Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: hgby5TQanlO7DbwF1gZx/RWMweUDKgcVCrBT5Tm2XAY=
Subject key identifier: 67:D5:2B:99:2D:03:35:DE:3B:9F:EE:53:C7:CC:3B:2D:59:32:99:0B
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 01A0DC85254AFD9132E9A4E60302E821FC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 1A6E
Signing time: Sat 26 Sep 2026 07:01:48 +0000
Manifest this update: Sat 26 Sep 2026 07:01:48 +0000
Manifest next update: Sun 27 Sep 2026 07:01:48 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: 0TYSkZHuxiisJrJoecQrAWujkvHauOS6ERKG8NUYGkk=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
3: oEH5CL4Krryfh-iShKBtkq07VfQ.asa (hash: GkycII0/qjAz0UiuBL6s5szZ1IchdfI3Luf3s69wkYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:25:4a:fd:91:32:e9:a4:e6:03:02:e8:21:fc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Sep 26 07:01:48 2026 GMT
Not After : Sep 27 07:01:48 2026 GMT
Subject: CN=67d52b992d0335de3b9fee53c7cc3b2d5932990b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:a2:87:b5:6f:c7:31:c2:84:0b:9d:fa:89:
ba:fd:43:c9:5f:ed:9b:e0:46:ac:12:34:39:fe:87:
94:c5:cc:b0:49:f7:4a:2a:32:1d:22:c9:46:5e:d8:
e5:65:f3:77:fe:b5:f6:e3:52:12:76:d7:16:4d:3f:
47:73:4b:2f:cd:98:8e:a4:23:c2:c3:3a:07:f3:09:
0b:cc:e2:ea:ea:6b:d8:17:dc:b7:61:0b:41:39:2c:
d7:fd:6a:b2:de:5f:da:50:14:ef:3c:ea:f8:79:00:
e5:4b:28:9a:d5:6a:57:4f:39:b8:8e:6e:d1:99:29:
a6:df:07:a3:10:90:46:d0:7c:3c:c0:36:c1:0f:b9:
a4:27:8a:74:e7:0b:7e:e6:b3:7e:40:f1:9a:c9:31:
3d:e7:a8:8d:74:70:de:5f:c3:28:c5:6b:f3:62:29:
b9:29:6b:ae:a8:26:ab:0c:86:43:fe:a7:df:dc:0a:
86:05:7d:5b:93:1a:26:2e:a3:f7:45:8c:ff:4e:2d:
9e:d0:18:bf:e4:5f:02:d8:ea:7e:ca:f5:8d:7f:a1:
61:42:ec:3b:32:b2:27:80:8c:b8:cf:bc:7d:1a:70:
2b:0c:f2:f1:08:57:09:d8:43:f1:06:3c:de:2d:0f:
38:dd:01:cf:e5:b4:2a:92:36:25:e4:5c:48:49:21:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:2B:99:2D:03:35:DE:3B:9F:EE:53:C7:CC:3B:2D:59:32:99:0B
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bb:ef:f4:e3:d3:ec:be:58:99:0d:92:73:33:2e:f6:72:2f:
d6:49:1a:66:46:b0:bf:82:8e:8e:a2:34:75:6d:29:d4:d9:38:
82:8d:fc:36:f3:af:8f:63:d1:32:30:4b:2f:5f:e3:bf:24:2a:
ba:18:e4:a3:1d:b8:7c:75:95:f5:c0:f1:a5:7b:84:7d:9a:a0:
0f:2f:1d:e1:50:ba:f9:86:34:39:a8:5c:64:54:b2:e4:a6:5c:
16:cf:a1:5e:09:37:51:88:df:5f:d3:b9:ac:b8:fd:54:bf:b2:
c9:6a:c3:d1:69:76:3a:56:ff:7a:8f:0d:46:01:0c:6a:77:44:
26:44:5b:8b:a8:a1:23:03:e7:ce:53:aa:d2:34:26:c0:18:80:
8d:6d:63:18:8d:01:85:0e:db:07:0e:9d:c1:7e:b7:05:61:3e:
03:dd:e2:f1:50:a1:c1:bd:a3:e6:d3:7a:f0:28:53:02:9c:cf:
80:a5:07:ff:96:eb:66:88:33:a6:74:87:0f:fe:ec:26:26:99:
79:dd:34:e1:4c:8b:f4:d3:78:96:9e:a1:bd:a1:8c:ec:44:3b:
ac:2c:61:3e:88:d4:27:6f:d7:c4:5d:3c:26:bb:40:fc:be:d4:
f4:99:32:9f:8c:6d:b6:70:1c:7a:2f:c9:62:c2:02:6f:07:54:
c4:6a:68:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:27:27 2026 by rpki-client