Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: EDWy8GRJGJVA42gEyb0o6I4L/L/8N8XdQlCeKkFoADU=
Subject key identifier: 31:14:7A:51:9A:E3:F1:79:6A:74:86:C4:52:49:01:F6:62:67:25:0E
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 01A0D64BF3054E0E1E87FDD6E674526C2576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 08FB
Signing time: Fri 25 Sep 2026 02:01:36 +0000
Manifest this update: Fri 25 Sep 2026 02:01:36 +0000
Manifest next update: Sat 26 Sep 2026 02:01:36 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: 6uIUUwW19kon/ae2Lm0OQr5a3lDCn3KExHt+Olq5Ka0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:f3:05:4e:0e:1e:87:fd:d6:e6:74:52:6c:25:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Sep 25 02:01:36 2026 GMT
Not After : Sep 26 02:01:36 2026 GMT
Subject: CN=31147a519ae3f1796a7486c4524901f66267250e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:df:97:a8:86:8e:24:33:1f:59:fb:91:bc:
0f:bc:c1:74:2e:6e:73:b0:8a:8d:9f:8d:ab:4f:44:
47:2e:c1:be:36:c8:9b:5a:c0:e5:1a:f3:1c:28:30:
e8:04:74:1d:d2:8d:3c:cd:4e:f4:22:b8:6d:34:ed:
07:56:10:9e:6c:4c:2b:10:21:42:95:ef:9a:0d:42:
2a:e5:27:bb:5e:bf:b4:27:cd:fa:b2:d4:61:cb:2f:
f6:5c:88:79:a9:c1:a5:f2:7c:bd:f0:33:71:64:3b:
5e:c3:13:5a:69:a3:fa:92:e8:22:fe:c6:59:a9:8d:
5c:2f:39:9e:ac:ad:3f:d1:40:d7:03:63:1d:bf:67:
75:f4:6c:05:d7:a8:ac:e4:a4:c4:db:1f:25:a4:8d:
ed:d2:3d:66:04:f3:d6:67:fa:fb:f2:d8:20:c7:7d:
2d:56:7b:14:66:fb:34:75:28:4f:4e:c0:6b:91:0e:
61:51:62:56:94:a3:36:17:66:f9:24:6e:e1:c0:d6:
6c:9c:21:f5:f3:aa:5f:55:2e:98:cd:bd:c9:67:e8:
31:40:ee:0e:1f:ad:50:6c:2a:71:4d:c9:05:8b:ca:
01:2d:94:3a:39:cf:9d:11:59:53:c2:d9:a4:78:f1:
6b:4c:81:a0:b7:6d:3c:c5:b4:d3:27:5e:99:26:b0:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:7A:51:9A:E3:F1:79:6A:74:86:C4:52:49:01:F6:62:67:25:0E
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6e:b1:40:80:6f:c9:d0:79:fd:e4:df:70:91:41:82:b4:bc:
9c:40:bd:71:2a:30:05:81:15:23:60:54:58:aa:03:db:46:36:
7e:11:eb:4b:d0:3d:98:d9:08:82:a2:0d:59:9f:a5:d0:9f:c1:
fc:4c:d0:bd:67:e1:74:c8:1d:77:ca:4a:b4:cc:46:96:ee:d1:
17:50:8c:9d:84:a6:78:bc:3f:de:f8:29:a7:a0:be:58:cf:c1:
9e:46:f4:55:1a:46:52:a1:92:95:95:95:5d:aa:f5:f6:80:49:
4e:32:2f:76:ef:a3:c3:4a:8c:59:d4:93:48:fd:73:63:19:c8:
4b:24:fd:54:cb:00:f0:d7:4c:26:5a:c4:cc:31:94:57:57:6d:
fd:4e:4c:a5:14:32:f3:55:1d:c1:76:1a:f6:a8:94:53:0f:0f:
a2:0a:e3:3d:34:c9:3a:14:d4:77:17:50:58:0f:b1:3a:87:5e:
e5:29:08:a5:70:e0:6e:05:99:7c:d7:f2:9e:09:14:2a:d9:85:
ac:01:9a:a0:23:4d:48:2a:97:4c:3d:24:21:d3:6b:61:36:8a:
39:9c:cc:e3:9a:10:fa:26:52:f2:ce:7f:b4:bf:9f:91:46:6a:
10:22:2e:c5:b9:aa:df:98:29:4b:63:a1:20:f4:8f:e0:e3:77:
bb:fa:c2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:41:40 2026 by rpki-client