Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: iIvI2pHq5FD6IYuJLMw8SrR3Htgs7CM688+tT1aCM0s=
Subject key identifier: 42:2B:59:D4:D8:9C:10:4C:D5:1A:29:0F:2A:F7:FA:F6:5F:32:E4:94
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 01A0F8D82BDB2D76781E7043F3B3B4B3A513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0E38
Signing time: Thu 01 Oct 2026 19:01:51 +0000
Manifest this update: Thu 01 Oct 2026 19:01:51 +0000
Manifest next update: Fri 02 Oct 2026 19:01:51 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: 4/9WfNHxTUBI9iDeVad8v1RAYJcwHSf4HMEsqgbGqGc=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:d8:2b:db:2d:76:78:1e:70:43:f3:b3:b4:b3:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Oct 1 19:01:51 2026 GMT
Not After : Oct 2 19:01:51 2026 GMT
Subject: CN=422b59d4d89c104cd51a290f2af7faf65f32e494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c1:2f:cf:b6:f8:cc:fb:5e:49:f0:b6:71:83:
ee:0f:64:34:05:7f:9a:77:65:14:11:db:53:05:51:
d5:8b:81:c1:d4:f5:33:45:60:ff:60:27:07:ef:ec:
b3:ab:78:ef:42:06:84:2c:7c:5c:de:b4:d8:bc:c8:
eb:4a:f6:d1:9f:e9:40:d7:52:9b:1b:91:ed:3c:1a:
fd:41:c8:c6:9f:9e:f2:30:77:d5:5f:ad:b9:4c:b7:
27:29:7e:03:0c:ca:a7:e8:ff:b6:9b:1b:7d:57:85:
ec:4d:e7:f7:c5:f9:cd:94:62:c5:74:13:31:c9:87:
8c:fd:2d:d3:0c:9c:16:38:78:f1:c3:11:9a:eb:f3:
50:c3:26:eb:31:46:93:e0:72:76:8f:36:a2:22:6f:
16:d0:e6:4b:9a:12:a5:2c:f1:92:9c:82:5b:ef:59:
8c:7f:26:04:39:1f:d5:f3:26:d8:55:80:54:83:74:
67:43:31:5f:5e:59:7b:f5:1a:8a:bf:0a:4b:69:3d:
89:a1:cc:21:a3:ee:53:ea:d0:b5:92:60:2b:be:a6:
1e:f4:33:ed:ac:3f:c2:b2:b0:12:34:73:9a:06:df:
bb:57:0a:a4:44:b6:55:de:77:7c:81:45:52:3d:5e:
18:21:f7:06:d4:08:6b:1c:c0:44:f5:9f:15:6a:86:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:59:D4:D8:9C:10:4C:D5:1A:29:0F:2A:F7:FA:F6:5F:32:E4:94
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:96:e5:07:9b:ad:4f:75:73:15:16:8e:c0:80:b2:86:53:01:
5b:42:7b:c4:4c:f2:54:6e:cf:e0:8b:95:b5:35:4f:72:70:5f:
83:16:c8:a1:22:0e:3e:eb:c7:dd:4b:1d:95:93:98:53:a0:d4:
9b:f4:b3:d5:0c:ec:4f:cd:38:d9:ad:56:16:6c:a2:db:03:dc:
c8:49:74:7a:e9:df:8f:10:e1:7a:97:7f:d9:d2:5a:54:a8:79:
db:bb:59:3a:ea:74:36:e2:db:68:d0:8c:ae:bb:e9:58:9b:4d:
e4:2c:ff:20:a2:6e:4a:88:80:f3:84:da:4d:9b:8a:99:39:0e:
c6:7d:99:f9:03:e1:c2:2d:ed:a6:e4:46:b0:7e:1a:3d:54:10:
79:31:d6:fa:b6:49:8a:f6:a3:9e:98:6e:a8:cf:3e:f7:65:bd:
bb:73:b9:c1:d8:fc:c7:b1:ff:9f:0a:9c:62:d7:7f:36:53:06:
5e:11:ad:d9:d4:fc:57:6c:c7:06:98:6a:e3:75:dc:ff:4c:a5:
78:61:f0:2f:46:3c:27:22:a3:da:0e:34:c0:cb:7e:b1:dd:1d:
ea:36:fe:64:04:86:33:44:1d:17:00:73:61:71:e5:6b:ab:41:
2d:72:19:c1:89:54:77:f7:dc:5b:e0:ab:cf:e1:ff:d4:b3:ce:
ae:55:a4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 09:12:44 2026 by rpki-client