Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: ojB/AfvgYoBVOjqUUOU2K2j1wtf9CrzFZcMfY7xxkiQ=
Subject key identifier: 66:9A:5C:5A:85:36:E4:E0:06:78:D1:72:5C:B4:CA:06:A1:EB:FB:7B
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 01A16C48A515703375B402634E1E8EE4A20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 1505
Signing time: Sat 24 Oct 2026 05:01:02 +0000
Manifest this update: Sat 24 Oct 2026 05:01:02 +0000
Manifest next update: Sun 25 Oct 2026 05:01:02 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: 22MdV9YNIUGkOmRjPt1gNDV/yNeNXHw+DfyvyxLiSts=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:a5:15:70:33:75:b4:02:63:4e:1e:8e:e4:a2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Oct 24 05:01:02 2026 GMT
Not After : Oct 25 05:01:02 2026 GMT
Subject: CN=669a5c5a8536e4e00678d1725cb4ca06a1ebfb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:a7:f4:6e:fc:42:b2:87:47:ea:c4:85:7d:
16:a4:28:23:a0:e6:5d:f7:d6:f7:04:69:05:61:f7:
c0:37:d2:37:37:dd:05:8d:38:04:e1:df:57:f9:84:
d5:17:d2:3a:c3:1e:0c:ad:c9:dd:97:c9:80:33:79:
8a:7d:1d:2c:21:0e:94:e9:3e:c9:a6:c2:03:a5:ac:
2b:3e:de:e9:fd:7a:e3:41:c6:41:3e:5d:7c:f6:92:
13:03:68:11:de:a6:16:3c:98:1d:12:62:6c:1a:fe:
00:12:04:52:b0:6e:54:98:17:68:37:76:48:07:6b:
b4:4a:93:1c:8a:9e:b8:57:96:31:06:a0:77:2b:23:
be:ff:cb:1f:18:fa:42:f1:fc:36:b5:53:4f:02:5a:
e5:c1:11:c5:85:b2:11:d3:0d:98:bf:f5:6a:19:13:
63:c8:c5:8e:0f:2e:55:1e:37:58:a3:04:40:7f:bf:
c9:8f:f8:af:b0:89:42:1a:87:96:2a:cc:5b:e1:26:
90:4d:7c:c8:04:d4:e7:9a:d2:6a:55:c4:61:6b:49:
95:e1:07:e4:b9:57:f9:b3:73:1e:8f:fe:d5:ed:9e:
6a:26:75:67:b6:89:58:6b:2c:b4:b1:f0:ca:f4:fe:
d6:40:8d:15:87:7f:04:be:1c:b7:0c:54:68:e0:3b:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9A:5C:5A:85:36:E4:E0:06:78:D1:72:5C:B4:CA:06:A1:EB:FB:7B
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f0:08:2e:80:2a:c2:3a:3e:24:c1:98:66:fe:8a:16:e1:2d:
33:32:21:05:08:88:1c:08:61:9f:f3:2c:e7:5f:02:dd:e0:6d:
14:37:04:7d:a7:01:cc:37:61:b1:2d:4c:d5:0c:5f:84:61:a0:
4c:f4:a2:3d:70:3a:24:80:7c:68:26:b6:28:b0:36:19:63:90:
d2:68:e8:d7:e1:0c:99:15:47:db:d0:10:81:b0:9e:d0:f6:92:
02:4c:ef:75:7f:12:e4:e2:5a:fb:16:91:df:d7:9d:b0:1e:05:
52:4e:18:ab:70:f1:f3:dc:41:99:4b:c5:9b:63:ac:b6:d1:37:
8e:ea:7d:aa:08:7d:61:9c:ec:52:9a:bd:21:ee:8c:74:b2:2d:
6c:f9:be:db:08:7e:9b:5f:41:bc:eb:3a:ee:69:78:1e:4a:83:
cc:b6:48:bd:27:5e:18:d6:5b:63:0e:42:b1:02:26:c2:f2:ae:
25:4f:23:23:c3:96:d4:81:77:58:6f:40:e0:56:2c:ee:77:87:
bf:cf:f5:c1:5c:c6:90:8c:c3:aa:cd:a3:54:1d:be:7e:34:98:
17:85:25:fc:15:64:34:cf:e4:2d:49:19:62:15:8d:52:01:93:
34:d8:33:dc:0b:09:17:54:cf:b0:b8:fb:da:df:22:13:8e:59:
95:bd:6e:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFsSKUVcDN1tAJjTh6O5KIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5
NjcyZDEwHhcNMjYxMDI0MDUwMTAyWhcNMjYxMDI1MDUwMTAyWjAzMTEwLwYDVQQD
Eyg2NjlhNWM1YTg1MzZlNGUwMDY3OGQxNzI1Y2I0Y2EwNmExZWJmYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b2n9G78QrKHR+rEhX0WpCgjoOZd
99b3BGkFYffAN9I3N90FjTgE4d9X+YTVF9I6wx4Mrcndl8mAM3mKfR0sIQ6U6T7J
psIDpawrPt7p/XrjQcZBPl189pITA2gR3qYWPJgdEmJsGv4AEgRSsG5UmBdoN3ZI
B2u0SpMcip64V5YxBqB3KyO+/8sfGPpC8fw2tVNPAlrlwRHFhbIR0w2Yv/VqGRNj
yMWODy5VHjdYowRAf7/Jj/ivsIlCGoeWKsxb4SaQTXzIBNTnmtJqVcRha0mV4Qfk
uVf5s3Mej/7V7Z5qJnVntolYayy0sfDK9P7WQI0Vh38Evhy3DFRo4Dsv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaaXFqFNuTgBnjRcly0ygah6/t7MB8GA1UdIwQY
MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt
NGVmNDg4ZGM2ZGM0LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0
LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/AILoAq
wjo+JMGYZv6KFuEtMzIhBQiIHAhhn/Ms518C3eBtFDcEfacBzDdhsS1M1QxfhGGg
TPSiPXA6JIB8aCa2KLA2GWOQ0mjo1+EMmRVH29AQgbCe0PaSAkzvdX8S5OJa+xaR
39edsB4FUk4Yq3Dx89xBmUvFm2OsttE3jup9qgh9YZzsUpq9Ie6MdLItbPm+2wh+
m19BvOs67ml4HkqDzLZIvSdeGNZbYw5CsQImwvKuJU8jI8OW1IF3WG9A4FYs7neH
v8/1wVzGkIzDqs2jVB2+fjSYF4Ul/BVkNM/kLUkZYhWNUgGTNNgz3AsJF1TPsLj7
2t8iE45Zlb1uog==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:40 2026 by rpki-client