Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: f2hGBU4NQVv5PUAaePrKzg5JnEAh3GXo8DpqTytmkWs=
Subject key identifier: 06:4E:18:60:59:4F:5B:40:44:E9:10:D2:26:FD:F7:47:18:0F:B4:5B
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01A0E061CBAA13C336AC4DA7EEB7C84AC5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0DBD
Signing time: Sun 27 Sep 2026 01:01:40 +0000
Manifest this update: Sun 27 Sep 2026 01:01:40 +0000
Manifest next update: Mon 28 Sep 2026 01:01:40 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: g44KAbfM3hcvxiBo8BglEm5GvYRXgcWUXTsZNnSvCb0=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:cb:aa:13:c3:36:ac:4d:a7:ee:b7:c8:4a:c5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Sep 27 01:01:40 2026 GMT
Not After : Sep 28 01:01:40 2026 GMT
Subject: CN=064e1860594f5b4044e910d226fdf747180fb45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:4f:d2:f9:94:d0:9e:62:c0:c7:63:5d:fc:
5f:4b:d7:0b:65:7c:93:f0:06:e2:2e:4b:46:92:22:
44:be:bb:10:50:de:a5:20:a3:7b:06:7b:19:c9:e6:
39:9d:93:05:e7:9b:46:12:65:dc:ac:c6:15:80:fc:
58:45:25:bd:73:20:5a:bd:32:c6:71:a6:4e:fe:50:
f4:49:f5:e2:ee:da:88:e7:e5:84:bc:8d:bc:90:35:
bd:6e:1a:d6:41:aa:f2:b4:76:9b:c5:3c:36:85:16:
d2:ed:20:00:02:9b:0d:7f:9d:07:88:b5:91:82:e2:
27:6a:b8:8e:92:ed:99:91:93:82:08:bc:ef:ae:40:
5c:2f:f6:9c:ea:2b:84:ce:94:92:c7:92:a4:80:c4:
17:6c:cc:fc:b7:49:24:5e:b4:01:66:23:bd:ae:f8:
d6:f0:d2:21:9f:09:88:be:b9:56:a7:3e:19:91:d0:
f4:be:62:87:28:bb:91:86:69:9a:98:2c:bb:65:4d:
59:5c:8a:9c:ca:76:8d:d6:33:f6:df:50:d5:5a:63:
b4:9a:b9:78:75:aa:c4:6e:fe:b9:13:0b:6c:c4:89:
30:4e:70:b5:d6:e4:d5:3a:3d:5d:ef:f5:d0:27:0f:
2f:ab:44:60:e7:3e:40:fb:33:6a:b3:a3:ea:95:9c:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:18:60:59:4F:5B:40:44:E9:10:D2:26:FD:F7:47:18:0F:B4:5B
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7b:8b:33:62:4e:26:82:55:04:88:5d:e1:ed:1c:5a:31:dd:
3d:84:bd:4c:7c:9f:15:2e:b4:3c:3c:76:ae:f5:db:e8:a7:7e:
c9:02:ed:30:17:b2:e7:c7:19:f1:6a:90:af:e9:a3:f3:6e:45:
35:ba:ab:04:c0:53:79:ec:c7:88:d4:4a:27:6a:63:8b:88:49:
e9:cc:00:12:1e:2a:43:06:5b:4b:5d:a0:9d:bb:22:3c:26:48:
3f:79:c7:d9:c1:d8:8c:54:08:fd:f8:9a:2e:14:99:58:ac:a2:
83:a1:06:65:f2:c1:61:6c:9e:c5:fe:d8:d2:4c:9e:12:8d:ba:
b1:ea:68:b3:30:50:11:b2:d8:47:5b:6c:a0:13:11:d9:bb:e1:
18:88:c5:4b:fd:e5:5e:e8:22:73:af:92:84:c9:b2:d9:44:64:
2c:47:a8:fe:d0:52:f4:58:2b:5a:82:fd:59:a8:2c:e5:dd:ea:
d4:48:75:a0:5a:48:24:88:80:36:ba:47:a0:63:4b:52:b7:8c:
fc:b5:50:fb:b3:69:94:8e:e2:cb:55:ed:e9:4f:14:00:b5:5b:
98:d2:96:77:ee:d7:a4:e1:25:97:76:db:76:4a:22:c7:26:75:
30:a1:ba:da:14:89:3b:61:de:17:d8:5b:bd:a3:9e:48:47:0b:
96:3e:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:29:45 2026 by rpki-client