Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: CZeShaTQ5J9hmUO3xx5Bg0dCgT771B8aXQ1Rv95XKLY=
Subject key identifier: 9C:96:3A:11:AA:CA:CC:B1:5B:C0:F5:4A:F2:63:70:B0:73:B3:58:15
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 01A0D6B9A4CED3018E538158E1F63D1B5AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 04:01:25 +0000
Manifest this update: Fri 25 Sep 2026 04:01:25 +0000
Manifest next update: Sat 26 Sep 2026 04:01:25 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: TpUIeTp5TRCUCJd/KIn3yWib1YXDt51kvIAI6nG1olU=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:a4:ce:d3:01:8e:53:81:58:e1:f6:3d:1b:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Sep 25 04:01:25 2026 GMT
Not After : Sep 26 04:01:25 2026 GMT
Subject: CN=9c963a11aacaccb15bc0f54af26370b073b35815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:02:a2:4c:0f:c9:0c:2d:b5:a2:f9:f7:36:
5f:0b:bb:f4:86:08:cd:15:10:9c:42:6d:09:aa:2b:
3a:5a:51:f2:f8:f7:9c:64:37:e9:52:36:58:17:75:
fb:2b:be:6e:8a:d7:b0:cf:fd:9a:ab:1f:44:a0:fc:
04:6b:0a:d1:a1:3f:39:c2:ee:af:f4:8b:c3:49:5c:
12:0b:10:ec:fc:29:f2:55:c3:98:d7:ac:a0:17:5b:
6a:d9:a1:96:a3:48:44:fa:8d:5b:3c:ca:fd:c6:2e:
0d:19:9d:bd:bc:cd:32:35:e3:66:06:df:4a:4e:ca:
0b:91:bd:ad:dd:90:2c:be:64:55:d4:cb:39:12:55:
6f:57:74:5a:3a:93:15:05:04:bf:b7:ad:95:47:c5:
af:86:b5:5e:5b:9a:0b:db:62:63:b9:56:23:b2:86:
e7:fd:ed:eb:f4:4d:6a:e6:12:46:bd:2a:c9:38:a1:
f7:e7:be:fa:ac:5c:54:24:b8:10:55:70:fb:dd:5f:
be:b5:d1:9e:9e:77:d0:44:82:0b:7b:d3:44:0f:0f:
e6:2f:8f:28:6d:8d:31:a7:f7:18:7c:a5:89:10:22:
7d:55:04:7f:a7:3c:f0:ed:00:07:88:07:08:4d:2c:
79:79:21:d9:0c:aa:b2:cd:1f:af:e6:7d:60:cb:e2:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:96:3A:11:AA:CA:CC:B1:5B:C0:F5:4A:F2:63:70:B0:73:B3:58:15
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:42:7a:b4:9f:1b:d2:ac:01:37:20:de:16:8f:82:e4:58:9e:
38:7a:51:bc:a8:d6:df:01:47:c3:42:1b:79:e9:8b:1c:5b:57:
31:55:fe:b9:e4:68:e7:42:2a:46:a4:72:a3:f0:dd:4b:c1:a2:
fc:c2:0f:8c:b9:23:6b:eb:44:06:01:10:4a:93:79:b6:0a:f0:
ce:09:a5:83:2d:24:65:9c:52:e6:16:65:1e:1c:ef:1e:78:49:
37:83:d8:20:37:63:9a:df:f4:f0:f8:bf:51:51:ef:7b:09:65:
96:4c:95:6b:bc:a4:b1:de:23:72:ef:29:e1:3a:4c:37:98:fd:
b0:69:8e:99:9b:f9:77:9d:d6:91:5a:37:79:37:d0:46:8a:b3:
96:f5:8c:79:66:56:d8:20:0e:f0:8f:76:ee:f2:39:b7:2d:59:
51:fc:65:72:e4:12:26:84:90:b8:11:70:38:de:18:04:64:b7:
18:85:6e:84:66:c5:a4:1e:e3:d0:fe:a3:30:45:08:e0:5b:2b:
39:64:dd:13:64:e3:c6:64:bd:8e:60:b6:20:7a:a5:9f:73:dd:
dd:90:97:72:e2:cb:d4:22:ef:a3:e0:13:88:14:40:d2:b3:5a:
6b:cc:93:cc:c1:47:08:6e:08:f3:67:49:75:4a:92:59:56:7e:
b3:d8:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:11:58 2026 by rpki-client