Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: 0l54LwFwvlmwaRIzpV8pm8QXYtmn3HN01pIBEePAzsg=
Subject key identifier: 53:08:E3:80:34:E3:EF:79:62:A5:97:51:2C:C6:3A:D9:11:1F:38:B4
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01A0D0488DBA6B7E2C3DA6EA344AA4CF5628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0E32
Signing time: Wed 23 Sep 2026 22:00:10 +0000
Manifest this update: Wed 23 Sep 2026 22:00:10 +0000
Manifest next update: Thu 24 Sep 2026 22:00:10 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: VV8nG85A40jR3W2TqT4myr+2hjuZ9imAJiMObCVZe0Y=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:8d:ba:6b:7e:2c:3d:a6:ea:34:4a:a4:cf:56:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Sep 23 22:00:10 2026 GMT
Not After : Sep 24 22:00:10 2026 GMT
Subject: CN=5308e38034e3ef7962a597512cc63ad9111f38b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:69:ae:ae:7e:dd:b0:98:5a:d4:e8:9d:a5:
f8:f8:a1:ff:11:48:3a:0b:25:67:26:0f:7b:5d:ac:
19:38:4e:f2:7f:ba:6f:ce:11:c3:43:67:d7:2e:d7:
6e:32:ed:c8:7f:67:8a:a1:f0:89:3b:9c:4a:40:92:
3f:48:77:6b:4a:88:cf:98:23:5b:6b:d5:6e:ef:a6:
15:15:3e:f3:97:e1:4b:0c:33:05:9a:c1:01:3a:5c:
e5:04:26:31:16:bb:d9:a1:64:5a:6e:0f:27:24:29:
f1:be:1f:bc:03:45:0f:88:e8:ab:b3:87:e8:07:48:
19:fd:9b:42:61:a8:40:59:f4:f1:ec:73:14:af:e7:
46:c6:99:fe:76:83:fa:02:fd:1a:1b:53:e8:36:d2:
93:16:5f:81:eb:09:ef:f8:b1:e6:ac:d5:0a:aa:31:
cf:73:a8:0f:29:d8:11:7b:20:10:58:0a:77:95:c1:
fc:b0:65:37:99:26:ac:2b:bf:97:a7:57:eb:a3:d8:
09:c0:84:f2:49:01:3b:73:bc:3b:f0:3b:42:bd:c6:
ef:25:e5:55:7e:8f:09:49:64:87:79:94:15:24:21:
d0:4a:e7:10:94:47:1f:ea:6e:35:d8:2f:59:a2:35:
74:1b:b0:80:57:81:b8:f6:55:7c:03:fa:d5:84:51:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:E3:80:34:E3:EF:79:62:A5:97:51:2C:C6:3A:D9:11:1F:38:B4
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4a:ec:bc:ff:cd:08:1c:10:4c:d9:69:a1:f2:53:fa:33:44:
17:b0:63:15:68:8e:1c:22:1b:65:27:e9:d5:9f:fd:24:ef:50:
05:96:d2:96:2d:ac:03:42:cf:92:3d:2d:79:53:d3:d8:91:ab:
1d:49:3e:44:a9:2c:17:d6:6b:5f:75:fd:49:32:14:0f:50:02:
4e:a3:c8:4b:7b:ff:e1:df:18:8f:26:cf:d1:49:2e:92:76:92:
b0:38:a0:b4:ba:27:5b:9f:8e:58:06:2a:01:cc:41:38:33:ce:
57:30:52:df:ba:f6:18:2b:3b:cc:27:ca:e3:66:60:d1:7f:ba:
d9:29:b4:bb:5a:87:0d:65:05:3f:85:20:5c:1a:98:a1:76:2c:
69:e4:0e:0d:fe:5a:86:a1:e4:08:9b:5f:b7:bf:25:10:4c:66:
93:b6:d6:af:90:cf:26:ff:96:dd:d1:21:c5:8f:bc:54:29:c5:
23:71:a4:03:97:22:dc:5d:b6:36:ed:1c:8c:37:f3:0e:28:0a:
15:e2:33:d5:bb:d9:58:1d:cb:a9:80:d7:0e:5d:e1:3f:d0:f0:
c5:9f:70:9a:9a:db:cb:08:67:d6:2f:45:5a:9e:ba:19:83:ab:
27:85:de:ed:d2:d6:34:ce:bc:f3:1e:18:c6:b8:a9:56:c5:32:
43:98:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:44:32 2026 by rpki-client