Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: qD8RuhNURlCFZCOVoHBpd8ae/LkU3jpbQk9gEGBRYP0=
Subject key identifier: 01:82:D7:33:F2:8C:AE:A0:B4:D6:9C:EA:EF:D9:67:1F:D2:F7:F6:8A
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01A0D9F13AE1A700651A45E8EC673A2CF259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0E37
Signing time: Fri 25 Sep 2026 19:01:00 +0000
Manifest this update: Fri 25 Sep 2026 19:01:00 +0000
Manifest next update: Sat 26 Sep 2026 19:01:00 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: Z/dsPJxyLHe6pphqTtCiwC7pHctsgvafFKGa0defdWo=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:3a:e1:a7:00:65:1a:45:e8:ec:67:3a:2c:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Sep 25 19:01:00 2026 GMT
Not After : Sep 26 19:01:00 2026 GMT
Subject: CN=0182d733f28caea0b4d69ceaefd9671fd2f7f68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:eb:01:bc:75:8b:4e:84:5b:87:86:0d:77:
7a:24:a6:c3:90:84:fb:13:f6:b2:c8:86:11:eb:ea:
6a:99:e5:99:df:04:d0:8c:84:4b:c8:c6:b0:ee:78:
7b:b6:cf:07:7f:20:1f:0d:67:11:dc:0a:92:c5:7c:
dc:40:1b:23:bf:d4:b8:03:54:21:2f:4a:f7:40:73:
b3:20:31:c9:da:28:a4:69:d6:a8:c0:b0:bd:4c:b2:
b4:aa:a1:88:0f:2f:d7:c6:94:0f:1c:c3:14:13:33:
72:59:70:cc:22:ec:72:5b:6b:35:f4:f0:32:12:fe:
0e:57:1b:fe:cb:a0:e8:a3:43:8c:57:49:14:3e:8e:
6b:4e:dd:63:29:e3:b3:03:45:d0:53:ac:34:77:5a:
57:15:2a:b7:af:36:57:9c:3d:91:d9:ed:06:ee:4c:
25:c7:53:fb:e6:2b:50:b7:f3:57:2e:ca:63:99:af:
df:5c:f5:9a:8c:c0:17:3d:2a:7e:6d:d0:7e:79:52:
fb:cb:4f:53:f7:14:8c:dd:f6:a9:3a:fa:cf:f6:ba:
8c:4e:1b:a2:92:4a:de:5e:d3:7f:1b:aa:82:60:59:
a5:92:c1:39:f8:25:f2:5e:89:5a:f7:bc:9e:ab:cf:
ae:3e:5b:cf:61:1f:f4:c8:55:45:69:5f:10:d5:ab:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:D7:33:F2:8C:AE:A0:B4:D6:9C:EA:EF:D9:67:1F:D2:F7:F6:8A
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7c:a1:b4:1b:09:32:c0:be:21:ba:50:fe:f1:76:25:90:1a:
4e:66:58:21:4b:50:ff:f0:20:2f:e7:9f:d2:9f:1b:44:93:e3:
82:77:a0:4f:7b:5f:f2:de:96:58:21:bf:26:33:72:22:3f:94:
3c:dd:97:51:25:f1:e2:8d:fc:f7:a1:68:d5:9c:bc:2e:4f:d5:
38:36:b7:cc:ff:b3:75:f1:39:6e:20:e0:a6:2c:7d:c1:d4:01:
a0:8d:97:f6:9f:e9:d0:92:f4:7d:b3:f6:44:34:a1:c0:16:1f:
e5:ec:6c:36:74:dc:4a:0d:b5:8d:62:45:1e:f4:cd:d5:f4:02:
7b:da:1c:b3:e8:3b:2a:43:9d:d8:97:b2:2b:d9:7d:07:75:e7:
72:9c:7f:4d:fe:e5:98:6a:d4:da:f1:0e:33:78:3b:37:d0:df:
bd:93:70:e2:2e:27:fa:f5:9f:59:54:f2:79:07:20:49:62:7e:
19:66:d5:a4:fc:f0:8f:b5:f1:a6:df:ca:ff:f5:fb:77:d7:78:
bc:92:b5:f7:19:e4:24:4b:3e:69:cf:f1:14:51:83:29:95:dd:
1c:1f:0a:8f:27:7a:6a:df:36:ce:bd:41:2a:0f:6f:fe:75:e0:
20:1e:8a:40:09:77:0c:33:c5:bc:27:79:31:a0:0e:28:5c:71:
7f:e2:78:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8TrhpwBlGkXo7Gc6LPJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODkzNDFlMTBlNmIwMjFmYTg0N2Y1NTVlNTYwM2RlZjg1
ZDJjMmIwHhcNMjYwOTI1MTkwMTAwWhcNMjYwOTI2MTkwMTAwWjAzMTEwLwYDVQQD
EygwMTgyZDczM2YyOGNhZWEwYjRkNjljZWFlZmQ5NjcxZmQyZjdmNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWnrAbx1i06EW4eGDXd6JKbDkIT7
E/ayyIYR6+pqmeWZ3wTQjIRLyMaw7nh7ts8HfyAfDWcR3AqSxXzcQBsjv9S4A1Qh
L0r3QHOzIDHJ2iikadaowLC9TLK0qqGIDy/XxpQPHMMUEzNyWXDMIuxyW2s19PAy
Ev4OVxv+y6Doo0OMV0kUPo5rTt1jKeOzA0XQU6w0d1pXFSq3rzZXnD2R2e0G7kwl
x1P75itQt/NXLspjma/fXPWajMAXPSp+bdB+eVL7y09T9xSM3fapOvrP9rqMThui
kkreXtN/G6qCYFmlksE5+CXyXola97yeq8+uPlvPYR/0yFVFaV8Q1asJmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGC1zPyjK6gtNac6u/ZZx/S9/aKMB8GA1UdIwQY
MBaAFCOJNB4Q5rAh+oR/VV5WA974XSwrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUt
OGMwMDNjNGE1NDU2LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUtOGMwMDNjNGE1NDU2
LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1HyhtBsJ
MsC+IbpQ/vF2JZAaTmZYIUtQ//AgL+ef0p8bRJPjgnegT3tf8t6WWCG/JjNyIj+U
PN2XUSXx4o3896Fo1Zy8Lk/VODa3zP+zdfE5biDgpix9wdQBoI2X9p/p0JL0fbP2
RDShwBYf5exsNnTcSg21jWJFHvTN1fQCe9ocs+g7KkOd2JeyK9l9B3Xncpx/Tf7l
mGrU2vEOM3g7N9DfvZNw4i4n+vWfWVTyeQcgSWJ+GWbVpPzwj7Xxpt/K//X7d9d4
vJK19xnkJEs+ac/xFFGDKZXdHB8Kjyd6at82zr1BKg9v/nXgIB6KQAl3DDPFvCd5
MaAOKFxxf+J4lw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:20:16 2026 by rpki-client