Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: 43j8HJgXLwJEoGyCBY7BEqoruDVuAo/+B6JwRfE8PFQ=
Subject key identifier: 0E:B9:EE:9E:8E:8F:FB:70:42:D6:EA:8C:D0:43:94:8E:44:F1:2E:23
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 01A17514B799A161ACF840170AB55BF6D8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 18C2
Signing time: Sun 25 Oct 2026 22:00:54 +0000
Manifest this update: Sun 25 Oct 2026 22:00:54 +0000
Manifest next update: Mon 26 Oct 2026 22:00:54 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: kYYlw3CI41oAfGtM+rwt0AjdpLqRQPlABGOEmX0exoM=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:b7:99:a1:61:ac:f8:40:17:0a:b5:5b:f6:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Oct 25 22:00:54 2026 GMT
Not After : Oct 26 22:00:54 2026 GMT
Subject: CN=0eb9ee9e8e8ffb7042d6ea8cd043948e44f12e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:ad:9b:4f:03:e1:24:e5:84:40:fe:a8:92:
7f:88:bc:ea:98:93:e0:36:6c:fa:00:68:c7:90:6f:
05:4b:fc:11:cc:89:af:88:16:84:67:0e:35:c9:8c:
b5:99:a4:84:a0:6f:6a:a7:3d:88:d8:96:1a:f0:c0:
f7:77:2e:fb:1a:4e:ee:e1:47:69:b4:5e:5f:f7:8a:
83:f9:d4:f8:f1:f0:d2:0b:9f:bd:8c:e3:39:34:fc:
e8:32:7e:04:18:80:cd:29:54:dc:9f:b9:0b:3d:09:
86:61:d9:4b:1d:f7:c1:ea:05:8e:76:72:2c:9b:bc:
79:94:47:a0:ac:e3:fb:3a:c8:ba:33:62:69:0e:4f:
b3:31:08:fe:47:b3:97:84:4d:4f:17:b3:53:d7:43:
85:53:9a:5f:b6:5e:80:f9:e8:70:d8:ba:be:e6:32:
45:55:39:ac:90:5b:02:10:f5:0b:55:4d:52:be:49:
95:eb:f8:85:b2:7e:5e:fe:02:89:68:4c:f8:e2:77:
27:35:16:7d:4e:f8:17:7c:26:42:7b:a9:40:04:8a:
10:bc:a1:03:08:64:f5:35:f2:93:1a:57:9d:c4:e9:
7b:c4:7c:fb:26:3e:d4:de:eb:72:76:e9:16:99:2f:
2c:2b:7a:52:15:33:b7:7e:24:71:44:c4:1a:34:f7:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B9:EE:9E:8E:8F:FB:70:42:D6:EA:8C:D0:43:94:8E:44:F1:2E:23
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:9e:3b:5d:2d:ef:e9:6d:97:48:fa:1e:a3:32:9a:3b:0c:
54:c1:a4:af:e6:6a:18:3c:58:ce:26:59:ef:a0:4d:9b:ef:84:
a8:57:70:32:78:e9:8e:ee:1f:b3:d9:1c:8d:cb:e5:b6:d1:d2:
33:d4:6c:81:f4:24:38:85:77:c3:35:fe:a0:fd:10:26:30:d6:
f0:4f:a0:a8:3d:92:a1:33:4d:4f:ec:8a:d0:42:86:93:12:83:
90:5e:bb:01:52:0a:0e:b4:62:91:26:77:6b:ef:e6:a8:3b:0f:
e5:f2:31:e1:16:ea:69:de:d1:36:c7:4a:48:e0:17:5f:f0:ea:
88:0f:4b:f0:a9:fb:3b:8f:85:30:ad:28:b8:17:cb:31:2b:cd:
57:c2:23:58:ba:b9:a5:ba:34:50:b0:83:57:df:11:66:b5:7c:
5d:1c:4f:75:7b:9f:08:92:7a:85:17:38:dc:ee:d3:84:f3:55:
5a:fd:1a:e2:7e:71:98:0d:bd:cd:17:eb:b9:76:e9:47:83:d8:
04:1c:95:db:28:85:02:11:a4:b0:20:60:44:01:bf:82:7b:fc:
0f:05:4e:c6:2d:73:2b:a2:02:1f:a1:37:13:73:44:94:b3:8c:
d8:88:41:84:d0:7a:6f:c9:fa:4a:cc:bb:f9:b9:07:0a:f3:cf:
86:ac:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:04:20 2026 by rpki-client