Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
File: I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft (raw, json)
Hash identifier: wOX93/ONmaM/Dt6ebiytl9BpKFaRIchTmFQOySpK60w=
Subject key identifier: 26:41:D5:BF:C8:E3:08:60:59:91:D0:1A:D3:40:80:7D:31:B0:D9:0C
Authority key identifier: 23:8B:D0:FA:94:D0:08:25:D6:A9:1E:2D:FC:E6:A9:2A:36:F2:5F:B9
Certificate issuer: /CN=238bd0fa94d00825d6a91e2dfce6a92a36f25fb9
Certificate serial: 01A0F3B210C5F3334361A4B443DD21C129D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
Manifest number: 52
Signing time: Wed 30 Sep 2026 19:02:08 +0000
Manifest this update: Wed 30 Sep 2026 19:02:08 +0000
Manifest next update: Thu 01 Oct 2026 19:02:08 +0000
Files and hashes: 1: I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl (hash: vhZ9qprvkXJjr5KHKPVreijxWwsBGFaInKd0Ujd0ljI=)
2: dI13xkmvpmBEYbpkxQ6Dmi7062M.asa (hash: 75E6S1aKT5Pa2f20bYr6fZVc14KGFerjIYrruRaVExA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b2:10:c5:f3:33:43:61:a4:b4:43:dd:21:c1:29:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238bd0fa94d00825d6a91e2dfce6a92a36f25fb9
Validity
Not Before: Sep 30 19:02:08 2026 GMT
Not After : Oct 1 19:02:08 2026 GMT
Subject: CN=2641d5bfc8e308605991d01ad340807d31b0d90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:ef:8d:67:8f:7f:24:fe:ae:49:50:95:a9:
eb:df:6d:4d:57:f4:79:1f:3d:31:fb:56:22:79:de:
9b:24:75:3e:2c:9e:0a:dc:b1:b6:2c:9a:48:51:d1:
34:55:6e:30:27:d0:38:11:3d:8e:0f:a5:f8:ec:96:
6f:f6:fb:a1:7e:b7:87:0c:24:04:95:3c:13:3e:06:
f2:16:17:3d:f6:89:c8:13:a8:3e:d0:de:f0:87:5c:
39:b3:11:6c:4f:c0:2f:33:27:eb:33:7f:cc:f8:6a:
92:03:05:fd:2e:23:54:6b:63:4b:b4:de:83:88:be:
78:fe:08:9d:48:18:d9:98:1d:c9:86:80:8d:94:b7:
7d:e7:fc:f0:fe:ef:c6:fb:30:6b:0f:c8:2c:64:32:
ee:09:2a:5c:10:9b:cb:6e:80:42:aa:ae:69:95:ae:
80:e2:22:f3:10:14:60:42:3d:95:e2:c8:af:9a:c4:
8b:a1:65:1c:6a:cd:17:db:12:b5:86:6b:d6:b5:ec:
2d:80:3e:d8:29:b6:d4:91:e8:b1:02:3a:2c:76:bd:
c2:9a:57:84:ac:04:79:96:d6:10:24:2c:e4:40:87:
0e:61:4c:f1:88:ba:9e:98:50:c6:2b:b7:0a:00:74:
91:8a:64:9e:42:fe:4b:8b:a3:dd:e7:1b:89:26:5c:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:41:D5:BF:C8:E3:08:60:59:91:D0:1A:D3:40:80:7D:31:B0:D9:0C
X509v3 Authority Key Identifier:
keyid:23:8B:D0:FA:94:D0:08:25:D6:A9:1E:2D:FC:E6:A9:2A:36:F2:5F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9e:01:2f:74:8d:b6:c7:fc:df:2d:1b:5e:58:81:2c:b1:0a:
58:ab:64:73:61:8f:5a:ce:9a:d9:cb:7e:c6:bf:65:e6:b6:1d:
05:95:0f:dc:90:3f:1a:29:09:d6:1a:61:50:10:18:75:75:c8:
78:f9:a3:da:3e:68:07:cc:b3:4b:71:87:de:f2:95:f6:98:1b:
a9:0b:22:66:d6:1e:6e:57:c4:c9:63:f3:d0:32:64:cf:e1:d6:
69:f6:6c:7d:3a:3b:ad:4c:81:f0:07:cd:94:ec:70:bb:af:c1:
d3:ff:ab:d8:b0:52:70:40:2c:d6:b8:5e:d5:28:c7:b0:60:8c:
3b:a7:c0:62:e1:05:d7:91:22:b8:f8:8d:4b:45:90:ac:ba:7d:
34:60:ba:46:0c:ad:2c:0a:c2:cc:35:8b:8f:42:c0:a6:fc:e4:
16:95:a9:97:fe:9e:7c:47:51:37:09:53:ed:3b:17:d6:7a:8f:
76:b7:2b:5a:f8:96:5d:b6:29:54:25:c1:91:c6:c7:d7:db:f0:
14:a4:0c:60:f5:c4:c1:8a:02:8a:23:fe:b4:44:6e:2e:ac:60:
a1:09:3b:d6:9f:ab:df:d5:eb:90:be:8c:b7:17:fe:9a:1f:e7:
db:26:6e:51:6a:e2:3f:f8:53:2f:be:13:b9:f8:17:a7:5c:93:
b4:39:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 01:24:59 2026 by rpki-client