Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: w3fg/DPmJxZk7rytDcZbk0cORwsTq1lFR+O/Cx9wr+k=
Subject key identifier: 5C:D8:0A:3D:1F:75:80:46:F7:4B:2F:95:F7:CD:65:C5:1E:61:94:DA
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 01A107017729BFAC9A7E9E6525DFCF0CFC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 13:01:38 +0000
Manifest this update: Sun 04 Oct 2026 13:01:38 +0000
Manifest next update: Mon 05 Oct 2026 13:01:38 +0000
Files and hashes: 1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: 6BgeJRK0MAJ7HhJTtLlAWo+q3cezHUjvGB4Eb7Vstjg=)
2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
4: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (hash: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=)
5: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:77:29:bf:ac:9a:7e:9e:65:25:df:cf:0c:fc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Oct 4 13:01:38 2026 GMT
Not After : Oct 5 13:01:38 2026 GMT
Subject: CN=5cd80a3d1f758046f74b2f95f7cd65c51e6194da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:74:2f:c1:9e:c8:dd:8c:a4:39:5d:be:86:
0d:5b:ca:a9:4e:eb:28:5f:1f:dc:14:79:ba:70:59:
58:2b:9b:5d:cc:7f:6b:56:d0:9f:20:f4:0e:40:ee:
df:5d:19:e6:bb:33:1c:4f:c0:b1:74:55:5c:2e:61:
f5:ea:c9:bc:4a:e9:ff:3b:bc:db:13:63:b4:ae:f1:
13:4b:27:7a:bc:8e:c4:22:67:6c:2b:e9:79:39:0f:
a7:bc:e2:58:cd:54:7a:52:28:44:d2:c1:0f:b8:f2:
18:a3:36:c7:04:78:2a:43:6f:ab:20:c3:32:7a:7a:
c2:5e:49:f2:8c:ea:09:e0:42:d8:14:0d:5f:96:b9:
92:6c:93:cc:a4:d5:41:40:53:a5:f1:76:04:3a:20:
fa:6d:64:a9:b4:40:c7:92:a1:1e:df:c8:c9:2f:db:
5f:e2:cb:a4:b3:cd:1e:e6:f0:15:13:5f:0f:af:03:
c0:79:85:80:eb:48:f3:89:d3:cf:29:db:b3:82:10:
9d:64:ae:28:9b:e9:bd:1a:45:07:00:ef:b0:87:04:
7c:35:7b:f2:c5:f9:1f:c2:30:b6:58:21:49:9c:40:
e8:8d:7c:1e:61:fa:a1:1b:7e:74:e3:a6:7a:7b:a1:
c5:61:df:99:d2:21:26:d9:28:9c:75:5b:ed:40:4e:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:0A:3D:1F:75:80:46:F7:4B:2F:95:F7:CD:65:C5:1E:61:94:DA
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b6:6c:e1:47:0b:25:d8:fb:e7:3e:52:62:c7:74:e1:c1:49:
1a:4d:5e:5c:b6:07:b7:f6:f6:fb:67:d3:22:78:41:6d:84:5f:
7e:a5:7d:cb:b5:fa:f5:18:40:de:1f:63:8e:5d:30:d5:9f:71:
96:1b:e1:ea:a4:64:78:e8:4e:5f:a5:fb:f5:fa:a7:79:bc:e7:
63:e3:57:5d:5d:dc:f3:79:49:87:54:41:7e:11:4a:e9:14:f1:
05:e1:73:dd:08:5c:9b:e9:cc:e9:bd:15:bb:ed:db:ae:d5:e0:
a1:92:60:85:83:dd:e2:b1:b4:58:94:f3:d2:c7:46:2d:e2:8a:
7f:30:b3:17:ef:ad:c9:5a:56:24:10:b6:d5:e9:c2:e0:50:94:
e3:a1:ff:0a:87:11:16:1e:57:cf:7c:1b:af:a0:6a:20:b1:76:
e1:82:ae:a1:61:76:63:09:83:65:42:46:bc:ce:19:48:99:4d:
16:ec:92:1c:b8:95:ad:10:2c:f2:02:69:e8:a7:d6:b6:db:4e:
73:aa:8a:94:2e:b3:02:a6:6c:1a:7b:7c:05:01:24:46:0a:f1:
e1:2a:dd:31:2e:53:2e:98:8f:86:6f:85:74:70:e6:02:15:aa:
e5:a5:2c:95:9c:a2:36:5a:67:e1:79:51:9d:82:47:69:7f:9b:
a7:b1:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:05:18 2026 by rpki-client