Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier: 0uNsSQYdWq4scTegMZP1HIuoHnWqdBoaC7RYoeyHscI=
Subject key identifier: 11:15:9C:77:F0:F7:5C:65:64:BC:50:5B:9C:69:2E:9C:D3:29:71:E6
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 01A148733B1C6155423EABD314941B2FD95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 06:01:13 +0000
Manifest this update: Sat 17 Oct 2026 06:01:13 +0000
Manifest next update: Sun 18 Oct 2026 06:01:13 +0000
Files and hashes: 1: 8TcJH-qO38Nnc49nDFhjl3i6q20.roa (hash: HYqFnkRnK7UVCZ7277kZ3SagdWM8Y+qSNG/b1PHhvmw=)
2: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: zR1Mk9i9MstN3/U/Aj/iC2TwnITsXGdGyTMaFwPD094=)
3: XcluKI5GK94xvt-2VsfsH9YAxas.roa (hash: aMUQPT04n27GjqpL1CyIzBfeTJro8TREHvy5Fo/qxZs=)
4: ppVBATzjCDPLKHQd3o4jFf9lhxY.roa (hash: 4QaAZx/54RVk/xsTNzwOX4eDHF+9k00rM5X1Yd0pNtY=)
5: xkK7Kbvhg6ccWQLBKOWEjOj8dIs.roa (hash: hSxWOh+4pOoJgqKHeBLOsvvNqhI/bRq5ZNPWvaG7HYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:73:3b:1c:61:55:42:3e:ab:d3:14:94:1b:2f:d9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: Oct 17 06:01:13 2026 GMT
Not After : Oct 18 06:01:13 2026 GMT
Subject: CN=11159c77f0f75c6564bc505b9c692e9cd32971e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:61:0f:67:46:53:a4:d4:43:7f:b3:0f:29:
0d:63:2f:8b:c4:45:ef:b7:02:78:d0:25:62:a9:5d:
29:d6:35:39:32:dc:8d:e2:b1:8e:b5:d0:19:3d:e7:
9b:16:ca:22:f2:1a:b5:22:00:24:0f:c7:8b:ea:4e:
22:4f:33:cd:6d:c5:7d:be:f0:f3:19:f8:6d:73:7f:
a3:3b:a5:66:fe:3d:f5:c9:8e:53:8f:db:c3:9e:84:
d6:0c:e3:7a:a2:c2:7d:5d:1f:b9:5a:3f:4b:ee:28:
0c:c0:84:02:a6:73:7d:58:7b:ba:f8:af:ce:3f:be:
15:b9:f2:6f:76:72:c5:16:fe:99:9b:5d:52:96:bd:
5d:a2:a7:81:91:49:c0:b5:55:6c:e7:c0:ec:90:f8:
9c:b9:9a:8f:33:fe:2d:95:f8:2a:84:c2:02:03:53:
47:00:3a:4b:6a:57:91:f2:99:42:9d:90:34:5b:11:
26:ea:fb:2c:52:11:08:4f:81:6d:5e:e1:cb:ad:a3:
dc:50:31:f3:f0:43:a4:c5:76:f9:bb:a8:7a:e5:14:
78:eb:27:5a:27:43:e5:d5:ab:92:c4:24:b9:8b:06:
15:6c:16:b2:85:69:df:c9:be:8c:fe:9b:ab:9d:47:
7f:6c:9e:66:27:46:5a:11:53:a5:18:af:8a:7a:81:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:9C:77:F0:F7:5C:65:64:BC:50:5B:9C:69:2E:9C:D3:29:71:E6
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:48:61:7c:48:8e:48:2f:21:b8:90:b2:a3:be:c3:0f:7c:94:
a6:de:08:b3:2d:0c:86:50:87:30:e5:7c:8c:96:e6:f8:7d:ea:
66:a4:0e:f0:a2:47:3c:b1:df:d5:66:a1:85:d6:b8:bf:3d:f0:
da:da:d9:68:f0:c4:6c:cb:bf:45:88:20:8d:b8:4a:1a:ec:86:
fe:b0:0b:e3:36:41:1d:22:cc:65:25:b9:19:89:a6:70:0c:fd:
34:81:10:77:53:ac:67:87:85:5a:f8:ee:68:7e:b9:1b:1e:a2:
b2:6b:6f:28:67:2f:ee:df:ce:a4:93:c5:6f:cf:35:5c:1f:82:
e0:a6:4b:40:60:31:21:4a:52:e8:be:b2:74:f9:df:27:dd:de:
92:56:bc:7c:b2:ac:19:17:af:ce:9b:81:e0:60:59:07:c9:37:
23:dd:18:31:d9:75:6b:33:bf:a9:07:d4:36:f9:fd:38:37:47:
06:17:1a:92:c3:fa:5b:83:85:69:31:ce:8c:14:96:fe:fe:51:
41:61:7b:0f:73:18:d5:43:24:e3:5f:9c:8e:f1:58:8f:de:6c:
51:c4:1e:2d:7b:09:4f:a0:cf:9e:cf:68:36:35:87:11:2a:fe:
bc:75:5b:4e:41:d6:9e:bb:1e:3d:3f:11:9e:28:ed:61:ab:b3:
59:58:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:22:43 2026 by rpki-client