Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier: OLOIgi2IyAWqAP1vRPgg61RfrVIKA1G9Nw24NIhbgr8=
Subject key identifier: 38:9A:0D:75:3F:83:66:39:7D:66:AB:5D:6F:FF:2A:7B:D7:1D:BF:4A
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 01A0EBC0E21596774407E3C030EEC7283B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number: 15D0
Signing time: Tue 29 Sep 2026 06:01:21 +0000
Manifest this update: Tue 29 Sep 2026 06:01:21 +0000
Manifest next update: Wed 30 Sep 2026 06:01:21 +0000
Files and hashes: 1: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: mpjf4doAqCPMvtoJVM+ap7BZI6edhyq9/ZPkmL9fM9E=)
2: Ry13RGPYJVvtpvhKEOm6pAfriNc.roa (hash: oTL00T36xjABiLlLnyyxwdABnaFfTiLLRpEKK+wxv9o=)
3: TYPr3RJ5yO-DDveN9UKe3IFvuiY.asa (hash: QAM+8Y7IXNl8McE2u38ceOVi6OQTLcaAjr7T4vt1spg=)
4: VVq-mRVoIcRkoYA5dVbdWekxbMA.roa (hash: Qwfsg5v8vdbIVLY3OSGQg/SghMAgv1DqrRhE7jEwkx4=)
5: XmK83eJDzPMsOo6NG4b7hC8Q6ik.roa (hash: LiOPt6WyR9nnxeKYrKkKUN50OOD6CsvfUFylT6hefd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:e2:15:96:77:44:07:e3:c0:30:ee:c7:28:3b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Sep 29 06:01:21 2026 GMT
Not After : Sep 30 06:01:21 2026 GMT
Subject: CN=389a0d753f8366397d66ab5d6fff2a7bd71dbf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:d8:6a:c1:68:82:b7:7f:8b:4e:6a:c3:69:
27:ed:e9:48:20:82:b5:87:f7:16:67:58:c8:6d:f8:
65:16:ec:12:3d:f3:94:f9:db:cf:66:ed:e5:ed:3f:
16:06:2e:0f:70:0c:47:d4:7b:80:2b:b3:2f:61:07:
09:55:e0:25:8b:ac:e7:e9:51:84:79:dd:e8:ea:b3:
8d:02:5b:51:15:c6:97:c4:aa:1d:ee:b7:87:24:31:
e4:58:dd:00:b7:7b:6f:07:0b:0c:af:31:7a:65:fd:
24:94:37:b3:4c:dc:fa:01:ff:b3:4b:0f:ec:b8:4b:
dc:28:a7:19:7c:0f:b8:4f:2f:9c:b5:1b:3f:1e:b8:
01:8a:88:bb:d3:0f:86:5b:ee:1d:63:df:4d:6d:c8:
37:87:35:70:38:8b:72:6b:16:2a:17:eb:4b:42:b2:
39:71:18:d8:b3:58:d7:56:8b:b5:e5:12:21:9d:51:
1b:08:61:b5:d9:9d:9e:01:90:ad:8e:c0:04:16:91:
36:b7:42:30:1f:35:4f:89:54:f3:19:3b:24:e6:78:
4c:8d:25:0c:90:40:50:8b:2e:62:c5:40:b9:dd:84:
7f:8f:c2:10:87:8b:dd:6c:69:74:06:03:7b:d6:fe:
43:b3:3f:25:f4:7a:19:a1:10:34:d4:47:41:8b:ea:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9A:0D:75:3F:83:66:39:7D:66:AB:5D:6F:FF:2A:7B:D7:1D:BF:4A
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3f:04:4e:37:40:c3:49:ae:56:6f:6b:13:de:db:17:77:e2:
82:77:56:72:4d:1c:c2:c2:d5:09:a9:ca:79:47:6a:bd:d9:07:
e5:93:f3:42:98:35:39:c1:44:1a:be:ff:5a:cb:9a:f3:c5:5a:
14:10:1f:cf:b7:f8:4a:50:07:ee:95:b0:53:4d:26:1c:dd:a1:
c1:a1:2b:34:27:b3:ad:d2:36:07:fd:d5:89:5c:9a:a4:fb:68:
11:50:50:f7:a2:29:8f:03:1e:50:69:5d:35:2e:6e:1f:f9:e7:
75:47:42:7e:97:cf:cb:24:0d:64:94:45:6b:37:89:14:14:b1:
26:d3:a2:ab:a6:7c:5f:f7:d9:e6:e7:3f:70:5d:1e:31:c7:e2:
e8:50:78:3a:58:54:8c:3f:db:fa:07:16:32:ab:67:e8:cb:98:
65:04:27:38:5c:f1:f4:fe:9f:26:a6:28:1a:2a:d5:e1:1c:7b:
a4:bd:e3:0b:b0:85:43:de:4d:57:c2:e2:ab:a1:d6:4b:29:a9:
fa:03:24:89:f3:0e:8a:63:f1:e2:e3:0d:c8:f5:22:b2:db:7f:
b4:0e:e4:8a:0e:c7:e3:14:e5:1b:f6:84:39:6d:2b:3e:93:18:
59:6c:1e:44:f4:4b:e6:43:1f:18:a9:02:a8:6d:6c:f1:f3:7e:
cb:65:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:17:54 2026 by rpki-client