Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: Bq/7ugMnT3dAh6d0DNCQKHv/J6QwUJgP30Uzg4LhvWw=
Subject key identifier: A7:C2:80:9E:C8:97:01:A4:97:90:43:B2:75:AF:F9:1F:9D:D2:18:9D
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 01A17883D959DB4A434FB333446C18D63D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 1A18
Signing time: Mon 26 Oct 2026 14:01:08 +0000
Manifest this update: Mon 26 Oct 2026 14:01:08 +0000
Manifest next update: Tue 27 Oct 2026 14:01:08 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: ReCvRK1ec59w8Hr0GJtY4FztM9NrNOdwzJZmMdNRmRA=)
2: bj3I_g97Yahu7vddzs1BZpAT61I.roa (hash: Umd8xcEXcey7lYUK9Epa+37FhJD7JxD8DRhMnzG18gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:d9:59:db:4a:43:4f:b3:33:44:6c:18:d6:3d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Oct 26 14:01:08 2026 GMT
Not After : Oct 27 14:01:08 2026 GMT
Subject: CN=a7c2809ec89701a4979043b275aff91f9dd2189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:21:28:84:91:80:2c:1b:c3:22:c0:2c:3b:
ae:76:51:96:da:c6:3d:3a:3c:6a:db:f8:ca:bb:67:
04:5c:ae:7a:35:af:77:da:a7:a1:75:8b:a5:8b:3f:
92:94:13:9b:7a:64:26:a5:b3:99:d9:79:ef:9c:be:
39:70:43:4d:dd:07:75:2a:69:a4:64:61:4b:85:2f:
b8:79:1b:0d:fc:27:0d:50:b3:e3:ca:c2:fd:8b:fe:
82:b9:9c:10:5a:f2:12:e8:a6:17:33:28:d0:8d:4a:
6a:2d:17:40:42:12:ab:68:dd:66:65:63:23:92:12:
7d:e5:d3:7d:8a:98:fe:a8:b3:be:92:e1:34:b0:45:
51:36:a0:79:8f:b2:61:53:83:34:41:5d:ab:5d:7b:
bd:2a:fa:43:0c:34:63:9c:29:5e:84:f4:d1:ba:51:
eb:05:a9:ff:69:a1:b1:b7:9e:b8:0c:d3:44:cc:bf:
b3:ee:a2:29:59:64:66:82:70:b6:7a:b1:74:9b:a6:
d7:e0:f8:b6:87:e1:91:c2:dd:db:3b:f2:99:12:8f:
a9:fe:84:71:3a:9f:ca:f3:f9:49:47:d7:c9:bb:05:
40:f8:cd:a7:ab:21:1e:11:f5:ee:f5:71:67:44:6a:
0b:39:82:41:dc:bd:37:57:8c:ef:a3:80:78:9b:0a:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:80:9E:C8:97:01:A4:97:90:43:B2:75:AF:F9:1F:9D:D2:18:9D
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ff:62:25:78:44:08:32:c3:bc:72:85:f2:1c:c4:8b:3d:f9:
49:d3:6e:f7:e5:ed:b8:c6:b0:48:48:a4:c6:17:b3:b9:4a:da:
c0:e0:5a:9f:c7:97:16:25:57:d6:07:8b:96:51:e2:82:7a:3a:
29:fe:f5:d6:ca:73:15:8b:4a:2f:76:df:6f:7f:89:7e:c0:84:
8b:57:e0:4b:2f:bb:c9:02:e1:bd:1b:e1:91:15:f1:71:3d:cb:
aa:91:b7:00:e7:08:fa:0e:94:e3:ca:c1:76:97:24:a7:dc:cb:
91:0d:9c:78:3c:a8:a8:39:3d:44:e6:10:27:fe:c6:b8:f9:1f:
cb:ba:d1:68:42:72:3f:e7:f9:7e:f1:1b:53:5e:0b:82:d7:9b:
d3:c8:70:4e:39:a3:2e:a9:34:0f:8d:52:c8:29:19:e4:de:1e:
c5:0d:31:21:65:b4:d3:5b:79:6d:07:69:67:1a:74:3d:5f:3c:
5b:18:88:ee:24:f7:fc:19:55:65:86:cf:52:56:88:41:47:d5:
98:7f:7c:82:a0:96:87:7f:3f:01:59:72:3f:77:a5:df:bb:22:
77:f7:ee:2e:a5:ff:d4:f3:d3:1d:e1:0e:b7:88:11:75:48:8d:
b0:c7:0b:ba:66:3f:06:59:7d:b5:96:fb:27:8a:f1:dd:9c:73:
51:82:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:15 2026 by rpki-client