Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier: MDjMmakANII+z7gd5e8f6rnLKXjQhMBH5LfXJJ60bvw=
Subject key identifier: 01:BC:19:F3:F3:B5:0E:B7:3B:82:15:FD:AF:43:1F:3D:5E:30:D7:47
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 01A11AF4D19892E0500C4FE642387FE5DEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number: 0920
Signing time: Thu 08 Oct 2026 10:00:14 +0000
Manifest this update: Thu 08 Oct 2026 10:00:14 +0000
Manifest next update: Fri 09 Oct 2026 10:00:14 +0000
Files and hashes: 1: DXojyG6Fa76_70LTpGedxCQc75s.roa (hash: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4=)
2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: HwyanIowlKWhCWmNJtWzqGIB9kFJEPBPs93lKrM9Lws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f4:d1:98:92:e0:50:0c:4f:e6:42:38:7f:e5:de:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Oct 8 10:00:14 2026 GMT
Not After : Oct 9 10:00:14 2026 GMT
Subject: CN=01bc19f3f3b50eb73b8215fdaf431f3d5e30d747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:cf:c5:ee:6f:2a:cc:7e:26:41:36:40:12:
92:9e:da:b3:e8:4e:5f:66:7b:6e:58:07:a1:54:3f:
6b:bd:15:87:38:05:39:7d:03:af:4e:b6:3e:54:20:
5b:6c:8b:bf:91:48:41:40:1b:06:e3:85:fb:48:b3:
85:3d:77:2d:6c:63:5b:4b:fc:c1:9d:d0:82:ba:64:
a8:d4:9e:ea:27:fa:e1:92:57:85:6a:fa:98:c0:ad:
aa:a5:5b:9c:f2:44:5f:ed:81:41:e4:66:aa:cf:c9:
7b:03:01:7e:69:dc:c5:3f:7d:90:b5:20:cd:ed:1f:
0d:6f:c8:18:05:7a:c6:b3:f9:18:33:1a:ae:91:37:
a4:87:d5:7c:6a:e8:74:42:1c:97:02:f2:51:d9:cb:
4f:dd:ae:cd:31:03:4f:d8:0e:da:75:f8:1f:6e:5d:
e2:e3:f6:7d:4d:8b:3f:11:55:79:b5:8a:98:07:12:
b6:3d:70:73:0e:9e:57:4f:21:8a:9d:ae:d2:35:19:
0c:8d:62:ba:ee:51:8f:df:f2:b0:f3:ef:74:f5:83:
07:d6:d3:b4:01:14:29:36:62:ae:77:ae:fb:2d:bf:
1a:e1:63:50:ab:f6:15:cc:6b:4a:51:f9:6f:b7:46:
34:1f:af:a6:ad:bc:3d:31:af:c8:ff:cd:52:3c:ab:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:19:F3:F3:B5:0E:B7:3B:82:15:FD:AF:43:1F:3D:5E:30:D7:47
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:38:92:1b:99:da:7c:ef:38:b2:30:cb:ac:0f:93:fa:4a:1e:
c7:c9:31:64:1c:10:4a:d8:44:34:38:d9:0e:85:dd:71:89:a0:
5c:14:63:e4:02:88:b7:67:9b:e2:c5:31:55:d3:78:89:20:fb:
d2:82:cd:69:33:9a:73:01:b2:1d:7a:1a:62:b5:b6:fc:de:80:
11:d0:a0:0e:f4:f5:41:83:4b:e6:f7:bc:79:c0:2e:39:1d:b9:
db:bf:29:99:6a:e5:80:a6:d1:ff:f6:c3:5d:8f:9a:1f:17:14:
be:1e:a4:15:74:cc:be:ab:83:f1:fb:a4:16:88:9b:18:e2:0a:
c7:dc:87:87:43:b5:26:48:1d:8f:67:95:4a:ae:f4:19:fc:3f:
ed:72:dd:11:0a:44:db:7d:98:9d:7c:87:67:fb:16:b8:a1:c1:
cf:69:40:03:b9:91:20:31:a1:96:56:45:24:81:67:b3:ca:52:
b1:c3:c7:0c:0e:91:a9:9d:fb:56:23:4c:ec:ab:89:b2:66:11:
00:d3:7f:4c:35:81:05:1b:ec:6d:2c:7a:bd:bf:60:c9:97:58:
2f:a5:21:fc:86:65:9a:de:59:99:63:df:f2:66:0b:c0:8d:bf:
4f:79:6e:35:87:49:ba:2f:40:5b:a9:bf:58:3e:85:d0:6a:99:
a4:64:57:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:07:19 2026 by rpki-client