Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
File: IiiCdVNULJSfFKzFYZw4aimzL2g.mft (raw, json)
Hash identifier: yoQDhPighmfpBYTV9Nsznaxmhi6DsSMxxQbPDIeY0dg=
Subject key identifier: C5:A7:B0:98:C4:1E:89:8D:10:13:0F:31:83:09:B7:57:DF:36:14:6F
Authority key identifier: 22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
Certificate issuer: /CN=2228827553542c949f14acc5619c386a29b32f68
Certificate serial: 01A0EB1C841581CFFCAD25AE895B5062322B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:49 +0000
Manifest this update: Tue 29 Sep 2026 03:01:49 +0000
Manifest next update: Wed 30 Sep 2026 03:01:49 +0000
Files and hashes: 1: 1-0P5V5UyueMNdvNd2DfvuSJDLmI.asa (hash: nyGQDkF0li5XOfPiwvvNf9NjNB6Be0Rtz+hzPp9tCT8=)
2: IiiCdVNULJSfFKzFYZw4aimzL2g.crl (hash: 6pw+cBdCbMjEq8hDzi15VgHu6Zf02R7t8dWugJq/I80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:84:15:81:cf:fc:ad:25:ae:89:5b:50:62:32:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2228827553542c949f14acc5619c386a29b32f68
Validity
Not Before: Sep 29 03:01:49 2026 GMT
Not After : Sep 30 03:01:49 2026 GMT
Subject: CN=c5a7b098c41e898d10130f318309b757df36146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:99:73:fb:32:22:a4:1d:25:e4:68:19:b4:14:
41:24:98:ca:b1:2c:4a:97:11:d4:85:50:b6:dd:7e:
9b:9c:cf:3e:ac:15:3a:00:38:c0:17:97:ef:43:2f:
43:ff:fa:85:54:10:8d:e0:a9:7f:bd:02:3b:9e:48:
78:21:df:f3:46:a2:8b:80:76:cb:47:ef:1c:69:82:
d9:79:da:7f:71:78:8b:45:31:57:bd:c0:8e:5b:91:
25:17:61:57:b3:ab:11:dc:e4:47:58:2d:31:9f:1a:
e9:e9:c8:f1:66:96:54:a5:69:64:9e:db:81:1f:d5:
af:83:ab:14:e1:07:f7:ac:32:88:aa:cd:2c:3c:33:
5a:91:4e:8e:b3:f6:90:45:cb:e7:ab:a3:21:32:aa:
f0:84:9b:c5:e3:cd:47:79:8b:d4:2a:e7:a9:34:a6:
f9:c1:b7:86:df:c2:51:ff:1d:87:34:b4:39:2b:75:
6c:b2:fd:42:bc:6f:50:cb:94:9e:81:00:65:2a:d7:
88:90:a0:2e:cc:73:20:32:4d:09:b0:a4:6c:e2:be:
b0:56:c7:2d:93:37:82:87:86:7b:c6:47:99:69:87:
10:39:c8:c4:42:cc:a7:55:7c:a4:8f:85:38:b8:7a:
a5:91:93:4c:bb:75:5c:2b:85:4c:9d:dd:23:0f:4e:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A7:B0:98:C4:1E:89:8D:10:13:0F:31:83:09:B7:57:DF:36:14:6F
X509v3 Authority Key Identifier:
keyid:22:28:82:75:53:54:2C:94:9F:14:AC:C5:61:9C:38:6A:29:B3:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiiCdVNULJSfFKzFYZw4aimzL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/IiiCdVNULJSfFKzFYZw4aimzL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b7:9b:97:a7:3f:87:98:c7:13:f0:09:1e:e2:cc:de:23:36:
ce:b5:ff:e6:05:4c:f9:88:4e:e6:65:e6:d1:63:c4:69:91:78:
3d:ed:5f:7c:dd:7a:58:81:3a:19:45:1e:2d:4f:7a:ff:8d:ae:
22:35:27:77:1a:d9:42:45:3a:6f:02:d8:2d:00:55:3f:18:da:
86:61:ad:7e:c9:3c:a0:e1:28:49:70:98:62:db:9e:54:78:e1:
0a:fa:03:a5:ec:96:94:30:f8:d4:4e:8c:1d:b5:31:7f:4e:8d:
27:22:e6:a0:b6:4f:20:81:50:ac:85:84:a6:8e:e8:82:d0:6b:
f5:a0:b3:44:3c:88:f3:57:4e:b8:57:23:80:d2:82:ce:a9:82:
53:e1:f4:d3:bc:93:c7:52:b2:69:1d:4e:67:57:5a:4e:e1:a0:
42:a7:1b:7c:c4:e7:f9:4f:3b:aa:cf:8f:f5:42:4a:d1:1b:75:
d5:f8:ab:c9:32:3d:c7:a9:f4:92:fd:a4:12:02:7d:9a:dd:92:
fc:07:b1:85:49:df:da:2b:71:45:47:c6:3f:4c:c4:5f:7e:c2:
f2:f0:f2:7e:8a:7c:3d:4a:0f:24:90:9a:32:1c:cc:32:62:ca:
ee:c0:24:ef:ca:a1:a1:02:a8:70:95:12:31:ac:44:59:24:cf:
99:65:8f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:46:12 2026 by rpki-client