Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: rZ1LYkKH6eOdJVN7imZx4Wc3bKnbbBg9MlVeU8uq8Lw=
Subject key identifier: A4:37:45:4E:CF:8D:B2:F9:7F:33:50:1A:F0:9D:0C:F6:55:78:52:BA
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 01A08DFC4C499C36CFBB577C4C2F210E0B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 1A4A
Signing time: Fri 11 Sep 2026 01:01:57 +0000
Manifest this update: Fri 11 Sep 2026 01:01:57 +0000
Manifest next update: Sat 12 Sep 2026 01:01:57 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: JKTt572MRgGKlWm0BIDeg0sPQPmi8IRDFDas9Svn3Vs=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fc:4c:49:9c:36:cf:bb:57:7c:4c:2f:21:0e:0b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Sep 11 01:01:57 2026 GMT
Not After : Sep 12 01:01:57 2026 GMT
Subject: CN=a437454ecf8db2f97f33501af09d0cf6557852ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:d1:5d:0f:0c:a3:e1:20:5d:ce:0b:90:e7:
25:96:d0:e7:b4:7b:92:38:8e:5f:0a:c8:04:68:f0:
df:d5:68:25:15:e6:6d:38:45:28:44:ad:3f:dc:7e:
2b:0c:c1:5c:32:75:bc:a2:f6:cd:33:83:c8:d7:64:
2b:dc:cc:79:13:2b:99:6d:e8:58:aa:ba:2c:39:4f:
c9:65:da:82:e1:c3:f6:6f:69:d8:e8:ab:a5:a1:4b:
80:d6:87:ee:e8:e5:83:73:54:5c:77:aa:59:2a:9c:
d7:21:fe:43:b2:7a:53:26:b2:74:87:45:b3:80:ff:
62:cd:9a:ae:cd:78:6c:25:84:95:ee:80:18:00:32:
2e:ad:55:ae:25:f3:85:87:0d:cc:2b:c9:b7:3a:e6:
b5:0f:30:53:70:11:39:4c:c2:66:9f:b3:ef:c3:ab:
dd:20:9b:4a:38:5d:ec:ec:97:5d:d3:6d:46:0c:a0:
4b:a8:20:cf:42:68:41:67:b0:63:53:d4:9b:fd:fe:
f2:86:f1:98:9f:f3:2c:07:6a:33:a3:7b:ef:b0:91:
89:86:a1:3a:e0:e1:d9:3c:5f:92:d7:fe:e9:6d:a5:
ca:0a:4d:b2:be:e7:7c:f4:21:b3:b9:d7:bd:c1:5c:
6a:1b:7e:95:e8:71:cf:cb:b3:8c:fc:55:ab:70:4f:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:45:4E:CF:8D:B2:F9:7F:33:50:1A:F0:9D:0C:F6:55:78:52:BA
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4a:8d:10:d7:21:be:ac:7b:ab:d8:ca:d3:93:09:ce:ae:c7:
71:53:a9:86:d2:44:1c:08:73:96:80:9e:b2:b0:d4:bb:38:31:
c8:b2:4b:f0:3b:ff:ed:fe:2e:fd:fb:1e:ef:9d:14:76:d7:a1:
0f:83:cc:24:72:33:83:9a:db:ab:14:2d:e6:80:eb:41:99:a7:
73:48:38:ad:4c:61:b1:d4:8f:6d:63:5b:63:fc:0b:c8:66:ac:
e7:ce:31:2e:fd:7a:08:64:a3:63:f8:0c:df:2c:d7:51:d2:a3:
08:07:87:39:16:09:e6:52:ca:e5:ff:fd:0f:c7:b2:23:9d:df:
92:65:bb:b1:60:59:bd:c7:54:90:c2:48:b0:31:40:f2:6e:ef:
10:2c:ea:90:82:d6:1b:6a:0f:6f:85:3d:ba:4b:a3:a2:8e:1b:
77:1b:83:40:77:ac:f3:0e:51:1e:49:1f:32:e9:e0:8d:d7:0e:
a7:4c:58:32:fd:ea:34:09:d2:05:f8:0b:14:5f:fa:a0:80:4d:
08:bf:46:2f:52:bb:b5:93:9e:62:77:81:06:8c:3b:32:b3:5f:
cf:31:89:07:b5:45:eb:bc:ea:86:f7:47:cc:51:ca:04:e5:18:
25:64:dc:7c:fd:fe:98:3f:c7:b5:9d:3c:06:9d:c0:d4:a8:4d:
3f:5f:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:07:05 2026 by rpki-client