Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: wRaCCE88wfebXstali736WFayY4LjaZzvJYD0VV2v1Y=
Subject key identifier: F1:A1:7C:0F:28:2D:28:97:FD:F8:83:89:9D:43:98:69:FF:16:FC:03
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01A02769E86D9B5063DC08A3D283E432C703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1A18
Signing time: Sat 22 Aug 2026 03:00:47 +0000
Manifest this update: Sat 22 Aug 2026 03:00:47 +0000
Manifest next update: Sun 23 Aug 2026 03:00:47 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: WZTktyOh28dYwcqPazvbQYzG4hnXtxi/dT79L8Tf6aQ=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:69:e8:6d:9b:50:63:dc:08:a3:d2:83:e4:32:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Aug 22 03:00:47 2026 GMT
Not After : Aug 23 03:00:47 2026 GMT
Subject: CN=f1a17c0f282d2897fdf883899d439869ff16fc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:c2:a9:c8:9a:67:16:d5:14:4e:06:5c:fc:
e4:2b:b0:17:d2:5d:61:93:97:4b:5b:c4:e8:66:e6:
0c:78:39:11:e1:13:30:2f:e8:26:30:f9:c6:f8:94:
0a:fe:10:0c:5c:c7:a5:39:93:fa:9f:90:cc:f0:74:
2d:c8:76:23:bf:89:ea:da:a3:eb:ad:45:2a:d3:92:
4e:56:1a:09:66:71:39:02:40:e1:3c:41:d6:6f:9a:
e2:c0:45:6b:9f:36:2d:39:d5:ef:32:bc:17:c0:a9:
47:d3:55:25:13:86:9a:29:06:85:37:bc:58:3d:52:
91:6e:49:18:05:b0:c7:b4:bc:80:b6:dc:d2:1d:9e:
92:2b:ce:f8:24:57:6c:88:47:64:fc:17:4f:98:2a:
d3:3e:73:78:25:c9:46:2a:90:95:55:d6:29:3d:a0:
70:24:32:4c:98:b3:d6:c9:9b:50:19:b8:f8:be:b7:
ce:eb:1f:63:37:4c:55:a3:c4:45:43:92:2a:e7:d2:
c8:eb:7a:62:db:32:d3:22:6a:c1:fe:b7:2f:22:90:
07:fb:83:8f:57:69:d1:f5:6c:5a:54:04:b8:02:20:
11:fe:7d:93:6b:f9:a0:41:39:9d:ed:17:ad:38:2b:
6e:7a:1d:57:13:68:18:ee:48:34:0c:78:85:6e:c8:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:7C:0F:28:2D:28:97:FD:F8:83:89:9D:43:98:69:FF:16:FC:03
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:17:49:64:54:49:fb:3f:1b:2c:cf:60:1f:9a:f9:cc:fe:
47:de:53:0c:3e:94:ab:cd:45:b4:f1:26:5c:0e:6f:7c:9e:b4:
eb:d2:74:8a:dd:e6:04:43:6a:57:5c:45:98:9d:80:97:60:2f:
44:2c:62:46:c0:e1:8f:ee:43:97:d0:c2:f9:e6:b0:63:43:b6:
12:dd:f0:35:54:7b:dd:6f:33:41:4f:34:1e:40:ea:11:6d:49:
75:c5:00:28:10:d1:49:2e:50:d1:ed:a7:7d:7f:d1:18:72:f3:
55:6a:ae:8e:c0:bf:68:12:18:18:9f:35:71:15:73:14:1a:32:
26:b5:7c:ca:3f:70:c6:4d:f1:2a:07:fc:38:1e:ab:33:79:b0:
11:5a:a5:f7:60:d2:20:58:ef:e1:ad:01:17:64:40:68:fb:d4:
0a:f5:2c:97:e2:ec:78:48:db:e4:f5:96:76:bb:be:b7:fd:cf:
ed:86:01:dc:28:30:15:98:5d:e5:82:0e:95:d5:e7:e8:85:87:
02:3f:e9:7e:ef:ad:5c:52:67:08:ad:c6:f1:68:9b:cc:70:1f:
e9:c9:34:73:07:2b:b4:f0:6d:1d:69:37:74:a2:2b:66:a4:18:
7e:1a:e9:dd:bc:ab:d6:06:39:6b:f4:55:44:8e:9b:e3:55:97:
71:4b:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:57:12 2026 by rpki-client