Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: B40lPGRLjdJRdCryWzBcWMKtbq2xeClxcV6I+1bmVbA=
Subject key identifier: C1:7F:8D:FF:47:1A:90:A0:D5:DC:81:4B:CA:EE:6B:70:94:E9:C6:2A
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 01A107DD1E9B813E006459B22C637E5BCB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 0AC5
Signing time: Sun 04 Oct 2026 17:01:34 +0000
Manifest this update: Sun 04 Oct 2026 17:01:34 +0000
Manifest next update: Mon 05 Oct 2026 17:01:34 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: LV5amOo2397n0UauFs7UZAHWptMjO/ER2fWbKYVDSX0=)
2: dshUZvB4McXbpCwuJto_ABAOvNQ.roa (hash: V5ln1lpZELvPyBOpg3oQ56WAm93C6lBYruWQT9Rpyxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dd:1e:9b:81:3e:00:64:59:b2:2c:63:7e:5b:cb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Oct 4 17:01:34 2026 GMT
Not After : Oct 5 17:01:34 2026 GMT
Subject: CN=c17f8dff471a90a0d5dc814bcaee6b7094e9c62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:2c:33:3b:2c:09:78:5f:2e:9c:b6:1a:db:
3e:51:0f:be:00:58:2e:16:8b:fe:f9:6f:59:2e:5b:
ee:05:5d:57:97:76:0c:64:63:04:a2:52:83:47:cc:
d0:3d:df:19:aa:15:21:77:ea:ce:a5:33:fd:ba:51:
33:f1:97:af:37:cd:29:32:f6:25:c1:86:6b:d3:77:
7d:58:5e:e9:29:b6:08:a3:a8:a9:58:0f:fb:00:03:
43:1b:6e:2a:7c:15:60:ca:4a:1e:da:63:98:8f:5f:
dd:20:1a:64:2a:2b:21:8b:4d:9a:91:5e:63:5c:62:
d5:11:86:8c:18:db:ef:6c:13:38:e0:22:15:4f:51:
68:7f:17:93:76:05:cd:8c:f0:85:bf:1d:0e:27:7b:
09:97:a0:a6:8a:c2:64:71:58:78:74:79:24:88:7d:
05:51:c5:56:04:2c:e1:d7:2f:bc:ea:ec:34:2b:41:
b5:4b:0c:40:36:89:fd:19:ed:9e:5a:28:81:b2:56:
c4:dc:56:8c:ce:52:b9:7d:56:4c:ed:1d:50:8d:b7:
1e:93:46:e7:e6:1c:f0:ab:b0:95:5e:a2:df:e5:04:
a7:b7:6b:2c:49:ed:82:27:01:ef:d4:8f:f8:60:82:
fb:01:49:dc:62:21:29:c6:4a:c6:61:df:76:05:bb:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:8D:FF:47:1A:90:A0:D5:DC:81:4B:CA:EE:6B:70:94:E9:C6:2A
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e8:54:89:cf:97:63:dc:61:58:51:60:b7:3f:6d:91:8f:bb:
81:85:b0:8b:6d:cf:54:d7:32:fc:77:09:b2:01:2a:1d:ac:e8:
0e:d4:6d:4b:ae:01:8c:d4:b2:f2:e8:80:9f:e0:06:ef:88:0b:
f2:79:ad:54:a0:89:18:53:50:e6:d6:ec:35:e4:6f:e6:bc:fb:
78:1c:99:43:60:e6:f2:44:31:b0:ea:34:1f:a5:c7:5a:7b:d8:
e0:25:1a:f1:ff:56:af:31:98:88:03:1d:55:1f:2c:c6:c6:ec:
ae:ba:f0:d8:3f:43:c6:2b:8f:8f:fb:26:5c:11:2c:02:c8:cb:
89:b7:b3:56:28:45:de:c9:1f:00:0d:ca:50:1c:c3:f5:65:fd:
a5:0a:32:88:df:48:57:59:f1:2c:4a:8e:94:cb:15:06:bc:04:
ff:d1:81:ee:d9:2d:c1:3d:9b:a2:f8:f3:a1:6f:ad:38:fc:96:
cd:04:82:5b:6a:3e:08:27:f7:07:dc:58:7f:60:05:25:13:75:
11:f0:52:95:65:1e:06:9b:42:29:62:17:3e:15:34:c5:b6:9a:
d4:db:d4:e9:a6:45:9c:51:ea:f9:c0:48:ac:d7:84:36:c0:6f:
57:6d:19:8d:6f:fd:f5:b3:49:da:ff:a7:a7:b8:61:ad:c8:52:
70:7a:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:29:06 2026 by rpki-client