Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: JisyQFOY1gRmF4wuiQ6jCRxzvJwZbvuoGHyWn4BAqDo=
Subject key identifier: B6:4B:55:26:E8:DB:D2:BE:82:64:93:57:32:4F:CA:3F:EB:DF:8D:BA
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 01A08AFAD38C341AEE8EA5B98F85AED4194E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 11:01:28 +0000
Manifest this update: Thu 10 Sep 2026 11:01:28 +0000
Manifest next update: Fri 11 Sep 2026 11:01:28 +0000
Files and hashes: 1: 0U13Mcb_KgMF9K69fVfTmUTYf5c.roa (hash: 5Rvk9cCX7FFBTf2JwLTt90a00mmM2NZlX+HpUZifFpM=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: rCUogTN0T02Uj+M0toFzF8KV6J9qctvGSY3/BEmHX1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:d3:8c:34:1a:ee:8e:a5:b9:8f:85:ae:d4:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Sep 10 11:01:28 2026 GMT
Not After : Sep 11 11:01:28 2026 GMT
Subject: CN=b64b5526e8dbd2be82649357324fca3febdf8dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:b1:7d:4d:99:2c:00:63:75:36:f5:d2:fa:
d3:bf:e0:18:f1:e6:64:7b:12:2b:55:7a:e5:68:1b:
80:25:33:a9:9a:5b:4f:a0:a9:b2:25:19:cc:db:17:
a7:98:dd:58:b2:d4:ca:51:7c:1f:1e:8b:99:1e:b3:
32:df:36:9f:2b:08:7a:0f:98:54:83:a7:c6:59:d3:
97:fa:32:0c:4f:f1:23:5f:a3:9e:3d:1c:3a:f8:09:
e8:0a:9f:3b:dc:f9:41:1d:5d:65:6d:2a:ac:61:06:
e4:5a:58:be:25:ae:05:bc:c7:8f:3a:b7:01:d6:88:
76:1e:92:43:3d:4e:f3:4a:ff:30:2b:3b:2a:66:a3:
60:1b:5f:01:fc:e9:bb:a3:c2:04:41:ff:3c:e4:4d:
4c:f7:56:22:0b:2a:c6:0a:56:14:9a:c3:81:4f:d2:
2d:c8:42:a6:7d:36:bd:39:4e:18:84:04:f3:62:a2:
59:0c:41:86:3b:42:4e:87:14:be:ca:ec:30:cb:8f:
57:c9:0f:e4:5a:5d:ec:e3:92:52:68:40:b9:2a:58:
44:98:73:73:90:33:c2:69:75:41:9f:6c:f1:39:6f:
f0:fa:1e:26:df:ec:b5:9b:86:50:fe:8e:9b:97:7f:
27:2a:e9:56:ec:dd:37:b9:06:dd:12:3a:b0:be:b4:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:55:26:E8:DB:D2:BE:82:64:93:57:32:4F:CA:3F:EB:DF:8D:BA
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:6c:bb:88:42:b7:d8:e3:06:62:af:eb:b5:23:61:66:bf:
8b:ad:75:f5:51:eb:a2:2f:83:97:b3:83:9c:86:88:c1:05:45:
18:66:0d:2d:f5:45:e8:80:81:f8:24:7b:1f:04:e7:cf:9a:0d:
95:1f:a4:08:66:fc:00:22:b4:21:4b:3c:0e:70:71:c4:fb:97:
34:8b:c4:19:31:b8:26:56:0a:8c:3b:5d:ab:41:2c:e2:85:08:
a5:f3:da:05:40:19:dd:c1:a5:d8:a0:30:31:74:df:48:4d:43:
6b:1c:88:b3:13:24:98:be:0f:6a:6e:02:bd:38:42:cb:b2:e4:
51:28:a4:52:6e:ce:68:a8:8c:9e:39:16:a7:9c:77:be:2f:26:
ee:81:96:ac:84:c1:91:67:8d:d8:a8:98:55:09:c9:8c:8d:de:
7f:9e:59:46:26:52:13:12:28:9d:b8:5d:d5:50:0d:bd:80:72:
71:65:e9:6c:c0:b6:1f:a5:5f:89:53:a5:9d:d8:d4:de:5f:d0:
45:9c:f8:92:a9:af:02:8d:40:ac:99:6f:5d:6e:de:a1:97:c9:
0b:d3:91:47:dc:9a:b3:22:60:05:20:29:a8:42:69:a3:59:1e:
d5:b5:53:4d:29:bc:62:50:9f:82:53:4a:26:ec:bd:1b:0a:ea:
3c:f2:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:40 2026 by rpki-client