Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: 6pDcGXeRkQeMmQoUmQW+/pYRVgcMgynfrd+Kgav0XZ4=
Subject key identifier: 28:A8:68:75:87:52:44:83:7C:FE:62:52:9A:51:22:54:F7:03:01:04
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 01A0D3EF61719122E7D262DDF9E54B6C5966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 05B9
Signing time: Thu 24 Sep 2026 15:01:15 +0000
Manifest this update: Thu 24 Sep 2026 15:01:15 +0000
Manifest next update: Fri 25 Sep 2026 15:01:15 +0000
Files and hashes: 1: 69-gm5sAHUb2zlkusSsJwnhPOtw.asa (hash: w8dP42z3PzlgsL7213s07oZP842qzAir4wVoWzTTHUs=)
2: 9CS7xyErSCJY_wQFDW0wV1rIDq0.roa (hash: e2yWbh2yduLvhGO9ZZhdKHXEB8OOHqP7OQbj14TpHIU=)
3: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: lz324TLQSMhbMYbXIGoX0OvKVNwDJvmWIUV2WBkWn/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:61:71:91:22:e7:d2:62:dd:f9:e5:4b:6c:59:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Sep 24 15:01:15 2026 GMT
Not After : Sep 25 15:01:15 2026 GMT
Subject: CN=28a86875875244837cfe62529a512254f7030104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:1a:90:b1:9c:2a:31:87:91:0a:a7:14:9c:
11:a0:14:5e:52:9a:f8:86:04:9a:77:18:86:57:76:
b4:56:67:5b:e8:a3:42:0d:1d:32:bd:eb:0c:ac:02:
e8:da:16:57:d4:64:8e:9b:94:68:1a:8e:32:c8:66:
ee:17:0e:b5:8e:0a:5d:62:57:f8:f5:9a:71:1b:13:
41:3d:15:97:cc:4a:80:42:2e:6f:4f:b0:ae:9d:7e:
a2:8d:bb:ce:9e:a1:f2:56:08:53:2b:93:ff:76:5c:
64:d8:fa:8a:90:64:b6:37:45:b6:89:f5:00:19:2b:
2c:7d:3c:73:ae:26:ce:ca:2d:b3:72:ee:76:c9:74:
8c:60:1e:b4:a5:dd:78:e9:a6:6e:ea:b0:51:ce:48:
06:40:ed:f1:10:ce:21:fd:10:5d:ad:33:fb:7b:e7:
b1:7e:73:a0:d9:7e:31:18:21:d0:64:62:4c:10:6d:
c7:c8:09:fa:ef:e0:eb:a0:23:33:bc:93:ae:8c:84:
20:de:c9:eb:1a:17:f9:16:0c:d8:cf:66:46:5d:3f:
4c:8c:5f:bf:bc:d0:ed:09:50:d2:96:5b:e1:36:d3:
f5:b0:9f:ad:a7:81:f6:96:2d:20:db:e6:55:00:a5:
cd:4e:e9:31:32:4d:86:ae:9c:67:e1:53:e0:99:01:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:68:75:87:52:44:83:7C:FE:62:52:9A:51:22:54:F7:03:01:04
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:80:26:97:ba:bc:95:9e:8e:59:ba:24:25:23:45:d7:59:f1:
94:bf:b3:20:3c:f8:63:47:e6:19:ca:5f:62:4d:e2:58:5d:d7:
f6:3e:30:bb:07:cc:57:a4:29:d0:06:b5:14:3d:f3:39:5b:5d:
e1:12:03:83:cd:9f:49:46:2c:b5:63:46:0c:de:3d:90:7b:59:
2b:f0:03:58:3e:35:99:f3:27:ef:d8:ab:c1:f5:97:23:22:39:
08:87:41:fb:02:6a:17:69:49:5c:d5:af:6c:f9:ff:05:e0:2e:
d1:f4:d4:40:f1:4b:50:6f:b7:26:2d:86:62:9b:15:3c:ea:b1:
5f:fc:42:54:f9:fc:06:d4:a4:50:4e:b5:c3:29:c1:0b:c9:e8:
1d:5e:86:47:1c:5e:0d:6e:a6:46:57:c4:40:ad:aa:35:1b:1d:
d3:52:80:28:d0:ff:dc:5d:ce:9a:b0:7b:ec:b3:23:71:ff:1a:
0d:9f:9e:90:7d:af:f1:b3:22:35:d6:43:88:91:64:e7:19:2c:
da:82:c3:9a:1f:f4:ac:5e:03:01:43:50:6b:7e:11:7f:76:0e:
f5:6d:a4:5a:42:6e:ac:12:2f:e5:32:ef:b6:e0:6b:9d:80:73:
6d:50:89:85:43:36:41:a2:16:f7:47:6b:26:3c:97:fe:be:d2:
8f:77:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:36:39 2026 by rpki-client