Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: dUR09t3hjGLL+HpNj98ftQjZ6sveWaiaslYYwbs/3rc=
Subject key identifier: 18:8C:65:C2:EB:D3:0B:C6:B4:DC:A5:B6:CE:70:A9:3A:B7:62:C4:2E
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 01A0C9D8D5CFC9F0D0E8EEB268BF0FD22F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 0B39
Signing time: Tue 22 Sep 2026 16:00:25 +0000
Manifest this update: Tue 22 Sep 2026 16:00:25 +0000
Manifest next update: Wed 23 Sep 2026 16:00:25 +0000
Files and hashes: 1: 7JgH3BufGryuzD8TkhKGrSgU0Jw.roa (hash: dvhqnEVhtzVA7d1uxkYo+L/AWZ2qs2JaTtSDOyZBFEw=)
2: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: 6zwFUbfR7uskJ1f6NsIDajqU3NVgsPk6PjVXo67Ydqw=)
3: WZ2jJ_eUYCIdOJhT2cQcjz-Dw9w.roa (hash: DZZSiAeLEaIbjxQA8htWapoGDjJjgT0boPO+D7q1Tuc=)
4: jcxnuuzpk8YEGgKb-Yvf2uSR1-E.asa (hash: V2pEeg2ELyqXGtM9iC5bzhoziEpzlbl43BPulkWtu0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:d5:cf:c9:f0:d0:e8:ee:b2:68:bf:0f:d2:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: Sep 22 16:00:25 2026 GMT
Not After : Sep 23 16:00:25 2026 GMT
Subject: CN=188c65c2ebd30bc6b4dca5b6ce70a93ab762c42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:92:dc:60:15:5b:f4:8b:01:dc:9d:47:1d:
06:0b:17:ac:05:99:b9:5c:e3:1a:80:3f:18:b1:86:
16:7b:66:f1:ca:74:ae:45:55:e0:62:01:57:2e:24:
a4:d8:05:6e:2d:f1:1d:2f:f5:2d:64:38:86:60:ba:
a4:9e:bc:b3:b7:27:b0:ec:b5:09:3d:61:a4:99:14:
27:c0:9a:ad:31:0c:e7:09:b4:04:81:3f:0b:c8:72:
73:d1:31:3f:20:c3:83:ca:d7:0a:0c:44:4a:94:bf:
a1:2a:42:f2:2a:f4:97:6e:72:67:07:e9:e8:06:3a:
7c:4e:06:2c:f5:5c:54:3c:29:a7:4a:4a:1a:61:e9:
4a:a8:7c:f4:ad:20:86:f2:41:9f:69:0b:41:eb:b0:
7f:5a:0b:32:52:77:dc:03:36:5a:79:ac:5a:d4:a7:
5c:dc:9d:e7:b2:d6:ae:eb:70:c8:17:af:9a:f6:00:
9b:52:1f:3d:40:5f:cf:b4:16:a5:dd:f2:84:8c:42:
c1:94:a2:f2:df:b8:e1:10:98:ba:45:f8:84:05:80:
46:e1:8c:75:dd:ec:ee:1c:f5:71:f6:ad:a8:94:a8:
07:b6:ba:ca:ff:41:f0:b6:93:e2:d8:e6:a1:5a:05:
e1:b5:b0:9d:c2:b4:43:0e:ff:0d:a1:41:9e:fc:54:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:65:C2:EB:D3:0B:C6:B4:DC:A5:B6:CE:70:A9:3A:B7:62:C4:2E
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:85:d7:85:6c:04:82:c0:26:e6:49:94:c4:80:3a:70:cb:75:
b9:c4:86:24:6b:68:17:94:93:c9:29:f7:61:27:ca:de:24:ad:
a6:61:04:28:4e:cb:77:1a:35:bb:0f:34:16:f3:e5:b1:28:3e:
da:17:64:42:52:a4:6d:76:b3:2d:92:0e:0e:af:7b:a1:cd:bf:
f3:85:1a:69:47:3f:be:85:bb:25:ab:b8:1a:dd:c2:2f:76:1c:
2d:f7:f2:5f:76:e6:39:17:a1:3d:43:fa:cc:38:65:ba:c0:cb:
35:af:80:63:2e:c8:0d:f3:b6:a9:3e:a5:cb:44:e7:9b:e0:5c:
34:02:ed:2a:a6:1b:ad:40:60:10:5b:2f:90:e0:c8:13:5a:16:
33:01:4e:bd:e6:56:ce:63:9c:53:6e:33:2d:d5:d2:bb:1b:59:
31:ed:b7:01:89:6d:ff:53:f6:ed:ea:12:31:86:f9:b6:0c:24:
41:6a:62:33:94:1a:bd:b5:7f:c2:37:14:8c:a8:28:81:14:2c:
75:f8:ba:30:d2:12:f1:73:e7:a8:79:66:4c:ec:e9:f1:b6:9b:
de:85:57:1d:74:cf:ff:91:3e:0b:75:c0:00:db:ea:68:df:63:
93:b7:77:c2:86:45:0a:16:bc:d6:d4:14:2e:62:73:d9:a7:94:
cf:5d:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:42:57 2026 by rpki-client