Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
File: IxYwcMcaZRYOwhi4n98LGv8GCpY.mft (raw, json)
Hash identifier: pbU5CGFZssMW8fDQdeHWmZvl7eYZk889RGajpqsfFGQ=
Subject key identifier: DE:B4:5A:65:14:80:88:23:23:5E:EA:EE:ED:54:87:08:E8:18:E2:AF
Authority key identifier: 23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
Certificate issuer: /CN=23163070c71a65160ec218b89fdf0b1aff060a96
Certificate serial: 01A184BF0A93791D89856BB4AF3F0C8D7B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
Manifest number: BC
Signing time: Wed 28 Oct 2026 23:01:14 +0000
Manifest this update: Wed 28 Oct 2026 23:01:14 +0000
Manifest next update: Thu 29 Oct 2026 23:01:14 +0000
Files and hashes: 1: IxYwcMcaZRYOwhi4n98LGv8GCpY.crl (hash: Pmv1YPwuCQ+8wtixqG8hxraGlvGQ2/0WLFMkoz7dShw=)
2: q7ThTrs0g513Vx_EsM-SNJd-9QU.asa (hash: tmMU4Zq5R5GAkYxxYk1nWgXxt8gVsZJujQN6NpzHTjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:bf:0a:93:79:1d:89:85:6b:b4:af:3f:0c:8d:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23163070c71a65160ec218b89fdf0b1aff060a96
Validity
Not Before: Oct 28 23:01:14 2026 GMT
Not After : Oct 29 23:01:14 2026 GMT
Subject: CN=deb45a6514808823235eeaeeed548708e818e2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:f7:43:62:18:ff:ab:52:65:a2:32:7b:fc:
1b:f7:80:82:65:60:ab:d7:3f:65:4d:15:39:90:86:
b0:6c:54:bc:49:78:b0:dc:2e:b5:f0:e1:d4:19:70:
d7:52:8e:62:12:08:ef:12:66:0c:99:93:5c:06:ec:
00:34:86:0b:f7:45:70:5f:d3:53:47:e1:10:fc:e1:
2f:27:a1:7b:38:12:21:00:ca:52:bc:e0:6b:28:5a:
72:03:b8:7b:5b:b2:85:db:2b:f9:05:45:c3:e6:20:
82:8f:bd:12:ba:16:f2:ef:19:33:42:9a:22:63:51:
1e:a7:ba:01:95:ce:f6:b5:f4:7c:31:11:39:f2:bf:
28:40:d7:58:4f:bd:b4:7e:1c:2c:01:d2:39:fa:27:
d7:df:99:a5:4a:8a:86:8e:e6:53:29:7d:18:eb:44:
d2:5d:3f:2a:53:96:d2:27:c7:7c:5e:c9:e1:26:d7:
7b:11:0d:44:30:96:4b:fc:35:0a:34:98:2d:3d:a1:
df:85:51:ff:1f:f2:b9:ae:3e:4f:4e:55:a0:9f:04:
23:4e:27:32:09:09:31:56:81:ca:88:11:9c:e6:d7:
dc:24:f8:45:9c:c1:c7:36:b7:9b:c1:6d:5c:fa:90:
ac:29:b7:d4:ab:ed:6b:36:7a:4e:a3:1f:b2:f6:99:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B4:5A:65:14:80:88:23:23:5E:EA:EE:ED:54:87:08:E8:18:E2:AF
X509v3 Authority Key Identifier:
keyid:23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:57:8e:2e:a3:4d:9b:cd:54:a4:e5:64:ba:12:1b:a5:50:92:
89:0b:25:9a:68:1c:cc:48:b0:bd:5a:15:d7:e8:e4:f9:26:f1:
8a:59:93:16:1a:67:0e:b9:12:80:e8:ac:7d:fe:bc:76:64:e3:
a6:1c:99:d5:ee:d2:f3:0b:a6:3a:03:df:1e:63:db:2b:e4:0d:
d7:6c:ba:e4:dc:d2:3b:81:d1:96:c4:b4:47:5c:18:9f:21:dc:
73:2e:9a:15:da:6b:23:a9:ae:5d:5e:c8:10:b6:b0:69:d6:1f:
73:1b:bf:90:22:a3:83:5b:a5:a7:49:f8:f8:1b:d7:5c:2c:2d:
f0:16:d1:2e:a4:7c:9f:f2:51:7b:69:09:bb:ca:b2:34:73:97:
4f:ea:48:e2:97:3e:fe:c5:c2:e6:64:12:e5:00:4e:b2:78:2f:
0d:56:29:a8:10:db:7d:fa:d5:7b:2c:b0:23:55:44:85:27:f7:
3d:2d:bf:07:74:bb:c4:6e:6f:a4:99:ea:3d:f4:14:de:91:d1:
b6:63:dd:f7:ff:0c:9c:a5:3e:f8:b5:2d:2c:44:36:04:68:15:
fe:53:65:ca:43:1b:3d:7b:2c:d4:27:cf:cc:f1:8e:73:d5:03:
a4:e5:13:b3:f0:e8:78:ee:73:bc:bb:4e:2e:bc:c0:9c:59:69:
f7:e3:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:53:29 2026 by rpki-client