Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
File: I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft (raw, json)
Hash identifier: c5FlRA2qLasthWxCV6xvhYJ/nSb3aP8bROW9JE2OxJk=
Subject key identifier: 28:E7:BE:79:6E:38:32:63:24:ED:7B:48:07:E5:87:93:BC:EC:9D:CB
Authority key identifier: 23:8A:C2:B0:77:BB:72:AE:95:50:6F:1B:7D:D7:92:2C:86:93:28:49
Certificate issuer: /CN=238ac2b077bb72ae95506f1b7dd7922c86932849
Certificate serial: 01A17DE118B9A7E863126665C4220C955DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:06 +0000
Manifest this update: Tue 27 Oct 2026 15:01:06 +0000
Manifest next update: Wed 28 Oct 2026 15:01:06 +0000
Files and hashes: 1: I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl (hash: 8tDoRx9Mx13wLUbqRgaSNlKxn4F6JQ+FGtMIKvuv8A0=)
2: ZLiU1atI_HJAqv1dEuEca2LiYK4.roa (hash: wnwFkyBm5yBNEm5NFKbYxok77hCkil5I8o3VMhwKHG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:18:b9:a7:e8:63:12:66:65:c4:22:0c:95:5d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238ac2b077bb72ae95506f1b7dd7922c86932849
Validity
Not Before: Oct 27 15:01:06 2026 GMT
Not After : Oct 28 15:01:06 2026 GMT
Subject: CN=28e7be796e38326324ed7b4807e58793bcec9dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:69:c1:b0:81:e7:6d:61:c9:14:e1:ff:b1:
d6:ab:c3:e8:d5:bf:57:02:92:65:3e:b0:83:68:99:
d5:4e:d5:8e:26:41:6a:80:90:ee:08:a8:a4:9d:75:
bf:b1:0c:72:7f:18:0c:74:58:f0:a9:90:32:98:22:
68:40:b8:3f:ca:64:b2:14:a9:4a:86:87:b7:e3:14:
56:fe:4d:2d:50:a9:56:5c:44:6e:e4:3f:81:1a:ae:
dd:2d:8f:1f:43:e6:2c:f0:5c:a7:f7:7b:3a:13:12:
5e:79:d6:7b:f2:14:6b:51:66:2b:4a:5f:36:85:94:
4c:2d:76:45:a5:14:39:a1:82:22:e7:e6:fe:32:fc:
4d:25:33:7c:60:fc:6d:99:76:2c:86:b2:e0:8a:f5:
98:7d:16:41:a3:49:c5:46:a1:0c:3c:68:0c:0a:66:
ca:4f:4d:cc:f8:93:65:1c:d1:97:c5:b0:5e:3d:ba:
97:ea:c9:48:f9:ad:bd:ac:d7:73:bf:9d:cc:6d:25:
e8:6e:44:e7:bf:48:d2:85:b3:13:42:2a:23:ea:20:
9f:65:19:11:66:7b:02:9e:00:41:a1:24:fa:86:15:
e0:32:2d:33:39:46:79:03:02:b7:70:79:34:2e:aa:
48:cf:38:6b:fc:26:8f:16:db:c3:ed:57:ae:8c:81:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E7:BE:79:6E:38:32:63:24:ED:7B:48:07:E5:87:93:BC:EC:9D:CB
X509v3 Authority Key Identifier:
keyid:23:8A:C2:B0:77:BB:72:AE:95:50:6F:1B:7D:D7:92:2C:86:93:28:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2e:c9:a7:03:2e:5c:14:d6:6f:aa:25:5e:84:50:40:e2:84:
6d:1e:59:c7:45:e2:6e:e2:05:d7:f6:3a:fb:aa:d4:b9:93:19:
78:46:58:81:00:30:8a:8f:91:7b:a3:c8:4e:6c:a6:47:f2:c3:
fd:c0:81:bd:62:93:21:78:64:f3:8d:b0:ff:3c:28:bb:e6:a4:
f3:f6:dd:05:6b:78:89:23:c0:34:84:13:01:6c:a9:34:18:05:
23:26:91:f9:fe:36:92:d8:cf:7d:d5:7b:48:44:80:91:bd:b5:
bf:04:90:cd:14:27:fc:5e:f1:9f:62:b9:5e:24:d3:f3:cf:98:
62:ad:19:5e:f6:85:22:9a:ac:a0:77:de:40:15:61:08:50:99:
c9:a8:17:d4:df:81:a5:47:8c:4d:e6:7c:b3:15:31:d1:d6:03:
82:8d:7a:55:77:c3:bd:50:90:d7:1a:14:35:0a:59:61:98:d5:
8d:b9:3c:48:05:50:33:54:7b:61:a0:8b:d1:b3:fd:33:da:e1:
63:31:2b:34:88:2f:8d:2c:3b:8e:87:9d:48:75:8b:84:3b:0f:
40:70:36:99:66:72:77:58:1c:ae:60:aa:16:19:17:c3:18:fa:
e2:9f:b6:c9:81:10:1c:82:dc:d2:5a:25:62:10:67:36:22:3b:
70:71:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:44 2026 by rpki-client