Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: 7aVzeAJqkNz1B90MxpS8Be8QnWBny4C7OT1FYuxazG4=
Subject key identifier: 4A:9E:CB:FC:CF:11:8F:D7:33:CB:75:30:FF:61:B7:D4:97:17:0F:85
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 01A06F4C444A0661F159471AB2DFE03FE089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 1482
Signing time: Sat 05 Sep 2026 02:01:04 +0000
Manifest this update: Sat 05 Sep 2026 02:01:04 +0000
Manifest next update: Sun 06 Sep 2026 02:01:04 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: rKYwKpeWPCb2AssEX+ScWYh5DzttrLEYMFp+nbGOM4s=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:44:4a:06:61:f1:59:47:1a:b2:df:e0:3f:e0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Sep 5 02:01:04 2026 GMT
Not After : Sep 6 02:01:04 2026 GMT
Subject: CN=4a9ecbfccf118fd733cb7530ff61b7d497170f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:40:0f:92:5b:20:1c:95:69:59:a3:8c:14:
5c:68:ed:25:06:27:2b:d7:5e:69:5a:be:5d:06:ed:
b6:20:fe:97:59:6a:1a:6e:17:0b:7c:a1:10:0b:0b:
f4:b1:50:9e:dc:a8:1b:22:9e:f6:1c:99:60:91:78:
9e:51:99:cd:97:62:2d:35:42:4b:05:64:86:81:be:
42:ec:96:85:bb:b1:26:2a:c9:dd:57:bf:51:1f:04:
e1:14:4b:36:ee:1b:b3:5f:cb:a3:9b:e2:2d:3f:5c:
1a:cb:5d:06:b9:e5:e5:bd:d7:38:a9:53:72:b3:a5:
15:71:77:8e:1b:8f:44:7b:db:af:b6:06:61:b5:04:
18:93:d7:3d:73:ee:ee:32:7e:13:f2:e7:df:18:08:
c4:99:f1:27:bf:50:cb:bb:25:13:21:40:1a:cb:27:
f2:f6:15:8f:e6:c9:c2:36:76:29:53:6f:a4:22:f5:
5c:9f:c2:3d:eb:64:ae:be:44:e9:a8:e5:4f:1f:b7:
62:62:76:16:f5:8d:fc:61:16:35:74:15:cf:47:d1:
3c:18:02:c1:03:ac:13:62:fd:29:20:db:c3:8d:c3:
23:71:63:8f:e5:75:81:d8:57:9b:e1:c0:34:4b:88:
4a:bf:73:73:4b:67:a7:2e:1a:b7:84:af:e0:f7:64:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:CB:FC:CF:11:8F:D7:33:CB:75:30:FF:61:B7:D4:97:17:0F:85
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:06:8f:c6:9e:05:04:87:90:59:08:45:79:a1:04:7d:87:
8d:6f:a2:29:a3:e8:cb:c7:50:b0:a1:62:a9:95:7b:de:8d:f3:
ee:ed:70:46:22:ac:2b:35:ec:a0:19:06:34:89:96:03:ee:1b:
da:bc:06:fc:bb:93:40:fd:f7:30:72:29:02:0f:54:ac:0a:bd:
55:0f:1b:58:a3:2f:f4:bd:c4:a7:4d:80:57:fc:91:74:52:f2:
fa:e9:3e:b1:62:13:ed:be:62:0b:57:4c:db:45:7a:e0:ad:4e:
9e:c5:ab:b7:96:20:69:93:d3:db:fa:30:1f:8d:97:22:bd:e0:
5b:e4:fb:2a:0c:86:b5:2d:d0:30:1b:a6:00:4e:d4:fe:39:25:
bc:7b:06:89:16:26:a4:96:d3:46:d6:a0:3e:49:15:61:ad:1e:
79:13:39:e9:8c:62:11:2c:80:84:9d:47:70:6a:40:82:ab:8f:
0c:49:45:8b:db:52:d7:b0:ce:cf:81:c2:96:15:81:cc:99:fe:
0b:e2:26:7f:db:9e:6c:ea:58:3f:9b:bf:b5:c8:ea:c6:a6:81:
92:09:1f:34:f5:0b:bd:67:c9:fa:05:a4:7c:e7:1d:bf:5c:38:
17:2e:d5:f7:39:c7:37:5a:02:4a:d3:eb:be:b5:c1:ee:79:e3:
cf:57:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:28:03 2026 by rpki-client