Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: QafE0yg7d/vw6cpwtheXUsuUlgLwetYUe0dFOuEpVHo=
Subject key identifier: 48:8D:2F:E8:99:E0:C9:50:67:AE:5E:BE:78:45:37:65:23:2C:F9:66
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 01A18CE6561807529BC0DA4B8779F336866E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 13:01:07 +0000
Manifest this update: Fri 30 Oct 2026 13:01:07 +0000
Manifest next update: Sat 31 Oct 2026 13:01:07 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: ZzQC048lJVamAEOVSLby2kpWSHEdJmFBVtjCQCmwm5Y=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:e6:56:18:07:52:9b:c0:da:4b:87:79:f3:36:86:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Oct 30 13:01:07 2026 GMT
Not After : Oct 31 13:01:07 2026 GMT
Subject: CN=488d2fe899e0c95067ae5ebe78453765232cf966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2b:17:62:f4:25:aa:f6:16:29:e9:5c:64:2a:
d7:bb:9e:91:0b:e6:ad:a6:69:5e:96:35:ab:69:3d:
5b:e6:18:19:29:67:77:a8:c5:e1:04:1c:12:05:b8:
8a:af:a3:11:0b:8e:b5:e0:c8:64:42:56:f6:64:c7:
89:b2:b0:44:1e:25:97:b2:92:d3:1d:f2:84:29:6b:
f3:bf:01:e8:6e:09:db:76:3a:90:f3:f8:c0:18:bb:
d9:eb:80:66:5e:46:fb:e3:28:5e:92:68:ea:b5:b2:
c3:a5:8b:69:50:60:a5:34:a4:c2:b5:ec:ed:26:5b:
7b:1d:47:9b:e9:ea:a1:00:66:64:6f:2e:ca:6f:2e:
15:da:6a:b8:c9:c7:67:eb:fa:b0:f4:90:99:95:72:
cc:ab:9e:b7:2f:15:7c:20:f6:b7:07:84:c5:0a:06:
1d:d0:7f:87:83:b9:f8:cc:79:6b:99:65:fe:7e:cf:
e1:90:5a:28:69:62:69:6e:fc:99:e0:19:cc:e9:39:
d8:e8:c5:89:0e:71:5b:e1:57:9e:a0:7f:cc:86:cd:
e2:80:dc:44:b0:b1:1b:8b:e0:f5:cd:ae:b1:2d:fb:
fe:5f:75:6f:b4:fe:6d:55:71:25:34:ae:0f:74:c1:
63:fc:fa:12:39:b7:85:41:0d:63:71:33:12:b4:ff:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:2F:E8:99:E0:C9:50:67:AE:5E:BE:78:45:37:65:23:2C:F9:66
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e3:a6:52:2a:6a:d0:10:c1:c1:1f:78:19:fb:32:e7:a3:70:
ef:73:8a:09:41:85:61:aa:59:ca:97:bd:63:e5:53:7e:7e:c1:
16:f7:1b:34:f4:70:fb:84:42:17:ad:3c:80:3f:a5:2b:17:83:
50:6c:c4:9f:f5:58:5b:92:e9:95:77:5e:c5:83:51:50:cb:95:
cf:0a:73:15:b4:82:cc:7d:37:2f:8b:0f:84:ff:5b:07:1a:a4:
ad:4d:16:fa:bc:1a:e0:35:1f:5e:cc:95:6f:31:25:f1:7a:9a:
eb:15:a4:0f:e6:b8:97:df:0e:e4:c0:be:f9:1e:d4:32:65:d4:
fd:a0:c4:91:d1:06:64:e8:1d:ef:27:63:23:c9:ef:8b:98:e2:
73:7c:66:63:69:14:67:0f:97:6a:4f:3d:db:ff:d7:1e:6a:f3:
58:80:f2:d5:54:33:05:a8:aa:d6:21:23:2d:28:70:ba:05:b3:
1e:1b:6e:60:27:ec:5f:b9:89:05:01:d8:28:ad:bb:8e:9e:de:
5b:92:c3:83:4d:49:61:6f:cf:af:f1:3b:77:9c:00:e7:7f:82:
d3:25:a2:d4:32:da:d6:4e:2c:70:d0:0e:db:ce:21:2a:d9:2f:
35:fb:24:31:fc:85:29:ad:9a:91:b1:9f:c9:ec:1f:21:c7:ec:
34:53:a0:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGM5lYYB1KbwNpLh3nzNoZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjFlMDlmMGU2ZWQ4OTFhZDE3ZDZjZTRhM2M3MzI4ZDc1
OWI0YzgwHhcNMjYxMDMwMTMwMTA3WhcNMjYxMDMxMTMwMTA3WjAzMTEwLwYDVQQD
Eyg0ODhkMmZlODk5ZTBjOTUwNjdhZTVlYmU3ODQ1Mzc2NTIzMmNmOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7isXYvQlqvYWKelcZCrXu56RC+at
pmleljWraT1b5hgZKWd3qMXhBBwSBbiKr6MRC4614MhkQlb2ZMeJsrBEHiWXspLT
HfKEKWvzvwHobgnbdjqQ8/jAGLvZ64BmXkb74yhekmjqtbLDpYtpUGClNKTCtezt
Jlt7HUeb6eqhAGZkby7Kby4V2mq4ycdn6/qw9JCZlXLMq563LxV8IPa3B4TFCgYd
0H+Hg7n4zHlrmWX+fs/hkFooaWJpbvyZ4BnM6TnY6MWJDnFb4VeeoH/Mhs3igNxE
sLEbi+D1za6xLfv+X3VvtP5tVXElNK4PdMFj/PoSObeFQQ1jcTMStP81YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiNL+iZ4MlQZ65evnhFN2UjLPlmMB8GA1UdIwQY
MBaAFCPx4J8ObtiRrRfWzko8cyjXWbTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85NTVlZDEtOGI0MC00MTg1LTg0YTkt
MmRkY2Y1NmE3NjNlLzEvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85NTVlZDEtOGI0MC00MTg1LTg0YTktMmRkY2Y1NmE3NjNl
LzEvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguOmUipq
0BDBwR94Gfsy56Nw73OKCUGFYapZype9Y+VTfn7BFvcbNPRw+4RCF608gD+lKxeD
UGzEn/VYW5LplXdexYNRUMuVzwpzFbSCzH03L4sPhP9bBxqkrU0W+rwa4DUfXsyV
bzEl8Xqa6xWkD+a4l98O5MC++R7UMmXU/aDEkdEGZOgd7ydjI8nvi5jic3xmY2kU
Zw+Xak892//XHmrzWIDy1VQzBaiq1iEjLShwugWzHhtuYCfsX7mJBQHYKK27jp7e
W5LDg01JYW/Pr/E7d5wA53+C0yWi1DLa1k4scNAO284hKtkvNfskMfyFKa2akbGf
yewfIcfsNFOg4w==
-----END CERTIFICATE-----
Generated at Fri Oct 30 18:06:34 2026 by rpki-client