Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
File: I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft (raw, json)
Hash identifier: xTkbaVEbjGrWFu3ui48OfgmRfsXesibU/a/+Cdvnd5I=
Subject key identifier: 50:9E:EC:6E:06:44:A8:DE:43:2F:90:D9:68:DA:B2:25:DE:42:CA:EA
Authority key identifier: 23:8A:C2:B0:77:BB:72:AE:95:50:6F:1B:7D:D7:92:2C:86:93:28:49
Certificate issuer: /CN=238ac2b077bb72ae95506f1b7dd7922c86932849
Certificate serial: 01A0016F848749CFBCA1FFB9B015F7B90CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:01:20 +0000
Manifest this update: Fri 14 Aug 2026 18:01:20 +0000
Manifest next update: Sat 15 Aug 2026 18:01:20 +0000
Files and hashes: 1: I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl (hash: po7ThXW6a1Pg9F8LAa6V5goV7aUf7zpNvVCRTZOYNs0=)
2: ZLiU1atI_HJAqv1dEuEca2LiYK4.roa (hash: wnwFkyBm5yBNEm5NFKbYxok77hCkil5I8o3VMhwKHG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:84:87:49:cf:bc:a1:ff:b9:b0:15:f7:b9:0c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238ac2b077bb72ae95506f1b7dd7922c86932849
Validity
Not Before: Aug 14 18:01:20 2026 GMT
Not After : Aug 15 18:01:20 2026 GMT
Subject: CN=509eec6e0644a8de432f90d968dab225de42caea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:24:9e:44:64:53:df:6b:31:2b:3c:a5:b4:
c6:25:6c:45:65:8d:6d:8f:25:0d:4e:10:00:4d:bd:
a7:40:b8:17:82:56:2b:56:b9:bd:58:7e:cd:f6:e7:
c9:5f:d6:4a:06:1e:78:59:5d:3a:48:31:f0:85:1e:
ea:c4:05:c5:a0:9d:a5:d0:48:5b:17:70:c5:e0:39:
b5:90:60:55:df:fd:c8:81:49:56:21:5a:b5:d0:6d:
ef:54:9a:60:29:d0:f7:e9:9d:20:1a:1d:d2:b0:dc:
b8:44:e3:56:5f:30:4a:f7:8a:f4:28:52:fe:a1:56:
b3:63:4e:ca:f0:dc:0f:26:a0:b6:14:05:7d:07:6e:
a0:e7:4f:00:0d:83:99:6c:58:eb:2f:d0:cb:96:36:
d8:9b:41:9c:b6:2f:6d:91:2d:81:e9:e7:01:8f:20:
df:f6:f4:41:7a:16:92:95:71:55:3c:f4:2d:c1:0d:
73:7a:4f:70:9f:fe:a5:bb:9a:e9:dc:7c:a7:9c:b5:
54:62:bc:5d:f6:60:72:f0:8e:0d:af:72:ce:cf:05:
f1:ef:4a:13:c7:0f:68:0e:f1:65:9c:07:c6:7d:07:
23:96:d7:30:f1:98:06:34:8a:50:17:89:87:99:5e:
49:1d:85:13:fd:d2:fd:d8:1f:57:ca:3f:34:43:7f:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:EC:6E:06:44:A8:DE:43:2F:90:D9:68:DA:B2:25:DE:42:CA:EA
X509v3 Authority Key Identifier:
keyid:23:8A:C2:B0:77:BB:72:AE:95:50:6F:1B:7D:D7:92:2C:86:93:28:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:95:97:6e:30:ef:09:46:f1:29:ae:3d:e4:c4:4c:61:08:3f:
f2:30:1c:69:20:3f:bf:c2:a4:d7:ac:e4:3b:47:0c:e9:1c:0f:
65:90:12:0b:7c:e0:4c:f2:84:9b:95:59:77:15:58:f2:76:75:
62:de:cf:9b:1d:a2:d4:9a:77:e7:28:81:62:5e:79:70:0c:43:
68:ee:47:96:3b:76:9b:63:5f:3b:72:31:5b:c3:24:5a:aa:08:
e8:49:ef:f6:8a:08:9e:d7:c6:a6:49:c4:cc:08:9e:1f:53:8e:
eb:fb:95:02:a1:fd:a4:6f:28:2b:4e:3d:db:2b:3f:b5:10:f1:
3a:20:87:f4:aa:c4:b7:6e:e2:08:25:7b:5e:20:d7:1e:ea:ab:
77:a1:3a:03:24:3e:6e:15:18:d9:fa:db:63:68:48:4c:0f:12:
ee:e7:b9:85:1f:07:1b:da:61:9b:fd:83:c6:46:8f:3c:d5:e9:
b1:a8:7c:10:4f:c3:4e:ee:ed:ba:95:58:d6:02:56:01:b9:b9:
95:05:ea:bd:45:14:d2:de:97:e8:81:a3:65:70:ad:f3:47:0c:
be:48:6a:12:ee:92:be:48:d3:a2:ca:be:7b:53:8d:d4:d8:50:
50:23:84:ae:3d:03:57:09:d4:5d:2f:da:28:e3:2b:b7:d1:44:
d3:66:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:59 2026 by rpki-client