Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
File: I795FHzwqGzvWHrdDmao9y7HJrQ.mft (raw, json)
Hash identifier: Gp5b2X7UcU5vpIARTcM9TMO05QsuNz7WHmKP0xlR5HM=
Subject key identifier: 38:41:90:3A:73:CD:EB:BB:0A:AC:D6:B8:F7:CE:F1:49:68:57:F6:6B
Authority key identifier: 23:BF:79:14:7C:F0:A8:6C:EF:58:7A:DD:0E:66:A8:F7:2E:C7:26:B4
Certificate issuer: /CN=23bf79147cf0a86cef587add0e66a8f72ec726b4
Certificate serial: 01A17A042A0E89B272D0A066B28161AE000C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:55 +0000
Manifest this update: Mon 26 Oct 2026 21:00:55 +0000
Manifest next update: Tue 27 Oct 2026 21:00:55 +0000
Files and hashes: 1: I795FHzwqGzvWHrdDmao9y7HJrQ.crl (hash: DO1GlYD0cIXyVsYZdL+azr0Q4MeaQLzuer65Rk0u79U=)
2: Syx-W1nauzr5Dpxe6peULgXAAtY.roa (hash: TRbEL2oQIoKttvvoFuUorq6cRO4At0CjTJYaz/OskZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:2a:0e:89:b2:72:d0:a0:66:b2:81:61:ae:00:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23bf79147cf0a86cef587add0e66a8f72ec726b4
Validity
Not Before: Oct 26 21:00:55 2026 GMT
Not After : Oct 27 21:00:55 2026 GMT
Subject: CN=3841903a73cdebbb0aacd6b8f7cef1496857f66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:df:4a:c1:22:e5:6e:01:9c:7b:82:cc:ba:
57:35:65:48:6e:ac:a6:59:9c:7e:cd:4b:09:96:26:
31:1d:c6:74:e5:ea:cb:33:18:d9:47:e3:29:30:fa:
41:2b:f6:91:d7:d6:4e:d8:da:bf:42:38:ca:59:ee:
0d:38:6c:09:7a:9d:d1:60:7a:83:b4:f9:91:5d:54:
e3:dd:0c:64:af:ed:a8:6f:60:3a:e7:75:60:98:89:
fd:05:46:38:b8:fc:ff:75:57:ec:75:bc:c1:67:9f:
e3:5b:b3:7a:55:cf:2e:bb:8c:12:52:e7:e0:0b:96:
5c:b7:84:a2:74:e0:bd:1a:74:f7:c3:9f:b7:c7:8f:
f5:9c:bd:ce:b9:55:67:b0:a7:1e:4d:31:6a:ad:d1:
84:ea:1a:1c:47:a8:b2:07:2d:b4:07:a9:ab:f2:64:
73:c5:34:4d:b0:cd:38:39:60:a1:2e:aa:85:5c:e1:
d6:48:1d:f8:64:56:bc:46:5e:2f:c8:83:16:25:97:
d1:84:41:d3:5d:a7:e4:aa:c5:91:90:d2:d7:ef:e3:
08:65:99:01:7b:17:45:0c:56:38:1b:eb:87:85:80:
8d:4f:0d:a7:ca:13:0d:85:06:85:90:34:f5:fc:43:
28:45:54:ca:97:36:ef:69:28:38:ba:0b:9a:21:0b:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:90:3A:73:CD:EB:BB:0A:AC:D6:B8:F7:CE:F1:49:68:57:F6:6B
X509v3 Authority Key Identifier:
keyid:23:BF:79:14:7C:F0:A8:6C:EF:58:7A:DD:0E:66:A8:F7:2E:C7:26:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:47:37:0f:d4:4f:85:88:d7:b4:84:b8:36:bc:44:65:83:1e:
92:15:49:7c:a3:86:88:a9:28:ba:c5:25:5a:b3:f1:ba:52:c9:
5b:e9:2c:8c:db:c0:43:67:50:48:50:c1:f9:c8:bc:80:fd:25:
8d:47:58:de:89:aa:75:4f:27:3b:30:f3:6e:3e:d2:e1:43:f7:
60:16:7f:88:b6:14:d5:e7:1f:d9:7b:e9:d3:aa:5e:b8:bc:87:
93:0e:90:a4:27:b6:1c:9f:cb:8d:12:e9:e7:04:72:3a:84:43:
0e:8b:f8:01:50:06:58:4d:14:04:77:33:ac:1e:86:75:28:81:
fb:92:da:ce:fc:17:38:b4:38:7b:27:72:ad:9f:17:da:8d:79:
0e:7f:a8:e9:49:e7:7f:d1:e5:1a:a6:ef:87:21:bf:57:8e:af:
f6:5b:a1:68:43:5c:fb:39:59:f3:fb:8d:3f:e2:56:af:91:0e:
42:28:79:48:d2:df:ea:d4:e9:a0:b3:19:16:17:7f:07:12:2f:
a9:06:91:68:90:c4:65:ad:37:db:cc:8e:69:92:be:39:80:d2:
de:75:56:b6:21:91:29:f6:1d:39:3e:fc:dc:23:b7:6e:c9:58:
e5:6b:fa:fc:3a:1a:41:e9:45:15:4f:4c:0d:58:3a:3a:29:ac:
51:b2:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:21:04 2026 by rpki-client