Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: ThRhmO3EIfh1kj62WJQmIISFpiKqN5MGydhnREI8pHg=
Subject key identifier: D5:5E:ED:DF:50:01:51:6D:3A:02:DE:33:12:C8:04:70:40:C4:4E:AD
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 01A0F3B12BDB96F1C1B6C1F9D54552D365EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 1A11
Signing time: Wed 30 Sep 2026 19:01:09 +0000
Manifest this update: Wed 30 Sep 2026 19:01:09 +0000
Manifest next update: Thu 01 Oct 2026 19:01:09 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: /XGqLRFQnXTF9VjCxJKGZsc6Y0qPPPwXCXLhjxMQ/eI=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b1:2b:db:96:f1:c1:b6:c1:f9:d5:45:52:d3:65:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Sep 30 19:01:09 2026 GMT
Not After : Oct 1 19:01:09 2026 GMT
Subject: CN=d55eeddf5001516d3a02de3312c8047040c44ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:7e:97:80:40:f5:1b:80:3f:a7:d4:3e:8f:
7b:22:a5:85:07:8f:e2:40:40:7c:c1:ea:37:16:05:
3d:be:85:57:0e:01:90:8d:3d:38:92:4c:42:05:fc:
5b:c6:7b:00:68:54:f5:2d:58:7f:80:0a:cd:25:ba:
8a:c4:76:84:d0:28:aa:09:6b:af:ec:ba:e4:63:0a:
04:34:6f:5d:9d:a5:6a:c6:dd:2c:ad:17:8f:4d:db:
de:a8:b5:66:af:44:f8:19:26:0e:3d:f9:12:14:fd:
82:41:fe:13:81:d9:69:80:2a:a5:54:7b:18:d7:1d:
82:d7:2d:ac:1d:10:9f:34:c2:b0:2a:f1:57:5f:4c:
0f:75:6d:35:1f:ed:95:ce:63:ba:90:f7:38:dd:80:
dc:be:30:d6:59:45:df:17:54:22:0d:4a:73:fd:ea:
a9:71:46:a1:d8:ae:0d:a5:46:2e:90:1a:70:09:b7:
55:3d:49:3c:08:fd:f4:77:ea:7d:cc:e5:30:4e:08:
a8:84:b4:16:d8:07:e1:3c:61:fb:2a:d2:f2:e9:09:
4c:4a:37:74:d8:21:8f:bb:d4:c4:99:90:72:c9:db:
ce:90:52:7a:b8:14:23:ef:3f:84:ca:8f:ef:66:90:
d2:7c:58:b2:d9:66:f5:e2:89:dc:05:79:8d:11:a9:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:ED:DF:50:01:51:6D:3A:02:DE:33:12:C8:04:70:40:C4:4E:AD
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0e:64:89:12:f3:cf:48:39:ef:f9:c5:6a:67:2f:f5:ba:87:
c7:bf:23:62:e2:ec:82:c3:80:42:00:10:5c:11:ff:11:30:1c:
10:48:7a:93:a4:45:af:8d:cb:e5:70:49:06:5a:df:2a:e2:84:
65:e4:1a:83:9a:53:0d:1e:0d:21:9a:a7:b8:d0:64:49:41:3e:
52:ee:1f:01:00:ce:b8:9b:54:3b:1a:8e:16:ac:51:c5:5f:79:
70:d4:55:23:5f:34:67:dd:80:19:c3:ee:ad:a7:ed:ca:21:d6:
0b:e5:aa:73:10:b9:c4:41:72:47:23:35:a0:97:51:1a:fa:fb:
cf:b9:10:6e:22:2d:75:b8:f5:8a:a0:1e:e9:ee:4a:28:6f:b0:
56:cf:e2:54:ba:41:e4:2e:53:2c:ef:5d:6e:59:ea:89:f4:fb:
5d:ef:83:0c:51:3b:5a:43:0e:c9:6a:64:b1:cf:cd:05:a1:e3:
36:4c:55:33:df:4e:b0:f6:d0:b0:ea:6f:fc:4a:af:5c:1a:fe:
e7:1a:80:8d:b2:51:68:7a:ac:b7:b7:e9:43:94:0f:62:99:0e:
16:35:55:c4:48:18:c2:1e:ee:73:3f:d8:1e:e6:14:c9:49:1a:
03:8e:56:5c:21:bc:f4:94:db:5c:bf:b4:86:1e:f6:ed:7b:ff:
91:cb:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:43:39 2026 by rpki-client