
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
File: I2nPaT78ECyTf6ynugnMyuxXSUg.mft (raw, json)
Hash identifier: qyoCrEAvY+1jFsda6MPxhDuvW9fvMCAqLV2Ipqtk4Vg=
Subject key identifier: FC:14:13:AB:99:F4:29:EA:D3:D8:21:09:CA:1D:2E:9A:2E:EF:37:EA
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A1551C4B771D65BB19741D9566B1F5ECA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
Manifest number: 25
Signing time: Mon 19 Oct 2026 17:01:19 +0000
Manifest this update: Mon 19 Oct 2026 17:01:19 +0000
Manifest next update: Tue 20 Oct 2026 17:01:19 +0000
Files and hashes: 1: 1AzEpxlToHia7ywPgnnpmJzFraA.roa (hash: qYOvqOXpzVPmF6Jbc9HoDoRx2gEtj+0UY6m/irYtqjA=)
2: I2nPaT78ECyTf6ynugnMyuxXSUg.crl (hash: 672kehy5ZTXofkAwPaKxzsi9JlplUtrNcAi/0u0KIWI=)
3: Ky30bgCFAJiWkVqMq906lb5RTj4.roa (hash: n8TlDhgLBlnlOh2uvWKa+LVsP820Oh1C+WMR73t3uaY=)
4: PxnTuznRRPnTtD95MBnkEkGIaX4.roa (hash: X1si/MvNuRKn6WYCzUjbbp5bWEtLkuTOj59peP9essI=)
5: _yaKaBJToAURUuy5J_2ZX4emX3Q.roa (hash: vHbpbkcmG93GMQUubXccTbTZeqYaiq3hArr0LKitXxY=)
6: t2eWHO6r_kmQaoKvKqbpMacuacE.roa (hash: FvpEwjPcGwIB6Jh0TDr3BNv2jGu+NiTIDWMXLmMwpi0=)
7: vMczrGi6ORE-yZOgy2L6w0bjkXo.roa (hash: UyMf8i98c5uUzf93NivYGmFTli1Mo2kNliLFP7sjKr0=)
8: vzeKzOkY-DTtAOj_7QBNyv6Yx8g.roa (hash: fudVMhp+cSBY7q1Syleky8IDgMK8QLdzt4Ad5bcZsDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:4b:77:1d:65:bb:19:74:1d:95:66:b1:f5:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Oct 19 17:01:19 2026 GMT
Not After : Oct 20 17:01:19 2026 GMT
Subject: CN=fc1413ab99f429ead3d82109ca1d2e9a2eef37ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:2d:27:99:db:36:76:13:55:43:59:d5:79:
67:8f:ff:df:90:c7:8c:fc:33:3f:2d:ee:dc:87:68:
a0:a4:7e:5d:f3:98:6b:60:8b:1d:3d:10:18:be:a4:
37:9a:7e:2e:8c:22:9a:b8:be:1e:8b:a8:d3:f3:6b:
4b:b7:1c:b5:b2:f6:1c:e5:2d:26:42:7f:31:b8:1e:
c3:2a:dc:d2:9d:0d:78:11:3a:99:17:9b:28:07:dd:
37:ea:92:02:f7:cc:50:dd:ed:9a:74:8e:15:2e:4a:
d9:09:55:06:5e:33:6f:c0:73:53:4a:53:a1:d3:18:
cb:c1:7b:4a:c5:eb:47:f6:c8:43:ae:20:a4:b2:ed:
dc:87:1a:28:fa:48:22:95:9d:bc:c7:08:e0:98:22:
88:7e:c5:c9:39:e3:fe:3a:fc:16:1c:8d:9a:05:dc:
34:06:5b:df:e4:34:67:85:6e:91:bd:22:f7:e5:00:
82:23:a4:7f:09:05:50:26:6a:8a:a0:84:3e:61:ea:
15:be:cf:7f:0d:5f:a7:07:7a:04:06:43:03:ee:9f:
81:66:44:9a:50:31:45:a1:b2:93:d9:66:4b:a2:c4:
3d:a5:71:e4:7b:c4:3d:73:e4:a1:02:01:63:46:31:
f2:04:db:e5:38:18:5f:06:eb:16:a9:0d:39:ee:c7:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:13:AB:99:F4:29:EA:D3:D8:21:09:CA:1D:2E:9A:2E:EF:37:EA
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2f:44:fc:65:83:1d:f6:2a:44:e9:c7:1c:df:e4:82:c6:55:
20:3e:a4:30:2d:fd:55:c4:41:4d:16:8a:0f:36:05:28:39:b6:
e5:3a:b7:0f:4c:e3:5f:8f:16:78:41:80:9b:3f:b4:a0:17:81:
db:8e:80:89:73:62:07:03:1b:db:e3:0e:d2:6a:76:e9:0f:35:
fd:f9:f9:39:11:d2:65:4d:7b:61:51:1b:96:11:65:46:e6:08:
48:64:c4:eb:46:6e:3e:5f:11:9f:c2:ce:33:46:50:4d:d0:07:
a6:42:1d:4b:d3:60:a8:ff:6b:32:7b:4c:26:b1:7a:18:3c:91:
d1:09:81:28:37:97:56:6f:50:3b:e0:b9:c0:e3:2b:af:2c:58:
5b:04:5a:bc:5f:3c:a2:48:9e:7f:c3:8d:09:3d:30:a8:3d:21:
54:f8:c6:e9:61:b1:cd:2c:38:a0:9c:d8:79:5c:0f:29:94:92:
7e:86:c3:7c:97:97:09:26:be:db:e4:06:cc:5c:9d:ee:52:fe:
06:d3:7d:68:57:96:68:22:03:71:90:65:eb:21:23:a7:eb:fd:
a6:96:c3:5b:88:da:1f:48:f5:30:ea:69:47:03:e7:ef:8a:32:
d1:5b:63:42:97:21:9e:46:13:97:f9:a4:de:bd:ae:65:bb:bc:
54:3e:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:15 2026 by rpki-client