Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: NCL6eetnlQL9gXe4MGt1uru40OfyBA/u7arrAO8AUOQ=
Subject key identifier: EC:8B:E4:E9:06:AD:44:A5:D0:57:FD:01:A1:7E:51:5D:FA:50:02:6A
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01A131EB5CDF047547B9453939B16E94C17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1AA2
Signing time: Mon 12 Oct 2026 21:01:10 +0000
Manifest this update: Mon 12 Oct 2026 21:01:10 +0000
Manifest next update: Tue 13 Oct 2026 21:01:10 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: 1Xj+ZJLy/pgegKIxWvW4d7G4upLKDthIZlzTIPnIAOg=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:5c:df:04:75:47:b9:45:39:39:b1:6e:94:c1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Oct 12 21:01:10 2026 GMT
Not After : Oct 13 21:01:10 2026 GMT
Subject: CN=ec8be4e906ad44a5d057fd01a17e515dfa50026a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:08:0b:8f:28:76:77:5d:f1:f7:19:30:ab:
47:00:45:2d:73:9d:86:d3:bc:f7:01:b2:83:1c:f0:
a5:99:32:69:a5:76:b7:95:cd:fb:89:53:4c:99:00:
0a:b3:19:65:e2:ce:14:c4:02:ab:a4:6c:d0:45:1c:
d6:e1:8e:de:ca:37:8b:31:9f:55:77:e8:d3:13:a8:
cf:3e:9c:57:db:de:3f:22:f5:2f:29:75:8f:31:fd:
ea:38:cc:0d:e9:b2:54:5b:9a:7b:8e:1f:f5:6c:a8:
0c:7c:76:bb:df:61:c4:95:fa:c0:dd:10:a7:64:ff:
b2:2d:7e:e0:b7:fd:37:bb:5c:66:99:51:50:b3:a4:
49:41:42:9e:d5:db:34:db:98:1b:2e:6e:9d:47:49:
5e:54:59:25:49:41:3f:da:4c:3a:b5:9a:82:be:c2:
1f:f1:68:5c:ff:5b:92:af:08:1c:6d:ba:d1:bc:1e:
91:0e:d9:27:13:db:24:43:be:11:f2:f7:73:6f:b4:
ac:71:40:79:c2:6a:7f:d6:ca:35:84:0a:96:54:f5:
82:d6:ec:9d:93:69:13:18:cf:f2:97:55:58:8c:6a:
26:18:41:a1:d4:7e:b2:0e:58:ca:9f:73:18:65:f0:
88:99:08:89:1b:07:6c:6d:9e:cb:f3:66:c0:40:cc:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8B:E4:E9:06:AD:44:A5:D0:57:FD:01:A1:7E:51:5D:FA:50:02:6A
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:50:83:bb:21:d0:a5:84:f4:59:81:e5:c4:bd:af:b5:4d:25:
c7:b0:b4:3d:69:63:f3:28:36:da:5e:ac:56:6a:38:a3:cf:dd:
18:35:a8:a5:fa:8f:24:e5:65:68:ef:d7:69:0e:bd:c3:23:a5:
a9:86:9a:50:5e:84:e1:35:11:63:2c:82:14:b0:68:da:53:e0:
30:e4:b6:af:b9:0f:8b:ab:73:4d:b8:db:57:10:36:e0:05:e5:
c5:fb:96:82:1b:25:a6:89:24:90:7d:97:1c:7f:fa:03:62:17:
40:8f:74:0b:8e:b3:06:b6:05:80:5c:45:ca:8f:3f:7c:52:7d:
62:44:85:c2:58:a5:6d:70:f7:14:77:db:5e:01:1c:73:6b:12:
17:8b:dc:3d:ae:48:26:4d:a9:67:1a:6a:2e:e5:42:39:16:06:
60:36:08:31:36:c8:9f:6c:68:4e:4e:50:0d:30:0b:4b:74:0a:
ec:ec:55:93:99:c8:30:8a:b8:21:6b:9e:50:80:50:11:a6:f3:
7d:7e:96:f8:05:34:9d:93:5d:14:50:83:a8:92:6a:f4:6d:8a:
8b:58:e0:f8:53:06:61:c1:7d:6c:e0:8b:64:51:80:4c:8a:41:
45:60:e2:f6:54:b2:2f:a8:21:3f:53:ee:06:60:61:9d:21:ea:
07:0d:c2:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEx61zfBHVHuUU5ObFulMF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1
NWFkYjYwHhcNMjYxMDEyMjEwMTEwWhcNMjYxMDEzMjEwMTEwWjAzMTEwLwYDVQQD
EyhlYzhiZTRlOTA2YWQ0NGE1ZDA1N2ZkMDFhMTdlNTE1ZGZhNTAwMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8gIC48odndd8fcZMKtHAEUtc52G
07z3AbKDHPClmTJppXa3lc37iVNMmQAKsxll4s4UxAKrpGzQRRzW4Y7eyjeLMZ9V
d+jTE6jPPpxX294/IvUvKXWPMf3qOMwN6bJUW5p7jh/1bKgMfHa732HElfrA3RCn
ZP+yLX7gt/03u1xmmVFQs6RJQUKe1ds025gbLm6dR0leVFklSUE/2kw6tZqCvsIf
8Whc/1uSrwgcbbrRvB6RDtknE9skQ74R8vdzb7SscUB5wmp/1so1hAqWVPWC1uyd
k2kTGM/yl1VYjGomGEGh1H6yDljKn3MYZfCImQiJGwdsbZ7L82bAQMy8MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyL5OkGrUSl0Ff9AaF+UV36UAJqMB8GA1UdIwQY
MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt
MGY4NzZhYmQxZTMwLzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw
LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlCDuyHQ
pYT0WYHlxL2vtU0lx7C0PWlj8yg22l6sVmo4o8/dGDWopfqPJOVlaO/XaQ69wyOl
qYaaUF6E4TURYyyCFLBo2lPgMOS2r7kPi6tzTbjbVxA24AXlxfuWghslpokkkH2X
HH/6A2IXQI90C46zBrYFgFxFyo8/fFJ9YkSFwlilbXD3FHfbXgEcc2sSF4vcPa5I
Jk2pZxpqLuVCORYGYDYIMTbIn2xoTk5QDTALS3QK7OxVk5nIMIq4IWueUIBQEabz
fX6W+AU0nZNdFFCDqJJq9G2Ki1jg+FMGYcF9bOCLZFGATIpBRWDi9lSyL6ghP1Pu
BmBhnSHqBw3CAw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:11:14 2026 by rpki-client