Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
File: IxYwcMcaZRYOwhi4n98LGv8GCpY.mft (raw, json)
Hash identifier: GmZ15PQnx/ShfUGa55Ouv0yausnvbn45qRd+wKppixQ=
Subject key identifier: 16:01:D1:82:0C:D7:FF:54:19:BA:5B:D1:52:11:13:9A:93:FE:07:9C
Authority key identifier: 23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
Certificate issuer: /CN=23163070c71a65160ec218b89fdf0b1aff060a96
Certificate serial: 01A06EA7BAA9A2465B94BCDAE6CCD0EECC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
Manifest number: 2C
Signing time: Fri 04 Sep 2026 23:01:21 +0000
Manifest this update: Fri 04 Sep 2026 23:01:21 +0000
Manifest next update: Sat 05 Sep 2026 23:01:21 +0000
Files and hashes: 1: IxYwcMcaZRYOwhi4n98LGv8GCpY.crl (hash: dyMTYMynSqmuUmx8fBvYGQPRdY0TusFQ6R4n0s5o3DE=)
2: q7ThTrs0g513Vx_EsM-SNJd-9QU.asa (hash: tmMU4Zq5R5GAkYxxYk1nWgXxt8gVsZJujQN6NpzHTjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:ba:a9:a2:46:5b:94:bc:da:e6:cc:d0:ee:cc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23163070c71a65160ec218b89fdf0b1aff060a96
Validity
Not Before: Sep 4 23:01:21 2026 GMT
Not After : Sep 5 23:01:21 2026 GMT
Subject: CN=1601d1820cd7ff5419ba5bd15211139a93fe079c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:ff:cd:ca:6f:e2:ea:15:9b:11:c4:ac:fc:
31:a4:dd:62:24:e7:a1:0f:b1:a6:86:81:41:8b:e0:
f8:4a:13:fe:70:bc:d8:cc:cb:1f:e3:8e:d4:aa:63:
45:1c:c4:b3:51:4e:33:22:e6:3a:b9:fb:ac:30:47:
ca:01:81:35:d3:ea:5c:7c:7c:bb:b0:02:f8:04:a5:
db:d2:79:ef:69:cd:0e:c3:47:f2:fe:6f:e7:85:f0:
ca:1e:46:a0:2a:ef:a3:c7:2f:64:c4:a2:59:76:89:
83:16:ae:15:01:0c:5d:96:c6:e6:ef:3a:21:ca:8c:
cc:de:6a:90:17:11:ac:f2:fd:ae:07:58:6c:f1:22:
85:78:04:f8:7a:2f:f0:26:dd:8e:df:f2:7f:14:da:
cb:8e:62:9e:06:88:1f:41:46:76:f6:1b:05:90:d8:
c6:01:dd:8c:31:03:09:b1:85:ea:a6:b5:3d:c2:2c:
d8:5d:a0:cf:b4:ce:fe:ce:a7:3a:2b:f7:83:95:51:
6f:f5:84:8a:d7:b9:28:3d:59:d8:b7:0f:c3:46:2d:
46:23:41:40:8e:69:b8:f9:e1:fe:04:77:f1:f9:25:
53:9a:7d:42:15:94:76:d8:ec:9b:89:fb:ea:79:a5:
96:f8:d4:7a:e1:3d:11:d8:3c:95:e6:5d:e4:9b:f6:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:D1:82:0C:D7:FF:54:19:BA:5B:D1:52:11:13:9A:93:FE:07:9C
X509v3 Authority Key Identifier:
keyid:23:16:30:70:C7:1A:65:16:0E:C2:18:B8:9F:DF:0B:1A:FF:06:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYwcMcaZRYOwhi4n98LGv8GCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0d294d-cc57-4dc9-b5ab-cc87ea25bbfe/1/IxYwcMcaZRYOwhi4n98LGv8GCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:59:9a:82:a8:cd:be:cd:33:7d:4b:82:66:47:8c:f9:d2:34:
69:1d:3c:f2:60:d4:6b:1e:05:1e:54:32:f3:6d:64:f1:a7:c8:
e2:3c:b4:1f:34:51:16:31:40:97:fb:87:7d:3d:0c:a0:33:0f:
0c:00:57:10:c1:21:74:eb:25:44:23:ca:b1:ce:59:f5:ea:a5:
16:4b:c9:d7:4a:92:32:9e:ec:28:e0:66:90:98:b8:cb:8b:91:
4f:bc:32:8a:b0:ca:bf:6f:0c:b9:62:35:6b:19:a5:8d:3f:a9:
92:59:24:5f:ec:6d:4b:a1:58:21:0e:3a:a9:6e:b1:9f:94:9b:
70:9c:da:a4:1a:d8:fc:2b:23:5c:7c:de:d7:e0:0f:4c:f7:fd:
94:e8:38:1b:bb:51:95:02:21:13:87:67:a9:87:2b:36:39:65:
17:c6:31:ec:50:27:01:4e:74:89:7e:2d:8a:6b:f9:c5:1a:65:
0c:e2:76:73:3e:41:f7:31:90:00:ea:ea:6e:8d:03:f6:63:82:
cf:64:42:7c:f1:39:92:5f:62:3c:70:e6:df:7b:b1:e3:71:24:
55:16:ab:5b:5a:c3:2b:cc:f2:dc:fa:da:9a:0b:1e:af:36:ac:
19:80:e6:2e:b1:d2:61:55:46:fa:4f:b6:87:7d:80:44:91:00:
dc:27:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:23 2026 by rpki-client