Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
File: I6ejqG_MgpkfsH6OSL1SPi54Msk.mft (raw, json)
Hash identifier: s4iVN8TNEKBErDPUh/wZMTNou/Yfsw4EAVfY7FDGKWU=
Subject key identifier: 23:F4:D5:F5:A2:89:E0:71:16:F3:56:B4:CA:2E:12:D8:2E:CD:F8:22
Authority key identifier: 23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
Certificate issuer: /CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Certificate serial: 01A17DAA7554FAAD65A3D4524F79143DB415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
Manifest number: 018C
Signing time: Tue 27 Oct 2026 14:01:25 +0000
Manifest this update: Tue 27 Oct 2026 14:01:25 +0000
Manifest next update: Wed 28 Oct 2026 14:01:25 +0000
Files and hashes: 1: 5KHe4EKfZEY-oVJzaIVBG3mWL5E.roa (hash: ow+i1oVkQgzOG1bAJJCMmBDRllBuBSZ4j6eQrfepZu4=)
2: I6ejqG_MgpkfsH6OSL1SPi54Msk.crl (hash: iXC938VeoGPW/gx8mWY5r1cyg4Vtc7rgSe1pafcMgqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:75:54:fa:ad:65:a3:d4:52:4f:79:14:3d:b4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Validity
Not Before: Oct 27 14:01:25 2026 GMT
Not After : Oct 28 14:01:25 2026 GMT
Subject: CN=23f4d5f5a289e07116f356b4ca2e12d82ecdf822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:ac:c7:62:2a:5b:62:fd:9a:26:94:b1:97:
58:ea:4d:ce:3e:d7:3a:f0:91:88:dd:0f:a4:90:96:
fc:9d:10:23:26:a2:ec:40:17:6c:92:60:13:2d:c3:
9d:04:54:7a:bd:15:47:c9:ea:c4:a9:69:a4:42:35:
02:28:5d:f9:2e:83:6e:5a:5d:67:39:18:51:cf:02:
2d:9f:81:5e:83:22:77:05:cf:fc:64:5c:02:34:32:
91:3b:50:f3:d8:d4:e1:a5:f3:57:c8:6e:34:5b:12:
9c:85:15:b6:24:70:bb:5e:7b:9e:13:65:7e:7b:9e:
b7:27:42:6c:2b:73:b4:6c:70:62:93:cb:97:7a:a1:
7f:a2:55:e8:b1:99:d1:71:f8:8c:f2:6c:fc:4c:31:
b0:c8:75:03:8e:c0:94:90:73:ff:f8:37:92:d6:24:
70:ba:af:e6:5f:78:b9:41:17:67:67:5b:f1:6d:4a:
3b:02:62:53:62:13:f6:f2:65:08:88:4a:76:7d:24:
68:6c:dc:32:b6:db:87:3e:f3:b0:c8:cb:fe:33:47:
58:55:23:d5:0b:48:4f:c8:79:9f:43:ef:e6:dc:76:
03:a0:f8:cd:9b:71:36:4c:88:f7:b5:43:e0:ba:b0:
41:a9:ec:8f:44:b7:24:70:52:86:3a:6e:9b:17:c9:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F4:D5:F5:A2:89:E0:71:16:F3:56:B4:CA:2E:12:D8:2E:CD:F8:22
X509v3 Authority Key Identifier:
keyid:23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fd:67:18:18:d9:6b:23:7e:6f:06:27:71:72:ee:18:71:fe:
c5:8a:de:69:5a:57:75:83:ff:17:e1:fe:01:7b:8b:88:c7:13:
bd:90:af:09:04:f7:b0:01:90:bf:28:91:b1:23:a6:91:d4:0c:
47:d4:99:6f:54:5a:c7:16:08:e7:a0:fc:d0:7a:dd:40:35:ca:
b8:1d:df:38:13:5f:b4:c3:aa:eb:1a:28:ac:0a:ab:55:c7:a2:
f7:a4:93:8f:b1:0e:8d:ef:25:78:87:42:3b:a1:25:7b:99:61:
b2:cd:a8:4e:db:6d:b5:8a:b7:51:72:7e:c8:f1:a3:3e:1c:ac:
8b:98:e1:8d:22:91:f7:2f:71:07:23:b2:31:75:16:da:ed:5e:
76:e2:03:28:ab:6a:10:e8:ff:1d:1e:bd:2d:9c:a3:fc:4b:93:
d5:f1:73:4f:f0:40:59:d4:13:97:25:71:85:66:8f:d3:63:8d:
38:ad:09:95:7b:8c:41:86:68:07:a7:be:d1:4b:5a:12:ad:26:
68:5c:65:4e:e1:1e:d9:23:28:6f:97:46:16:60:ca:9c:13:1a:
3f:a2:a2:51:e4:95:32:01:1c:7b:a9:ad:03:d5:e7:d1:0c:35:
49:2b:89:ed:a9:4f:59:40:49:27:82:e1:53:cd:da:af:75:6d:
e8:f9:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:53 2026 by rpki-client