Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
File: I35O6WWAXHT-K615pepShu9ofZk.mft (raw, json)
Hash identifier: /aA5sYJBPMk0dSahSJdiqY7kqwu4x0KgiDTPI034Yd0=
Subject key identifier: 85:C0:18:7A:C1:EA:84:3D:E9:F8:4A:22:BC:4C:CD:B0:0C:99:C6:24
Authority key identifier: 23:7E:4E:E9:65:80:5C:74:FE:2B:AD:79:A5:EA:52:86:EF:68:7D:99
Certificate issuer: /CN=237e4ee965805c74fe2bad79a5ea5286ef687d99
Certificate serial: 01A0EC661A5D1967A5D09C4029251FC54739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
Manifest number: 1D
Signing time: Tue 29 Sep 2026 09:01:49 +0000
Manifest this update: Tue 29 Sep 2026 09:01:49 +0000
Manifest next update: Wed 30 Sep 2026 09:01:49 +0000
Files and hashes: 1: Dw86BQwD7CpxNVB1IfdiHj_0660.asa (hash: oEarT5CVUXeCjVcHP6Lq9WuNhCM+VyZb6nwKwT5caDM=)
2: I35O6WWAXHT-K615pepShu9ofZk.crl (hash: VD7L4iNd6fA93kGI8yTUuEjigjRfHcuSWEr559/7p2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:1a:5d:19:67:a5:d0:9c:40:29:25:1f:c5:47:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237e4ee965805c74fe2bad79a5ea5286ef687d99
Validity
Not Before: Sep 29 09:01:49 2026 GMT
Not After : Sep 30 09:01:49 2026 GMT
Subject: CN=85c0187ac1ea843de9f84a22bc4ccdb00c99c624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:56:eb:ec:67:3f:92:eb:7e:13:a2:e7:5c:
00:29:ef:a4:ee:90:1a:8a:9f:ff:9d:28:52:db:e5:
30:a0:22:02:f9:12:6c:d7:b4:86:d7:09:f1:88:de:
0c:9d:d0:4b:8d:0f:e9:c5:72:e1:6e:88:0f:48:4d:
07:be:34:0c:56:4b:fe:7e:fe:59:55:34:05:af:8f:
68:f9:8f:c8:ad:5c:6e:4f:c2:37:8c:52:79:04:28:
bb:e5:70:20:8c:9a:75:61:2c:c7:c0:86:5d:6e:70:
21:d0:cb:65:7b:84:09:0f:58:af:70:24:dc:02:2a:
54:ec:4b:72:3c:8e:91:92:e9:e8:e6:bd:f9:c8:0d:
3a:ce:ce:e7:d4:0e:b7:a9:92:cf:c8:42:ca:21:e4:
ff:d6:72:62:9b:e8:14:15:8d:0e:08:ff:3b:ea:73:
9f:e1:2b:d4:83:1b:61:ea:10:74:2b:6a:24:5f:d8:
57:2b:8d:b1:be:25:42:8c:c8:f6:f0:1b:7c:95:ec:
45:97:bc:a5:43:0b:79:04:5b:28:b6:b1:ca:5b:8d:
5a:32:80:fe:85:d1:b1:78:09:2b:b3:60:5f:36:f7:
35:fa:14:db:5d:c7:f6:44:ff:95:f3:05:a8:70:1b:
b8:64:0f:49:41:3e:05:93:d6:5b:7b:49:69:7c:72:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C0:18:7A:C1:EA:84:3D:E9:F8:4A:22:BC:4C:CD:B0:0C:99:C6:24
X509v3 Authority Key Identifier:
keyid:23:7E:4E:E9:65:80:5C:74:FE:2B:AD:79:A5:EA:52:86:EF:68:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3e:d6:36:37:c8:44:a4:3a:e0:06:46:60:8f:79:72:04:6e:
bf:53:f7:67:75:a5:e1:85:60:af:b3:8d:81:60:66:7c:6d:c0:
98:af:73:6d:b1:c2:13:0a:23:63:bb:e4:09:86:14:a6:53:c5:
0b:2a:96:10:c1:3f:be:e7:69:e1:dc:bb:8f:e6:30:60:51:d2:
7a:ac:12:11:11:00:51:28:a9:b8:ef:84:62:b6:ee:8b:0c:7f:
69:dd:1e:42:42:bc:22:20:9e:c0:dc:3a:d2:83:56:f6:0c:da:
05:dc:2c:b0:8a:ee:56:14:38:de:38:3a:7b:e5:0e:3f:18:b5:
41:1c:a8:91:90:60:3d:42:22:9c:22:41:d6:75:1b:1b:3b:9e:
6d:56:e3:46:0d:cd:25:bd:6f:fe:5d:62:54:db:98:b8:b4:fb:
ee:88:70:b0:82:a1:43:2d:eb:2c:fa:da:66:47:20:1b:39:6d:
ab:10:28:14:d4:3a:56:af:78:5d:6e:0e:b2:7f:a6:da:94:8c:
39:19:3e:d7:56:0c:21:26:df:a6:68:ff:d0:45:8d:b0:f0:95:
2b:08:3e:a1:62:1f:40:be:59:4c:5c:4b:2b:fe:aa:bb:0f:a0:
60:1a:51:5d:b4:f4:4d:11:ff:30:bd:e9:a6:0b:30:19:e4:b3:
a1:d5:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:52:15 2026 by rpki-client