Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: josqXXoiwwJf5gmcD1N11GY1d//6CRFtBnpNt9sUZT8=
Subject key identifier: C0:41:F4:70:AC:60:D5:FB:6E:D6:B4:B9:08:A4:D1:BC:87:5B:85:80
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 01A0B5AD613076A242BF39A0DFF2DA2178F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1A60
Signing time: Fri 18 Sep 2026 18:00:33 +0000
Manifest this update: Fri 18 Sep 2026 18:00:33 +0000
Manifest next update: Sat 19 Sep 2026 18:00:33 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: tn4UE37+xEuBKRsR9f7YZJsAGk5voO76NYr46lkyPdA=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:ad:61:30:76:a2:42:bf:39:a0:df:f2:da:21:78:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Sep 18 18:00:33 2026 GMT
Not After : Sep 19 18:00:33 2026 GMT
Subject: CN=c041f470ac60d5fb6ed6b4b908a4d1bc875b8580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bf:d4:ea:67:14:a1:55:6e:a3:94:19:5f:7d:
62:dd:07:27:99:5a:90:40:c8:7e:e3:cd:30:12:87:
c9:9e:5b:3a:ed:45:8b:67:69:d0:bb:be:f9:05:88:
89:b5:26:da:b3:70:8f:13:21:b4:a0:ae:c1:14:20:
e7:34:ec:2d:c4:7c:1c:c3:ba:ff:c6:7a:b8:6e:c8:
e9:63:ee:36:df:47:5f:29:c1:e5:19:f0:93:32:93:
1b:ee:77:a5:79:1d:47:44:06:dc:d9:34:09:8d:21:
10:32:5c:7e:bd:18:fe:40:10:8e:a3:99:02:a0:9b:
01:fa:53:4b:5a:00:86:64:b7:d4:83:f7:e2:17:90:
f2:ba:98:a7:df:02:54:84:97:bd:9d:0d:24:e9:69:
45:37:74:78:be:08:c1:09:dc:cf:30:ca:43:c5:51:
09:ff:bf:55:b9:dc:24:d3:98:98:b3:7b:b9:4c:70:
ec:89:4e:4a:4a:7f:c1:b2:63:b1:3e:06:f6:ac:29:
d3:4a:d9:35:68:40:90:df:a6:c0:3c:bc:69:85:53:
48:53:d7:70:8e:36:67:a3:9f:20:f1:ac:cd:7c:ab:
66:cf:09:1e:ae:88:54:76:ee:b7:a5:86:cd:cb:57:
21:dc:8a:9d:20:1e:f9:7a:ef:00:69:a1:50:df:d4:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:F4:70:AC:60:D5:FB:6E:D6:B4:B9:08:A4:D1:BC:87:5B:85:80
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9b:75:59:5f:6d:da:b3:54:e0:dd:d7:93:a6:35:38:ca:2a:
a4:a2:bd:18:aa:96:e5:d7:0b:29:88:f8:36:75:e9:07:e6:91:
af:d7:55:f0:e2:56:93:98:38:7c:8a:83:32:10:7f:40:e4:68:
4c:8f:70:e1:14:e8:a0:e0:f3:cf:a6:e0:0a:f5:a7:54:52:87:
ff:16:ea:ba:28:cc:ca:89:7b:dc:72:5b:d4:98:d8:5f:e3:3c:
06:69:c4:f7:99:29:21:b4:75:6e:56:4e:52:24:2f:f7:ea:f2:
ca:99:55:3a:3e:12:2c:13:a4:43:dd:a4:6f:71:dc:58:48:5b:
86:96:41:12:5d:f1:21:5d:81:71:fb:5b:a2:28:51:fc:8f:1b:
9e:96:3d:91:c0:3f:91:26:2d:80:ca:1c:a2:20:60:b3:2f:01:
fd:34:1a:f1:3a:9f:3d:98:d6:dc:c4:35:33:bf:a0:53:a2:42:
90:a4:47:f3:2f:df:be:03:f1:5c:13:05:84:4c:e8:5f:02:c6:
b0:fc:08:37:9a:3a:4a:d7:19:55:10:71:50:aa:4b:9b:40:02:
b7:76:9e:0e:bd:db:63:9f:6a:9a:ea:ce:05:76:9a:57:92:fb:
b7:bb:f4:f4:4e:2e:31:f0:2d:33:4c:33:ef:c9:bf:20:cc:2a:
c5:f7:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:18:18 2026 by rpki-client