Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
File: I3_mTWhI-AEgq-aV4x-sScpdB_M.mft (raw, json)
Hash identifier: NJR4VMo+WFEClvd79gazi8pr7zQ8jYv5nOin1iElVLY=
Subject key identifier: 60:82:2A:A6:7C:CC:A1:F9:A5:8D:E1:5C:F6:6D:7C:34:9A:15:71:54
Authority key identifier: 23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
Certificate issuer: /CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Certificate serial: 01A1558A46701573D582175667F866B3C8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
Manifest number: 07B0
Signing time: Mon 19 Oct 2026 19:01:27 +0000
Manifest this update: Mon 19 Oct 2026 19:01:27 +0000
Manifest next update: Tue 20 Oct 2026 19:01:27 +0000
Files and hashes: 1: H8UNN8H7VPAPeU8HfY2pZ9baom8.roa (hash: aa3mwH6a5yy6jaHkG9FnSEuRMRDZi+0YDMCMC7O4/3M=)
2: I3_mTWhI-AEgq-aV4x-sScpdB_M.crl (hash: e6XU8EEFCy3HAK/jEgunxlYpXFiQ7ZEGmM5I/B3OOBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:8a:46:70:15:73:d5:82:17:56:67:f8:66:b3:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Validity
Not Before: Oct 19 19:01:27 2026 GMT
Not After : Oct 20 19:01:27 2026 GMT
Subject: CN=60822aa67ccca1f9a58de15cf66d7c349a157154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:96:ef:39:2f:53:56:40:ef:f7:b3:f6:de:
0f:6f:c4:62:9d:1c:fa:2a:a4:ee:c6:e8:b3:65:28:
82:9d:78:71:05:d4:14:99:63:ec:1a:9b:5b:6c:15:
46:54:50:7e:13:99:88:29:98:cb:f9:0c:c0:2e:85:
ae:39:b3:d4:ad:c5:27:e0:a2:a4:a0:78:7d:55:ef:
ce:9c:81:12:0a:99:cb:86:1b:2e:3c:35:6b:9e:f5:
4c:44:ea:36:f2:01:a3:70:3b:f0:64:53:26:76:a2:
41:ac:c3:36:aa:a0:45:fc:58:b3:19:05:a1:7e:fb:
c9:37:dc:8f:43:60:56:26:0f:83:1d:91:17:16:fd:
e0:1d:d0:42:24:81:bd:f4:a1:d6:70:cf:39:13:ca:
43:f9:34:c5:cb:bb:7e:d9:e0:74:0e:34:1b:56:e0:
7f:17:6c:5e:5e:b2:61:ca:a7:64:41:b4:33:f8:76:
cb:13:86:f9:e1:9c:8d:c5:be:ce:62:3b:a6:c2:83:
28:4d:38:0a:77:e5:00:72:11:a2:82:0f:9b:32:e7:
43:2b:4b:c8:4a:c4:6d:be:80:14:d9:82:db:3f:cd:
11:b6:0c:56:77:65:3c:88:d2:96:b1:be:ac:80:76:
43:a1:ea:43:16:18:cf:59:fd:8d:cb:53:df:0c:3c:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:2A:A6:7C:CC:A1:F9:A5:8D:E1:5C:F6:6D:7C:34:9A:15:71:54
X509v3 Authority Key Identifier:
keyid:23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ca:c3:57:a6:ea:fb:92:9b:63:82:77:a6:c3:fd:c9:e9:a2:
b8:e1:20:11:19:13:a9:68:da:39:f6:43:05:53:8f:a8:55:98:
66:6d:f0:8f:6b:92:6f:45:56:0c:39:68:73:84:08:bc:07:06:
56:f0:40:15:6b:22:4a:4e:6c:ce:69:dc:e0:45:98:46:51:48:
d6:7b:94:bc:4e:c7:6f:e7:7c:1d:b0:43:53:84:ea:5d:de:56:
5e:0f:31:4a:f8:4d:83:3c:ea:e8:f5:a2:46:5f:f3:31:0f:22:
6b:c9:16:b6:b8:c5:43:3c:94:58:45:2c:9b:5b:f2:61:f5:1f:
06:b6:3f:e0:34:9b:67:be:fc:09:8a:5f:e1:62:74:1f:b1:34:
f6:6e:c3:76:b4:60:c2:f4:4e:94:34:92:62:64:b1:08:04:cf:
55:ef:26:11:94:0e:81:a0:84:34:ea:9b:12:8a:57:49:ab:43:
b4:dc:1c:d0:67:d5:86:58:65:85:22:59:d3:d8:2f:aa:99:f7:
00:be:e2:c4:8b:1d:5c:45:98:09:fc:1b:c7:e4:65:69:ba:4a:
ab:98:96:22:b5:af:1c:67:c9:72:8f:d0:ee:ee:30:0c:79:2f:
9c:31:05:24:02:50:c3:ba:e8:13:a6:5d:54:93:d2:23:d2:7b:
88:07:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:51:39 2026 by rpki-client