Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: jze4+4GlcIcgIBn2fI4egypxCGMzjUNIstJwoD4u3Uo=
Subject key identifier: 25:B7:5F:31:D1:B3:B3:4F:D2:B3:21:B6:51:2C:52:3A:48:16:7E:48
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 01A0705F57E2F8317961AE90B9AE7A4EA01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 1A3B
Signing time: Sat 05 Sep 2026 07:01:31 +0000
Manifest this update: Sat 05 Sep 2026 07:01:31 +0000
Manifest next update: Sun 06 Sep 2026 07:01:31 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: p/DatTHnFpyNh6YL4ucMg5jbHgEpFO3W6zNzrjSO1lM=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:5f:57:e2:f8:31:79:61:ae:90:b9:ae:7a:4e:a0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Sep 5 07:01:31 2026 GMT
Not After : Sep 6 07:01:31 2026 GMT
Subject: CN=25b75f31d1b3b34fd2b321b6512c523a48167e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:42:f4:74:3b:d1:b0:fc:8d:c4:1d:18:d0:
58:22:69:4e:a0:31:03:8f:ef:ec:a9:1a:db:af:9f:
1c:1e:79:9c:25:e3:1f:4c:1e:05:8a:e0:50:ea:55:
9e:0f:e4:ae:28:45:10:59:cf:c2:5f:87:14:05:bd:
8c:27:ad:ea:3e:f7:75:94:1c:6e:a7:97:c7:56:11:
26:c2:8c:4b:cd:e9:16:73:3b:18:ed:24:69:fe:db:
27:b3:41:8d:2f:90:2d:ae:2f:50:80:18:4e:41:99:
88:aa:af:09:29:29:44:89:ea:f7:a5:73:6f:24:92:
bd:1d:dd:ac:77:88:b8:51:04:81:fe:ab:e5:b5:d1:
bc:59:68:2b:45:b8:39:11:32:9c:c5:3e:6a:f5:b8:
85:3f:44:63:18:5b:b4:fd:c3:a2:00:d1:33:9c:d4:
41:0a:04:a6:f4:26:df:c3:97:16:a5:df:1f:81:0b:
b6:93:c0:76:b7:79:80:a4:24:22:f0:d1:ef:94:2e:
ff:ec:30:e5:fb:8d:a4:08:2d:c0:b8:c7:12:0d:34:
fb:3a:56:cd:0d:d9:23:58:33:5a:de:e7:90:a3:dd:
71:0a:ea:83:ad:75:c4:01:7e:ef:bd:59:c6:1b:da:
2c:3f:84:e6:45:1c:82:34:69:0c:fd:98:84:49:30:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:5F:31:D1:B3:B3:4F:D2:B3:21:B6:51:2C:52:3A:48:16:7E:48
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:11:11:d8:de:78:5b:42:46:e2:96:ba:4c:2a:ee:78:08:
84:82:ad:04:e7:47:0f:35:0b:61:53:b5:37:db:5a:6e:c7:29:
df:27:5c:ce:3e:38:06:33:4f:1c:e0:11:23:6b:9d:73:dd:9b:
4e:7e:0f:37:a0:19:49:42:5b:48:15:2b:f4:64:49:3f:4a:9f:
2e:98:a0:2a:89:4a:cb:73:40:9a:af:2e:74:4a:df:63:ca:a6:
31:23:b7:8f:44:7d:f8:69:6f:04:f7:c8:07:a2:4e:75:df:64:
8c:b6:92:fe:12:8f:77:76:0b:95:cc:71:5b:76:fe:b8:84:e5:
e5:79:7f:00:57:c7:98:6e:48:89:40:a3:e8:f3:28:f8:34:01:
5d:6e:7b:f7:ea:6f:e5:f3:1d:bb:66:51:aa:e8:dd:0a:11:a8:
ad:e9:69:be:0b:b2:89:99:ab:6c:3b:3f:df:ee:68:f3:9f:ba:
33:46:73:b8:f3:43:d7:3c:6f:31:26:c1:1f:ad:c6:dc:85:88:
96:79:2e:63:11:f5:77:bd:96:1b:46:f7:b4:98:de:9d:1a:e9:
c3:1e:f7:8f:86:6d:fd:06:dd:e4:5c:06:26:86:e2:b3:7c:b4:
65:90:5e:75:5d:1f:fb:87:22:52:c5:1b:99:06:a3:1d:d5:7b:
2d:96:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:51:52 2026 by rpki-client