Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: KU2Jq5hI2qK9JH7RSJLdq+ivVqTGeFlwiCNO5TQ+DYc=
Subject key identifier: 35:5C:C2:9B:E3:BA:2A:EF:63:4E:47:C1:91:FE:94:9F:01:C2:F5:B7
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 01A0DC8520D7631F356669618DF5C6F3EEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 07:01:47 +0000
Manifest this update: Sat 26 Sep 2026 07:01:47 +0000
Manifest next update: Sun 27 Sep 2026 07:01:47 +0000
Files and hashes: 1: 0fY2-frVSg1jq699GFwRUoCBlNc.roa (hash: eUT643x5xx8hSJT1XefBsreuEw6p88bqGvTup19SiEs=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: wFAM+gFN564hjcZI/MHUplcQ7ncUsXr6zscHbm1QBA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:20:d7:63:1f:35:66:69:61:8d:f5:c6:f3:ee:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Sep 26 07:01:47 2026 GMT
Not After : Sep 27 07:01:47 2026 GMT
Subject: CN=355cc29be3ba2aef634e47c191fe949f01c2f5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:59:cf:ac:94:44:88:ce:d8:2f:ed:e5:03:
0a:b0:b6:25:f6:db:cd:45:b6:b7:8a:13:82:e9:ce:
77:28:c6:cf:01:26:85:bd:f7:d0:74:bf:83:23:45:
47:16:9c:2f:ee:2b:b4:e3:22:2c:bd:87:b0:8b:02:
73:c3:07:6c:c6:5c:28:c0:52:47:30:36:ec:de:a2:
ef:4f:40:9a:cf:d7:50:f0:fd:bd:ca:82:4f:64:c1:
d7:8d:40:a2:cb:f5:e0:14:3e:7e:ce:09:0e:39:7c:
a2:66:ef:7c:fe:b9:c8:8c:d0:18:5b:c1:9d:e6:0b:
5b:4c:d9:02:06:46:7d:a3:41:2f:f8:7b:2d:c6:cc:
6b:0a:c8:e6:54:7e:5d:ab:88:f3:4d:2f:06:54:e1:
3f:1c:91:ab:af:fb:fb:95:16:c9:20:a0:1b:da:47:
55:84:88:f3:37:a8:e3:40:f4:4a:66:0f:c0:0a:f0:
d6:77:f6:9e:76:aa:a8:ad:4f:d1:e9:1f:ea:c4:5e:
a7:25:a9:b2:75:1b:13:27:1e:d2:bd:4f:33:27:d8:
81:2c:c6:ff:d6:eb:18:55:38:54:a8:b0:82:db:fc:
30:fb:49:a6:bc:ec:9b:83:11:5e:75:c0:73:c3:c5:
4b:fd:04:b1:61:0a:2f:54:69:1f:61:43:73:d1:19:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5C:C2:9B:E3:BA:2A:EF:63:4E:47:C1:91:FE:94:9F:01:C2:F5:B7
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:dd:6e:dd:7e:2d:dd:f4:34:f4:26:0d:ba:1e:61:f5:c6:1e:
19:bf:06:23:e7:42:90:cf:3a:26:a6:11:af:99:cd:89:5d:36:
6f:45:16:e8:b3:5d:9e:90:41:4a:31:ee:a6:9f:cd:de:88:37:
cf:2d:b0:b0:aa:26:be:78:dc:15:b0:06:4e:92:4b:57:c1:fa:
e3:ae:93:bd:b4:db:86:ca:2c:69:71:1e:83:e8:6f:80:4c:24:
c8:a6:90:f0:a8:e2:9a:4c:85:f3:3b:43:74:03:fd:5c:fa:9b:
d9:2d:a0:0e:7a:9b:51:71:04:e4:78:0f:0e:fd:19:10:b4:5d:
7d:5c:71:e4:ad:b5:e9:1f:c8:c3:fe:e4:83:16:d7:e8:2f:da:
de:be:51:c5:fa:18:d5:8b:20:04:74:fb:8f:19:23:cf:2b:0f:
22:c7:12:e6:00:b7:ff:ad:61:e2:c1:8b:b8:e9:d0:7d:10:30:
58:22:a4:40:53:b0:5d:5e:de:c1:f8:c9:67:b9:32:35:da:33:
cb:44:a0:b9:9c:f7:78:62:7c:2e:b7:e4:d0:48:b1:c8:5a:f7:
19:8a:21:26:8c:dc:ba:d8:25:09:e3:75:40:a5:40:94:78:f7:
f9:2c:75:37:b0:f8:c5:0d:33:9b:dd:ec:28:a6:e6:e5:95:dd:
45:f1:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:52:21 2026 by rpki-client