Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: 9bcHvwiOU4Qdb/6TNYE1r94XlYJ6jrNOUnS7So6KDwM=
Subject key identifier: B3:A0:32:AD:07:C7:2E:EE:CB:9C:53:5A:03:6B:1B:8A:1F:C2:9D:6D
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 01A11485E9124A28C9A590E4E2C13D0DEE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 167B
Signing time: Wed 07 Oct 2026 04:01:22 +0000
Manifest this update: Wed 07 Oct 2026 04:01:22 +0000
Manifest next update: Thu 08 Oct 2026 04:01:22 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: YJTwsuphw3Pvx8wYHdta1Lv9k6CcNLDGIgcQd2Y6DzQ=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:85:e9:12:4a:28:c9:a5:90:e4:e2:c1:3d:0d:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Oct 7 04:01:22 2026 GMT
Not After : Oct 8 04:01:22 2026 GMT
Subject: CN=b3a032ad07c72eeecb9c535a036b1b8a1fc29d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:fe:08:5e:06:12:f3:df:65:55:d7:26:bd:
8b:6f:ba:b8:6a:e9:7f:a9:34:bf:9d:82:a6:1d:8e:
d6:4f:72:2a:ab:20:c3:2d:90:48:24:fd:51:19:1c:
a7:21:46:40:54:63:59:56:6c:e8:76:af:c2:a7:ff:
f2:8d:10:73:08:11:58:6c:3d:1c:14:13:bc:b3:23:
0d:6b:00:4f:9d:65:90:1e:05:73:df:a3:f0:66:04:
a9:f6:4c:a6:88:ed:48:2c:cc:11:1f:1e:49:08:f8:
13:6a:54:ab:34:b3:18:4f:a7:e2:17:0c:be:10:00:
48:16:cf:a0:12:12:a5:bc:7a:3a:de:eb:65:d8:4e:
4b:fc:39:2f:30:08:74:66:cd:7e:ba:58:c9:37:ca:
58:1c:9e:db:fd:91:01:f3:55:4c:d6:b7:be:e1:aa:
c8:5f:aa:5d:46:48:96:a5:65:88:77:54:ea:22:e6:
d4:53:0c:3c:66:21:0a:9f:2d:0b:91:12:a3:3e:4e:
94:38:e2:78:0c:22:03:1f:ef:45:9e:fb:5a:69:95:
37:f1:b0:fc:dd:c4:85:e1:b9:56:65:35:c8:0c:3e:
c4:7e:fd:63:ee:17:6d:e5:65:14:b2:6e:22:d0:af:
2d:1f:d6:db:de:ba:4a:d6:30:c0:4d:ac:ee:56:7c:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:32:AD:07:C7:2E:EE:CB:9C:53:5A:03:6B:1B:8A:1F:C2:9D:6D
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:14:6e:0b:2e:18:67:20:8b:5a:03:a3:54:78:15:36:a3:
d4:58:f4:97:ed:10:89:c9:1a:44:87:61:d8:17:3d:34:94:e6:
a6:43:48:57:ab:78:18:5c:49:2a:6e:df:82:ee:c9:f1:2c:83:
18:02:e3:a8:a6:56:c0:5e:4b:67:af:f2:85:0a:d6:32:50:ec:
44:f2:7b:77:1f:0a:62:61:c1:ae:fd:34:ea:e7:24:ee:d4:82:
7f:7b:d7:e7:92:51:2b:32:2b:6c:b7:46:65:04:fe:a6:b8:51:
f6:28:e0:fd:11:53:c7:53:23:17:35:f1:1d:a7:7e:74:d6:d7:
e7:b4:91:3c:67:55:8a:9c:eb:9b:79:85:d5:bf:ca:ea:85:d8:
15:cd:6b:cd:76:2f:8b:2a:93:b6:76:c9:29:6d:01:a1:d0:33:
42:55:87:7c:d7:57:d7:7c:9b:d4:2f:ed:af:a4:bc:e2:1d:3d:
b2:45:dc:f8:34:5a:7b:58:13:6e:be:3b:ff:df:6f:53:33:f6:
64:34:31:40:64:54:3a:df:2a:dd:22:93:90:b8:35:95:e4:11:
0b:0d:af:5b:d0:9f:80:8d:b3:f5:40:ae:21:a8:7c:eb:44:da:
f4:04:81:96:e5:01:a8:a2:ba:af:f9:c3:64:cc:8f:14:54:6b:
47:fd:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:19:34 2026 by rpki-client