Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: nB8YIW8jdHsLkyubwe7oC9tlZAcfQEeJN6cSnGxxPp8=
Subject key identifier: D2:CD:45:65:D6:68:D6:4C:2C:5C:30:9B:0D:B1:66:72:06:30:95:45
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 01A095EBF954C851DCEA5BFF136F00CD559C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1A51
Signing time: Sat 12 Sep 2026 14:01:04 +0000
Manifest this update: Sat 12 Sep 2026 14:01:04 +0000
Manifest next update: Sun 13 Sep 2026 14:01:04 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: XX0ql1TR65zdm9WTDQVMpiumcgJB6UIzcchoRhvScPk=)
2: di7BBo89yLvPzYRgI1CnXRkGKek.roa (hash: J2fGlbJBwYkKOrpnLxq93QttJnUWfvQ1tz5acXy/Cg8=)
3: jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa (hash: uJEOU0bJFwdOC2+0d4gL/okHKs1T55lvZjr01PdnJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:eb:f9:54:c8:51:dc:ea:5b:ff:13:6f:00:cd:55:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Sep 12 14:01:04 2026 GMT
Not After : Sep 13 14:01:04 2026 GMT
Subject: CN=d2cd4565d668d64c2c5c309b0db1667206309545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:ac:b9:02:05:9b:d1:6a:5d:e5:78:6e:6c:
12:d6:0a:31:e3:ec:17:15:88:65:41:c6:28:4e:5e:
07:c4:79:a5:f8:7e:0a:8b:6a:6b:47:cf:8b:29:85:
21:21:d3:1f:38:85:1b:f0:d0:b6:be:22:f0:77:ef:
8a:e4:7f:ef:a0:8c:af:1d:33:2b:d7:9f:5b:03:f2:
b9:ed:48:96:89:64:12:01:a9:0c:e6:79:24:c7:3b:
ef:fe:cd:25:1a:22:24:3e:8b:44:24:03:92:a9:6e:
a7:09:67:c9:3a:e3:a9:c7:c8:85:0e:c8:7f:03:54:
8b:d9:bd:bf:55:39:45:88:12:0a:f4:b1:82:a4:33:
a5:7e:dc:34:6c:e1:30:44:2a:68:0f:20:25:8e:b6:
ff:7e:4e:a3:be:b7:79:e3:72:6f:9a:c3:ea:c5:59:
4f:89:fd:5b:58:7c:24:1d:6d:47:f2:cd:b7:81:40:
00:e3:df:73:6f:17:44:30:85:a0:f9:50:3a:83:7d:
1c:86:ab:35:b9:76:4f:2b:ad:9b:15:cb:71:f9:4a:
18:83:16:11:7c:fb:66:61:6b:35:d3:3b:76:63:11:
ec:1e:3d:c1:69:f1:b2:89:6f:01:9d:b8:30:a6:8f:
b9:a8:bd:e8:31:17:7b:55:a4:61:65:87:c7:28:8e:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:45:65:D6:68:D6:4C:2C:5C:30:9B:0D:B1:66:72:06:30:95:45
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:5c:f1:da:8d:e6:71:af:1b:47:56:14:ef:d8:ab:5a:9e:
e6:0d:83:c9:e8:6d:ed:fa:17:78:ae:cc:db:ca:31:35:48:39:
39:8d:a6:ce:4e:6d:34:5d:39:1e:bf:0d:2f:a4:78:d3:26:c8:
94:80:ad:b1:05:6b:16:76:dd:e7:98:21:d3:9c:cb:57:5b:e6:
d1:6a:0f:ec:49:c9:6e:a7:c9:7a:a4:79:90:10:50:f4:22:22:
ac:af:ec:86:eb:b2:84:4d:8d:2a:04:21:7e:8e:cb:bb:e4:62:
90:1c:87:00:bb:23:15:79:43:ef:bc:b4:0c:e4:6b:e0:00:64:
25:c1:42:ef:ea:8e:26:9e:34:e4:e3:83:55:be:7a:17:5a:b2:
f0:2f:27:53:d9:9a:08:90:71:14:f6:6f:20:f9:00:a4:dd:e3:
3b:06:69:81:28:bc:83:18:df:2a:f1:91:dc:fa:1c:25:bb:ae:
2f:f2:c2:5e:45:18:be:b4:0b:88:61:4e:47:83:bc:be:a0:d2:
80:d2:75:91:a9:9f:76:ff:b1:dd:8e:cd:98:5f:3c:82:e8:30:
23:ea:d7:24:ea:d4:13:70:d0:fd:20:ed:99:d5:51:35:51:fb:
aa:43:24:70:ed:72:26:9e:41:29:8b:be:78:5d:17:a9:ec:00:
0f:13:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 16:38:30 2026 by rpki-client