Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: GgvHt776vdsPHG4nuCEeSZj98B9hHOAx0n4Iys4BQ9Y=
Subject key identifier: 68:8A:A5:88:92:14:3F:96:11:72:CF:F5:5D:25:B6:5C:02:31:A2:67
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 01A0F343F7DDDA5F1FEBF27A05DE0160A20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 17:01:52 +0000
Manifest this update: Wed 30 Sep 2026 17:01:52 +0000
Manifest next update: Thu 01 Oct 2026 17:01:52 +0000
Files and hashes: 1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: hLIt+wgDInv/dsSHukjJgVcWpzWUL6Lr8Xf70vPo1pY=)
2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 17:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:f7:dd:da:5f:1f:eb:f2:7a:05:de:01:60:a2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Sep 30 17:01:52 2026 GMT
Not After : Oct 1 17:01:52 2026 GMT
Subject: CN=688aa58892143f961172cff55d25b65c0231a267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:ee:12:2a:9f:96:62:7c:2b:a3:c8:2a:0d:
93:98:af:80:85:73:81:f3:dc:1c:89:53:3f:f4:e2:
25:04:96:0a:e5:21:d8:80:7f:db:2b:97:3b:15:23:
a4:87:d7:d6:22:41:2f:cc:7d:c5:a9:92:25:48:3a:
e0:85:18:d2:23:d0:34:01:06:0e:ea:6d:45:08:d3:
60:b8:ba:a7:43:b5:0a:6f:5a:93:be:c5:ec:46:d0:
84:04:ef:06:f5:bf:17:bd:67:2d:cb:88:c5:a9:3b:
b3:fb:b0:5e:e1:ee:0e:68:6a:8d:1d:f8:9b:24:f5:
1e:df:2f:b4:f1:d3:6a:a5:ee:73:0f:5b:fc:20:f6:
33:3f:29:b4:cd:29:c4:83:b7:81:bc:a4:80:19:10:
2d:ab:ba:60:41:92:19:22:89:1a:01:8a:96:72:c3:
7a:a7:73:10:ba:8c:35:9b:25:83:b6:f5:a2:71:1d:
3a:b3:4e:57:24:bd:d5:15:da:88:0e:2b:f2:bd:52:
e7:fe:25:b2:17:c4:3b:56:eb:21:7c:45:91:fd:b8:
ac:5b:95:0b:0b:f0:d7:96:df:42:75:ed:b0:bf:1c:
7b:5f:3f:98:4c:d0:4c:02:69:87:b4:00:c9:26:f8:
28:0d:b1:0e:4e:c6:cd:b6:e6:6f:70:c1:9a:a4:c0:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8A:A5:88:92:14:3F:96:11:72:CF:F5:5D:25:B6:5C:02:31:A2:67
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:13:1f:95:64:a7:67:94:4c:14:c0:39:e2:a7:23:82:5e:ac:
5e:a8:bd:ed:93:da:ec:bc:19:d8:31:de:43:70:7f:b9:67:7d:
0f:ec:ac:89:d4:64:e8:0f:64:bd:34:d9:13:5e:ef:1e:9e:fb:
5b:f9:e4:19:2d:99:08:d6:70:6c:73:c1:08:0c:e0:44:1c:c6:
ef:d8:e4:58:81:47:bc:c2:4a:e6:28:e8:90:a9:f5:3b:6b:be:
e6:6c:12:60:0b:83:b7:6b:54:f2:db:79:19:3e:43:c3:95:9b:
a5:66:01:5c:5f:e9:ec:09:4a:2f:02:13:8b:b0:f6:5f:75:37:
6c:8d:5e:de:92:e0:8d:3b:6b:a0:f7:46:ab:08:f4:19:bb:d4:
dc:e4:7d:77:f7:71:d9:a5:a5:72:1a:0a:25:2f:de:bc:23:fd:
73:42:5e:51:9f:28:f1:76:0c:3c:da:70:73:43:69:24:db:3c:
60:5a:b5:cb:9c:a1:77:b7:a6:af:e2:4d:07:b0:e2:be:d2:67:
9a:b5:81:d7:9a:72:be:cc:18:bf:2a:e8:34:88:33:60:cf:39:
66:92:2b:c7:f4:38:55:80:b2:a1:4d:84:cb:25:b6:1f:ef:ea:
16:b9:c5:f0:06:8c:b0:f0:1e:6a:1f:60:f8:c4:54:7c:0a:6f:
06:ca:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:28:09 2026 by rpki-client