Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: FvcKuB41kQySPRDxcWOzxzDyG9ME+5YWA71GptxwNpo=
Subject key identifier: B8:28:4E:DA:19:DC:35:F1:E5:3A:D7:3F:F1:2A:52:30:77:DF:3D:7D
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 01A162A12D11A64C9932646696C59BB314DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 1500
Signing time: Thu 22 Oct 2026 08:01:32 +0000
Manifest this update: Thu 22 Oct 2026 08:01:32 +0000
Manifest next update: Fri 23 Oct 2026 08:01:32 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: bAZTCPJZzfyO4rVcs6OwCLcRbX5VWx7F4l3qBMb/C6s=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:a1:2d:11:a6:4c:99:32:64:66:96:c5:9b:b3:14:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Oct 22 08:01:32 2026 GMT
Not After : Oct 23 08:01:32 2026 GMT
Subject: CN=b8284eda19dc35f1e53ad73ff12a523077df3d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:cd:c4:e1:4a:89:13:fa:0d:80:de:9e:e2:
7e:17:31:01:73:d5:7e:49:53:aa:81:29:ed:4c:ab:
33:c8:ea:58:22:0e:d8:16:9a:c1:ac:64:55:7f:f6:
ce:3c:b9:bc:07:29:45:be:a1:9d:86:7d:bd:e2:17:
4c:1f:0d:cb:47:5d:80:1d:0d:fc:b5:c5:ab:b4:3e:
53:09:1c:38:ad:cd:d6:d1:7f:04:26:56:73:d8:80:
68:ab:eb:ec:93:90:a4:43:94:5a:24:d2:91:50:b2:
2b:26:ed:d3:fb:6c:e2:9b:d0:7a:1f:72:d3:0d:7c:
ba:e0:30:0f:ab:8e:af:91:20:d8:db:d9:76:71:e6:
d3:30:a0:f0:53:3d:74:1c:7e:8b:e7:d1:49:10:c0:
c3:54:fd:e2:a6:84:f9:78:7c:a7:0f:30:fd:63:0f:
eb:ed:79:11:0e:d7:16:3f:7c:37:72:bc:b3:85:4a:
08:b3:f5:87:de:15:b1:39:f5:a8:46:dc:26:0c:1d:
4f:88:f3:ce:43:93:a1:62:15:9b:a2:2a:9a:e3:cd:
e1:aa:b6:7d:10:30:33:69:f9:8c:82:c1:25:50:58:
f5:47:6d:e2:7b:5b:51:5e:b7:47:dc:69:27:c8:42:
eb:6c:73:ec:a8:76:ef:4f:6e:76:3a:e7:8d:ad:00:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:4E:DA:19:DC:35:F1:E5:3A:D7:3F:F1:2A:52:30:77:DF:3D:7D
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6a:a0:9b:8d:f9:fd:3f:a3:06:20:a9:08:62:d2:1c:a6:e1:
92:f1:3d:80:93:64:b9:79:e0:de:6c:7a:70:6c:d8:f6:41:30:
f8:dd:78:83:19:84:bc:c7:e3:91:49:e8:f3:96:f2:37:ec:70:
c8:df:3f:7c:25:af:d2:90:52:06:da:f2:57:90:98:1e:ce:49:
83:54:34:da:cb:0c:b5:34:26:ad:45:ca:3a:09:aa:52:76:86:
29:03:09:cd:d9:7d:46:db:83:74:44:f1:68:e6:e2:5c:f5:b2:
2d:68:d7:43:d6:f4:9c:57:b7:2d:c6:de:e9:4d:63:1e:6b:53:
f3:e3:62:0d:ec:d1:e3:bb:0c:10:c8:51:18:ad:b9:e3:3c:8c:
f8:a9:b0:12:3e:4b:c1:1b:14:9b:af:b9:94:00:09:5b:92:67:
48:01:ed:23:20:bd:e8:ff:d8:07:94:6a:ec:d1:ff:1c:a1:95:
36:87:57:35:14:68:3a:a8:b7:b2:44:62:9c:88:3d:72:f9:b1:
f2:0b:11:00:27:95:7f:5d:d9:22:92:84:28:b1:47:98:f7:c5:
0d:6d:21:2b:70:03:29:af:e2:fc:b9:41:97:c8:f8:f2:0b:56:
06:22:eb:78:80:95:54:26:cf:f7:b1:f3:3c:55:ad:b9:ef:e9:
40:77:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:43:09 2026 by rpki-client