Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: 15zuBiv/viPeMFBD4EQuaTP9RhqGHtyOBCI/MUvSLEI=
Subject key identifier: 3C:8A:9B:98:E0:12:F1:CC:66:6D:16:B3:DC:20:80:12:E0:3D:1B:5D
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 01A08BD5E24619C8737EC15B08B46B9064E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 03F6
Signing time: Thu 10 Sep 2026 15:00:45 +0000
Manifest this update: Thu 10 Sep 2026 15:00:45 +0000
Manifest next update: Fri 11 Sep 2026 15:00:45 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: ut6dvEYcTnobAGWqNBNFmrlo+9ldpQc8su+AOl5Uaes=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:e2:46:19:c8:73:7e:c1:5b:08:b4:6b:90:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Sep 10 15:00:45 2026 GMT
Not After : Sep 11 15:00:45 2026 GMT
Subject: CN=3c8a9b98e012f1cc666d16b3dc208012e03d1b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:21:b3:bb:08:33:98:06:96:3e:a9:83:75:
36:4c:91:3b:95:a7:53:b2:06:63:32:a8:a3:15:c0:
49:d0:e6:74:68:59:56:b6:e9:bc:50:96:b7:74:f9:
e8:00:63:a2:73:61:c1:d9:b4:96:6b:e4:9a:a8:6e:
b4:b7:c0:8d:6f:de:87:34:9f:ef:5c:0d:34:be:2a:
d5:e0:63:c9:4c:c3:e3:60:de:2f:f3:7d:1c:a2:98:
7a:dc:c2:62:43:d1:db:0b:b7:c1:94:ad:4f:93:59:
8a:19:51:e5:1c:c4:21:67:2d:8b:81:3d:f4:59:89:
ff:be:94:ee:40:e8:0c:29:c3:e5:cf:25:39:e0:88:
12:f5:dd:db:52:3b:35:8d:6b:ac:46:30:8f:e5:cd:
ce:4d:77:8c:bf:68:15:c0:cd:86:17:30:d8:9f:8f:
38:46:a4:ad:04:83:9f:f6:7b:84:af:a4:ed:8b:fa:
c6:c1:dd:47:6c:87:f8:7a:e7:2b:91:ff:16:15:89:
7c:71:7b:58:84:2a:40:3d:79:27:40:1e:73:81:50:
81:b9:71:1e:02:ed:79:c3:10:0f:0d:10:19:aa:ee:
de:c3:e0:70:6a:3f:97:df:e9:56:70:9c:4e:4a:65:
ee:c2:f3:00:35:90:5d:89:95:70:f0:98:1d:9d:70:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:9B:98:E0:12:F1:CC:66:6D:16:B3:DC:20:80:12:E0:3D:1B:5D
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ee:8d:27:30:44:1b:20:5c:20:8e:3c:6c:2e:25:8a:74:83:
7d:ba:0f:b8:b8:3e:6f:01:64:b2:37:08:82:94:f1:eb:d8:33:
1d:b8:56:e4:bd:c2:9b:bc:cf:d4:bb:26:59:71:94:66:c9:85:
aa:5b:93:d1:8d:fb:5d:c0:c4:88:35:ec:65:40:78:30:ec:6e:
54:0e:1a:fd:b0:3c:b8:52:3f:8f:28:7f:61:3c:fa:64:8b:ec:
32:73:2d:65:a9:15:8f:dd:9b:49:ef:00:be:07:cc:69:95:83:
3a:ac:11:e2:4d:4e:95:41:54:f0:b3:af:a0:81:81:3c:bb:1e:
2c:bd:98:9c:52:1b:99:8e:5a:ac:3c:81:5d:f8:20:e8:e5:7c:
47:6b:7d:86:a8:82:76:1c:93:7c:7d:7e:22:7d:e7:2a:6a:91:
e2:35:7a:a3:14:05:75:59:3a:ce:a1:af:cb:f6:51:72:cc:20:
05:8f:16:71:90:24:54:ff:09:0b:61:79:04:98:d9:64:a3:36:
74:3e:68:80:54:4a:7f:d7:38:d2:6a:7c:3c:f2:2f:56:20:d1:
7e:89:34:ae:aa:56:8c:e2:cf:c8:0f:05:aa:cc:46:02:44:05:
7f:8a:85:04:a8:2d:3e:3e:3c:d8:68:85:ef:d5:27:c0:8b:a5:
2c:94:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:08 2026 by rpki-client