr3wEscJ86wRTd6OsrGdHbeG17s0=)
3: RstGJIXrGP_zn4niceGRZ3XM7pY.roa (hash: iIYRPvDwo0qkOrNzYmf7D6l8FHyxcrfNiQYhWcOuB58=)
4: WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa (hash: uHLuQi8KJbVs5VqNtZkcp+fIJy6HLJbaJ1btjtIY4cM=)
5: XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa (hash: xDb3dtwGlNAHcmXCM8UYUqhwZfzy/vemU3ULkTqFlkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:f9:cb:c7:f3:88:74:27:03:05:3f:46:a3:94:70:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Sep 30 11:01:14 2026 GMT
Not After : Oct 1 11:01:14 2026 GMT
Subject: CN=1f37c678c793c0bc0b9912a91ae9b250b7421e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:7a:8b:65:63:e3:64:29:74:88:84:4c:b2:
5e:e8:1a:4a:dd:b9:d9:0b:d7:39:fe:1c:c2:d9:71:
01:b5:6c:47:7b:50:19:4a:2d:00:84:02:51:2b:c4:
cd:9c:2b:bd:a5:ba:45:fd:4a:85:6e:73:60:55:01:
52:01:c2:5c:72:ec:ba:c9:1d:1f:89:6a:2e:8b:91:
fe:df:b5:0c:fd:56:62:3d:78:98:b9:f1:7b:de:a3:
1e:08:88:82:31:d6:fa:da:7c:8e:64:2d:db:2e:0e:
99:cc:9c:2c:58:b8:21:ee:5d:ab:9a:82:b0:31:c4:
8f:a8:31:15:3d:fe:a4:23:19:92:05:2e:d5:cb:b9:
de:0b:88:18:f9:1d:0e:ca:be:e1:b3:ef:5f:84:21:
35:74:87:2b:e5:35:49:4b:ed:f7:d4:65:2c:26:c0:
56:a9:dc:1d:1e:70:ac:f5:c7:7e:60:41:d9:c3:e8:
b0:51:2e:4d:47:6c:bb:ad:39:e5:12:d7:78:8d:49:
9f:11:81:5f:ef:7f:bb:b4:8d:6a:48:a7:c4:ba:06:
a8:31:2e:78:64:ca:3c:4e:d8:91:d8:02:27:90:8a:
1f:bb:aa:5c:9c:6e:51:fb:53:ee:52:73:93:ad:cd:
ad:a7:05:82:e3:e0:4c:08:24:35:0d:71:23:51:8b:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:C6:78:C7:93:C0:BC:0B:99:12:A9:1A:E9:B2:50:B7:42:1E:1D
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:ee:40:9d:92:9e:63:86:3a:1d:94:d2:ae:df:f6:d2:fa:
5e:42:b6:1b:f2:a0:9b:15:72:3d:f4:1a:32:f0:6e:76:8f:6e:
f1:45:98:5e:7f:8a:ce:08:82:41:62:f8:55:7b:98:06:8c:19:
8e:54:23:91:00:b2:35:46:b8:cd:9f:a1:db:75:f9:93:32:18:
81:64:40:d3:73:b2:0e:50:2e:68:72:86:9b:80:46:e2:de:42:
7f:5d:cd:a0:81:08:4c:e6:27:e9:b1:84:75:b8:55:00:f2:a5:
8e:7a:b0:37:d1:72:a4:43:8e:b6:e6:ef:f5:b1:62:4e:74:d9:
a4:30:45:d6:67:b1:10:c6:90:8e:b2:c3:86:b8:3e:07:6c:14:
1f:59:69:14:51:a2:64:f6:01:37:09:90:75:61:b5:03:c8:74:
9d:24:42:ac:82:1e:11:b1:40:07:5d:8b:5e:81:21:e4:a2:c8:
46:37:3b:9c:b6:4a:26:d1:ee:da:b2:7c:d5:fe:dd:ad:a1:1e:
af:bb:e9:8c:ba:be:8e:a0:3b:be:1d:25:9c:ff:06:40:d4:be:
06:02:eb:73:bc:89:c6:5e:1c:71:b4:bf:2e:da:bc:c3:4b:d9:
92:fe:de:1a:c2:74:61:32:d7:66:96:20:01:40:b6:aa:d8:0c:
de:67:79:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:08:28 2026 by rpki-client