Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier: lYt14j6Ymgp+CtI1ghrNzTI3kkFrtNEQfwgxgMVFFys=
Subject key identifier: 1F:33:16:9E:1F:44:EB:DA:43:7F:41:35:21:33:A5:CB:99:C5:EF:08
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 01A117F424E3ECD8E5381BF6C8E184905AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number: 19CF
Signing time: Wed 07 Oct 2026 20:00:38 +0000
Manifest this update: Wed 07 Oct 2026 20:00:38 +0000
Manifest next update: Thu 08 Oct 2026 20:00:38 +0000
Files and hashes: 1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: oDXQtXYdqM+d1m/MyQg/ZWnvvUjPD3Psvhf6w9ez5kc=)
4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:24:e3:ec:d8:e5:38:1b:f6:c8:e1:84:90:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Oct 7 20:00:38 2026 GMT
Not After : Oct 8 20:00:38 2026 GMT
Subject: CN=1f33169e1f44ebda437f41352133a5cb99c5ef08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:1d:2f:ad:5d:9e:77:84:e1:0f:d9:d9:cd:
c8:96:c6:a8:94:a9:79:70:7e:c9:e9:72:03:3d:e9:
74:a7:66:34:3c:65:76:8f:cc:fe:30:e5:22:15:a1:
aa:25:7b:ad:b0:0a:cb:62:88:1c:da:dd:4d:bb:c3:
c6:87:84:f5:16:4e:eb:28:e3:ce:fd:03:48:71:b5:
27:98:ca:64:61:75:97:ed:f5:60:99:ba:b1:a0:b9:
62:64:bf:f2:ca:06:5a:f3:a8:eb:22:52:83:15:35:
93:0a:f3:49:4e:6c:59:8f:a8:cf:f4:fc:13:fc:9e:
b9:6f:49:eb:4b:9e:61:80:ec:b2:7f:f6:33:5f:0e:
32:97:ab:36:dd:a3:2b:78:e5:7c:e9:32:d6:9e:d1:
cc:f0:10:da:b9:5d:a1:e3:88:2c:1d:4a:32:d8:03:
ed:7d:ba:89:60:d3:f8:82:a1:5f:41:73:da:b9:e6:
71:ed:f9:f2:b8:ba:94:55:8f:a9:db:3f:d9:7e:35:
ef:07:f9:7d:6a:c6:5f:68:0f:40:27:f4:45:7c:7f:
2a:0e:38:85:8e:bf:91:dc:0f:b0:43:64:a1:cb:48:
aa:33:bc:6f:83:75:42:6c:08:60:84:d4:ec:35:9e:
31:8f:b9:84:05:8c:51:3a:62:9d:73:b4:8e:ea:42:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:33:16:9E:1F:44:EB:DA:43:7F:41:35:21:33:A5:CB:99:C5:EF:08
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b8:bb:46:cb:cb:e7:20:87:c9:c7:ca:7f:9a:50:68:d4:1e:
8a:08:2f:4d:c6:a3:05:22:99:35:df:90:fb:e2:68:91:89:dd:
6a:0f:c0:e0:ee:7c:b7:5c:01:5f:c7:35:be:38:17:09:7e:4b:
f1:fc:ea:95:4c:72:de:50:9a:1b:a7:d9:c0:3a:3d:d5:4c:51:
42:1e:31:bc:50:0c:69:1f:73:85:d6:13:1b:f9:f1:b3:f7:85:
10:3f:9a:28:03:34:ee:d2:a1:ab:f2:fa:7c:6b:62:6f:e0:58:
b1:a9:75:52:7e:b6:0b:93:73:87:ca:41:ba:04:0c:ce:a5:17:
c3:52:a6:97:4d:70:84:af:ad:78:87:a2:f6:6b:fe:bb:d2:b1:
17:c1:a9:5c:e7:8e:88:b7:d4:0a:60:e8:08:d0:45:cf:e9:57:
45:37:d2:f5:0d:72:26:4d:fc:e1:9b:1f:b8:fb:e1:44:ce:0c:
3d:81:91:87:54:6a:36:de:fa:d7:cd:b1:98:2a:8e:db:e1:41:
07:43:52:f2:2c:cb:db:5e:7b:90:ea:ef:17:ec:c7:e5:a1:2d:
54:89:34:36:6e:c9:33:51:42:12:11:c1:a0:f6:c6:dd:77:25:
70:6d:77:7b:7b:a8:e9:a1:59:1f:07:50:f1:d3:1a:07:93:65:
5c:38:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:33:38 2026 by rpki-client