Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: 1wrQ//7rSMsf2MTcx7B2s7ijmwBW+zZOewkodOog5Ao=
Subject key identifier: BA:2C:45:B7:81:07:56:70:FE:0E:6A:C0:C2:F1:7A:41:C7:D5:7A:14
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 01A181BE27C96A38FD9FF19D2549C1A93BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 07C1
Signing time: Wed 28 Oct 2026 09:01:25 +0000
Manifest this update: Wed 28 Oct 2026 09:01:25 +0000
Manifest next update: Thu 29 Oct 2026 09:01:25 +0000
Files and hashes: 1: DLPawj2OgKUwkgMYVqxK640ZM5M.roa (hash: j4U5ZtGc0iAMwMjKy2gODe5wP1RecXvOyD9/RnVr/+s=)
2: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: hVvMqrANBCztF3p4LUAn1QVgpQ4XmiR8Dcx7V9wmoW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:27:c9:6a:38:fd:9f:f1:9d:25:49:c1:a9:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Oct 28 09:01:25 2026 GMT
Not After : Oct 29 09:01:25 2026 GMT
Subject: CN=ba2c45b781075670fe0e6ac0c2f17a41c7d57a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:0e:bf:f6:f2:17:97:b7:73:04:ba:07:86:
91:62:b6:ce:79:eb:f3:1c:79:01:29:fb:3e:aa:d6:
da:8e:3e:dd:98:23:56:04:e5:bb:5a:a2:03:7d:19:
a4:e4:8d:e9:54:08:bb:60:6a:9e:24:30:c1:d6:63:
1b:52:2e:42:31:6f:fa:f3:a4:73:85:60:9b:00:4f:
68:d0:28:0a:82:ee:89:79:0e:38:b9:b3:f2:fd:98:
93:5c:a5:fe:2d:5f:83:c9:c5:38:e2:99:2b:88:10:
22:0e:3c:e9:89:69:7a:4c:9e:6a:57:a9:cd:36:cb:
2d:aa:88:1e:aa:b6:a5:ef:c5:7f:b7:ff:7c:ba:cc:
55:58:26:27:49:52:90:b3:4e:c6:b8:4a:93:ce:e5:
02:9a:3c:2e:af:65:47:97:a3:68:3f:6f:07:76:76:
12:cf:ba:d0:e3:8b:ef:62:d2:0c:96:50:65:99:28:
56:bc:38:f6:aa:41:5a:6c:da:ba:27:77:ad:8d:90:
3d:76:bf:fd:2c:d3:f4:59:15:3e:5b:46:e4:9d:2a:
54:38:6b:ab:ec:fc:c0:85:b2:eb:d8:d3:7e:5f:b7:
e4:2d:39:0a:8b:ef:0a:75:1f:0a:28:2c:13:8e:f6:
08:1f:c5:20:b4:7e:3b:f2:f1:1c:08:f5:74:36:e5:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:45:B7:81:07:56:70:FE:0E:6A:C0:C2:F1:7A:41:C7:D5:7A:14
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c2:50:8e:1e:9d:0b:9b:c2:7a:cc:45:eb:68:35:15:4c:00:
8d:aa:db:8c:7c:51:09:72:e4:c7:36:9c:b8:7d:3a:60:84:30:
c2:0d:14:bb:f9:6a:15:3b:60:0b:d9:79:80:67:90:89:82:b6:
bf:95:d2:c5:c4:d4:87:c5:a7:2a:a1:72:41:0f:b5:39:f7:63:
12:dc:60:26:f7:41:a3:90:ad:aa:01:7b:d0:66:81:92:8a:ca:
dd:13:d8:61:04:4f:64:b3:64:69:ae:54:dc:74:74:7f:38:3b:
32:59:98:cb:5b:19:59:ce:b9:5c:eb:a5:38:51:0d:f5:54:7d:
5c:6c:13:1b:aa:0e:2c:86:4d:73:61:4a:a2:78:94:0b:67:ab:
ff:ef:8b:12:c7:21:81:e5:d0:db:91:00:0e:c2:43:9c:5f:ee:
2f:2f:6d:b8:2c:b9:ca:0a:0a:51:1e:91:35:16:be:8d:d8:89:
2f:7c:62:b8:d8:e2:4b:22:98:1e:39:c3:08:4d:ad:f7:9c:a9:
52:11:d2:a9:88:fc:a7:2c:da:63:56:7a:55:46:6e:dd:98:d3:
92:8f:da:a6:cc:72:fd:46:93:32:21:3a:97:ac:1a:33:bb:bd:
a7:28:08:35:99:b2:0e:82:42:12:be:a4:54:95:6d:41:e4:43:
8a:8b:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:56 2026 by rpki-client