Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: Mso8c0qX6NTqzC4cF47urQuLo0sQGrF6PdypNDkasAQ=
Subject key identifier: 14:B4:5A:21:F9:CE:A5:BF:35:6E:76:A0:8F:28:65:A4:29:7C:24:E9
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 01A1795ED46F922DF05DF1EEE8EC4602ED46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 0471
Signing time: Mon 26 Oct 2026 18:00:20 +0000
Manifest this update: Mon 26 Oct 2026 18:00:20 +0000
Manifest next update: Tue 27 Oct 2026 18:00:20 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: Np+LOz0E+V60g+4xEJiZNptgyXhcuUQ++++++AhjA70=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:d4:6f:92:2d:f0:5d:f1:ee:e8:ec:46:02:ed:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Oct 26 18:00:20 2026 GMT
Not After : Oct 27 18:00:20 2026 GMT
Subject: CN=14b45a21f9cea5bf356e76a08f2865a4297c24e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:62:e3:48:fe:15:bd:1e:98:90:a2:ed:bf:
d6:58:31:29:13:bd:c5:b9:34:f6:08:6e:90:51:82:
d7:da:70:d4:02:41:62:4b:0f:f8:b6:5e:94:cc:cc:
00:56:26:f2:d0:81:15:0e:eb:be:8c:98:b6:bf:8c:
0b:1a:a1:fd:ce:d4:b4:58:6f:4a:54:1e:ef:00:e3:
4f:1d:f4:c4:d1:23:63:fd:f1:6d:1e:8e:cf:31:15:
d4:9d:8f:bf:9e:cc:9a:8c:ed:9c:85:d4:d4:75:8d:
64:65:8a:18:c5:ae:11:b7:64:b0:cc:dc:d5:f3:e9:
e1:26:14:70:f1:62:c8:48:2e:a0:3b:b8:1a:00:da:
05:f3:75:95:8a:cf:96:19:63:3a:28:de:4f:60:be:
e8:a6:00:e1:cd:d0:e7:70:02:a0:57:df:7b:0f:26:
de:27:4b:d0:47:b5:89:05:c2:d0:92:20:81:fc:16:
88:24:da:bc:41:5f:15:a6:b3:1b:f0:11:43:c4:cd:
f4:8e:99:5e:5a:75:b0:98:e1:9e:7c:5c:28:b1:75:
91:78:74:e5:61:e5:3f:fe:5d:c4:60:6c:d2:a8:2a:
11:05:b3:2e:59:3b:86:94:a3:5c:d5:2c:f5:e2:fc:
81:35:83:e0:3c:4e:38:d1:2f:a0:5d:5f:04:93:49:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B4:5A:21:F9:CE:A5:BF:35:6E:76:A0:8F:28:65:A4:29:7C:24:E9
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:da:bc:76:23:65:2f:89:3a:5b:fe:eb:25:55:be:4a:3b:
91:e1:6e:79:70:f6:6a:fe:68:56:93:a5:8d:d1:a5:5c:dd:a6:
d2:cc:4a:50:38:0d:d1:a9:2e:93:3c:c6:29:97:f0:38:a7:45:
cd:73:58:31:60:98:1c:0e:58:a4:8f:96:2a:23:52:5d:2e:60:
6a:fa:74:4a:62:c1:67:e7:cf:a5:53:56:33:bb:9f:d4:4c:09:
56:db:52:11:38:30:f5:72:db:fc:13:bd:17:e1:0f:c3:19:b9:
61:29:6b:48:aa:29:7b:fe:1a:89:1f:74:3c:ce:38:fe:16:61:
dc:f6:3b:8b:07:f7:7a:60:29:dd:b9:d8:1f:a1:9a:ef:28:43:
e4:c6:3a:f0:13:20:b0:f3:a1:34:e2:d0:b1:0e:d7:d0:6a:a3:
05:9b:73:da:6e:cb:ad:4c:6b:41:ca:69:63:4a:83:e5:fe:60:
12:1f:5d:ad:5c:e8:43:5c:16:85:bf:16:80:42:86:9e:d4:60:
69:f5:82:71:0c:6e:72:19:3b:50:c4:c9:ff:29:8d:3b:f3:e3:
45:e5:1a:e3:68:ae:2e:cb:b8:20:f0:4c:a5:2b:bf:10:47:a4:
65:27:1f:13:f4:73:12:8f:79:2e:6c:9d:8a:83:2a:d7:a2:af:
b0:41:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:00 2026 by rpki-client