Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: bIXyuOn6jIhkbjSP8GsFvnWv3JwUE96/QIPlJxgPyDU=
Subject key identifier: C9:52:70:5B:C6:04:DD:EA:C1:7E:29:94:5D:66:9F:55:E7:D0:C6:AB
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 01A06F8368344A55337BF7EE8035BE2422D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 10F6
Signing time: Sat 05 Sep 2026 03:01:17 +0000
Manifest this update: Sat 05 Sep 2026 03:01:17 +0000
Manifest next update: Sun 06 Sep 2026 03:01:17 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: EqxCUN3HyBE4RI7cth1yN07tE/OM3BIIjIrdGn0u9p0=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:68:34:4a:55:33:7b:f7:ee:80:35:be:24:22:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Sep 5 03:01:17 2026 GMT
Not After : Sep 6 03:01:17 2026 GMT
Subject: CN=c952705bc604ddeac17e29945d669f55e7d0c6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:3f:9d:83:69:69:81:ed:f2:83:e8:26:72:
f6:2d:1c:58:1d:58:9e:3c:ac:3a:49:1a:55:1d:e3:
76:83:1b:0e:37:0a:e2:a3:bc:98:bd:e8:64:45:b0:
da:1f:2a:55:da:f3:81:5e:83:69:44:67:5f:92:e2:
f0:c6:3c:b9:e6:3b:dd:61:80:8d:70:ff:71:0f:d0:
cf:11:c9:c6:f0:d7:37:2d:65:dd:1c:80:58:79:10:
f5:6e:d9:b7:78:6a:69:7a:cd:03:38:99:65:69:b5:
1d:9c:0c:99:1f:d0:1e:fc:cf:4b:81:c5:18:82:5b:
a4:45:64:ff:e2:5b:d9:1d:79:88:60:8a:00:46:af:
9e:b9:80:53:1b:1d:64:b6:16:92:5e:04:9f:e0:52:
78:e6:90:1e:8a:05:3b:e7:7b:6b:c8:8b:ba:4c:33:
20:96:ba:1c:f1:fc:ec:db:51:c9:a0:c7:45:72:f8:
6e:39:af:c6:89:a2:26:3a:be:1c:2f:e7:81:6e:e9:
5d:83:2f:92:65:52:52:c3:21:01:8b:c7:1a:3f:ca:
0b:15:fd:82:28:c8:27:7c:ac:7e:61:3a:5f:b2:16:
fd:4c:62:5c:61:79:c2:4a:a0:27:8d:32:76:c8:3a:
29:b9:18:79:d5:f5:42:75:5b:cf:4c:62:22:66:79:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:70:5B:C6:04:DD:EA:C1:7E:29:94:5D:66:9F:55:E7:D0:C6:AB
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9e:73:48:99:93:3b:5c:96:d8:51:9a:2e:58:c3:43:69:ae:
e2:ca:cd:dc:41:09:26:ba:bf:35:8c:8b:46:96:b6:ed:6c:df:
2a:88:e5:86:79:67:c1:b6:17:5e:c0:76:fd:08:f3:ac:65:85:
e5:bd:a2:16:96:01:d8:d0:35:e8:fe:bc:35:48:13:1e:5e:6b:
12:c1:7a:ae:8e:fd:e1:c8:ef:41:f8:c8:c3:1a:f7:d9:80:f9:
cc:bc:95:a2:bb:76:57:81:72:42:79:bf:b9:8b:49:ec:c6:5e:
f4:9a:f5:ae:5e:21:7c:e5:e0:6b:75:51:d4:56:b2:81:50:9d:
5a:a1:cd:42:6c:66:a8:3c:7c:63:52:22:4e:45:23:e9:d6:14:
df:40:3d:02:fe:1d:62:95:3a:cc:b1:1a:5c:d8:6a:26:7a:cc:
49:6d:93:a6:9a:6d:93:3c:9d:1a:97:d7:ef:38:3d:04:e9:4e:
ad:fe:02:69:2f:29:51:05:bf:10:89:b1:a2:f7:36:1a:52:3c:
d7:b1:1b:51:77:98:1c:85:cd:7a:14:87:12:6a:49:bf:0d:d1:
dc:7d:4b:f4:c8:f1:36:12:48:2e:76:6f:f8:d7:6a:5f:37:c1:
40:0b:71:e9:ea:3a:94:36:d7:6a:6f:74:15:32:f1:ec:9c:6b:
a3:bb:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:38 2026 by rpki-client