Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: jPi3q8PX104XRDBmfExsQYqcc3UQ4IDoZ+2oKV3DQmQ=
Subject key identifier: 82:23:B8:46:CD:99:6B:4F:E5:78:DC:AB:86:AE:F4:00:82:24:D3:3C
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 01A183757C8B679B4E5E94B6DF78D708DC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 17:01:17 +0000
Manifest this update: Wed 28 Oct 2026 17:01:17 +0000
Manifest next update: Thu 29 Oct 2026 17:01:17 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: NPTuzNjEbLtYFj5AhvTYaUtrR1u7Lq8AwrpmlG1qQWc=)
2: di7BBo89yLvPzYRgI1CnXRkGKek.roa (hash: J2fGlbJBwYkKOrpnLxq93QttJnUWfvQ1tz5acXy/Cg8=)
3: jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa (hash: uJEOU0bJFwdOC2+0d4gL/okHKs1T55lvZjr01PdnJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:75:7c:8b:67:9b:4e:5e:94:b6:df:78:d7:08:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Oct 28 17:01:17 2026 GMT
Not After : Oct 29 17:01:17 2026 GMT
Subject: CN=8223b846cd996b4fe578dcab86aef4008224d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:7b:93:d0:cd:09:ed:9a:9e:9e:29:95:9d:
ea:49:e9:89:9b:2e:14:2d:54:b8:9a:0a:8a:2b:89:
0b:76:bc:6a:04:1c:36:68:a1:85:45:40:d4:1d:2b:
6a:23:a0:b0:b8:8f:e6:80:0d:3e:3b:8c:dd:b8:3c:
99:bf:de:bc:a6:e2:f8:04:cb:8b:44:8f:43:e5:8d:
12:85:b2:96:40:a6:a3:9d:32:aa:a3:10:c9:2b:c5:
ff:87:4a:80:14:b8:2b:06:be:df:f6:39:6b:78:c9:
7a:06:e0:2a:c4:4d:1f:ed:4f:83:61:09:22:76:53:
fe:df:aa:65:d4:14:76:5e:48:7f:83:44:9f:87:3f:
77:9f:02:bf:c5:52:9d:4f:67:54:ce:e2:13:5f:6c:
ca:21:a2:91:6c:df:3e:ae:e1:a9:c4:3a:5e:e8:40:
6e:67:d8:2f:94:15:4e:11:9c:2e:ad:87:17:a0:93:
e0:00:1e:9b:97:b6:d3:b0:08:66:5e:37:0b:01:99:
f3:1f:7b:fe:d9:ae:a6:8e:24:5e:ae:b2:09:48:9d:
93:f6:a3:fc:3d:7c:e6:19:65:25:0c:a0:46:9d:41:
12:94:1c:4a:19:14:99:d0:de:e6:d7:4b:3b:8f:b5:
61:09:93:46:d7:88:45:be:5d:ff:cc:42:bd:5c:18:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:B8:46:CD:99:6B:4F:E5:78:DC:AB:86:AE:F4:00:82:24:D3:3C
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:95:e7:ea:62:37:81:d9:db:df:ed:d2:fe:f8:36:f4:f4:89:
c7:00:95:04:e5:2d:4d:ca:3f:53:25:76:52:40:9f:39:ad:27:
e5:cf:b8:8b:9f:f0:a7:0f:9a:52:44:ba:79:d9:ab:d7:41:41:
5e:71:36:08:5c:59:6f:bc:7f:64:8f:92:80:fd:e3:19:4b:dc:
fd:a2:89:1f:ee:f3:be:44:c9:39:f4:7a:e1:08:6c:19:e0:29:
49:6c:65:0e:5e:f8:7f:b3:47:16:32:59:bf:23:cf:cf:14:8a:
a9:16:fd:00:ac:85:d0:f1:f8:20:e6:ef:70:07:27:35:dc:07:
17:de:2a:b9:92:94:89:0a:3c:60:d1:6a:13:e5:05:bd:14:45:
db:28:4b:d0:8d:1b:73:ee:36:cd:09:73:ed:53:7f:43:1f:d9:
1e:7a:b9:4c:df:85:4f:4e:55:e6:80:41:56:e5:32:61:8d:60:
b9:f7:27:2f:8a:80:a0:a2:65:6d:df:a5:71:bf:24:cb:51:2b:
dd:45:7d:71:28:00:21:25:f5:a5:8f:3b:fe:d4:93:5a:8a:10:
0d:48:0b:9a:55:f2:6e:e9:2d:81:47:b2:c1:29:9f:3b:7b:a4:
a9:ec:5d:cb:2c:48:50:36:ce:7b:66:cb:50:9b:10:d0:b6:f0:
7f:24:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:06:12 2026 by rpki-client