Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: QCMinjt6ISKRBPqeserbtHjHQOPtndnay34dugmxDa0=
Subject key identifier: 4C:DF:1D:6E:24:A8:D6:7A:0C:BD:6B:C0:9F:A1:AB:46:A5:7C:DD:94
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 01A187F6B81B84A257FF1B9216D2BF9E1A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 14:00:55 +0000
Manifest this update: Thu 29 Oct 2026 14:00:55 +0000
Manifest next update: Fri 30 Oct 2026 14:00:55 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: a7VWMtscrLz7+h1jC//CqBixd16JdIJZd0YGa6fro3E=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:b8:1b:84:a2:57:ff:1b:92:16:d2:bf:9e:1a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Oct 29 14:00:55 2026 GMT
Not After : Oct 30 14:00:55 2026 GMT
Subject: CN=4cdf1d6e24a8d67a0cbd6bc09fa1ab46a57cdd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:da:65:cd:0e:82:a5:a8:61:27:48:d6:56:
3f:1a:b3:63:18:db:44:72:3e:f4:c5:a0:2d:58:2a:
90:80:ce:a5:ad:70:92:d1:f0:d2:f5:49:1e:3f:3b:
2c:09:ee:23:77:8d:c6:8e:de:d1:db:a2:b5:2b:53:
a3:19:6a:2f:75:34:f9:4c:57:e5:8a:49:57:91:a6:
6f:69:09:d2:83:3d:bd:f5:be:44:ca:b4:27:88:1b:
61:a9:86:1b:fe:4a:0d:4c:b6:a4:e2:83:d7:5d:62:
cd:9c:9e:9d:09:15:8e:47:99:91:5f:ac:d8:33:0e:
da:4c:4c:a0:87:66:6f:93:d4:f7:7b:9b:4d:4b:81:
94:b6:22:2d:e3:85:f8:ca:90:40:2e:2c:ea:1f:00:
a4:db:fc:c8:3a:73:38:71:aa:b8:85:1c:61:a5:7d:
2b:1c:aa:d8:5b:d6:91:91:33:70:a5:b2:38:20:31:
9a:f5:d5:92:3f:e5:15:b7:22:21:2d:35:6a:bb:52:
dd:77:57:1a:33:bf:ed:2a:0f:8c:72:4e:c1:94:81:
bb:61:01:13:1e:60:41:e9:82:32:9d:f5:44:67:23:
a3:16:77:a6:ea:ad:82:aa:a7:25:9a:24:2d:70:b7:
e7:d0:c6:29:52:d1:70:03:6f:5c:c4:a3:19:bf:20:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:1D:6E:24:A8:D6:7A:0C:BD:6B:C0:9F:A1:AB:46:A5:7C:DD:94
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0f:45:8d:28:05:fe:00:97:2d:03:46:d5:6a:83:90:08:85:
db:00:50:b5:66:58:11:7c:20:75:79:f7:b8:ae:45:bf:e1:b0:
4b:36:0a:bc:7f:9d:3e:78:a2:e1:95:28:fe:39:b4:ce:1c:a3:
c3:ca:47:22:5f:7f:d1:b3:8d:2b:38:ec:8d:98:4a:53:fb:35:
41:2b:a6:a8:3a:15:cb:db:b1:32:98:96:64:bf:9c:1f:62:00:
7d:94:7c:c2:0f:e4:78:a5:2a:1c:6b:e5:27:f2:d5:20:f4:fc:
2d:92:01:48:73:a6:a2:89:03:e5:d2:ab:1e:83:73:54:b4:91:
7e:e7:02:da:23:bb:3a:b4:be:19:99:48:8e:22:3e:27:d3:3f:
ce:e5:41:89:4f:8f:95:ae:a8:61:79:9a:a0:8a:a6:5e:41:8a:
e3:79:b1:5e:b8:0a:cf:8b:07:e1:ed:a9:d1:fd:a7:f5:a4:be:
07:b5:d3:cd:ff:a9:08:41:a7:a5:de:35:97:26:28:5d:78:37:
80:12:a3:74:16:1f:a0:a9:34:08:05:37:ad:70:73:3f:e9:c3:
c3:8a:b4:29:a1:89:40:a2:fa:2c:64:49:b3:32:87:be:ce:a3:
e8:45:ab:95:33:53:42:de:17:82:1f:c4:be:60:ea:1d:5b:3f:
80:9b:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:28:50 2026 by rpki-client