Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
File: IpRcZ95iIC3YbfmripBuZv4XcYY.mft (raw, json)
Hash identifier: Zlexm5x70cxIWmX5xWdmWgvjhit28W31X1QeE36lx1M=
Subject key identifier: B7:50:9B:A9:56:13:10:37:4B:40:98:3A:A9:77:83:1A:6A:74:DF:CF
Authority key identifier: 22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
Certificate issuer: /CN=22945c67de62202dd86df9ab8a906e66fe177186
Certificate serial: 01A181192EC24AE2E55F8B2DE4D0313B654E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
Manifest number: DF
Signing time: Wed 28 Oct 2026 06:01:13 +0000
Manifest this update: Wed 28 Oct 2026 06:01:13 +0000
Manifest next update: Thu 29 Oct 2026 06:01:13 +0000
Files and hashes: 1: 0-Kq8JhekEwMATB4Jq4vPV1o2EA.roa (hash: x3WbjY2+9e4VpCttB1stFL71S7XcyqEUBA1zxosZSo0=)
2: IpRcZ95iIC3YbfmripBuZv4XcYY.crl (hash: h9bfl5yANC5X0j2IglC7vy9lROFSzd3jcvKZRNgSCTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:2e:c2:4a:e2:e5:5f:8b:2d:e4:d0:31:3b:65:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22945c67de62202dd86df9ab8a906e66fe177186
Validity
Not Before: Oct 28 06:01:13 2026 GMT
Not After : Oct 29 06:01:13 2026 GMT
Subject: CN=b7509ba9561310374b40983aa977831a6a74dfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:ff:eb:8e:9a:90:22:9f:b3:da:71:33:78:
d1:79:00:c0:6b:13:31:cd:65:d0:c1:2a:f6:8c:b8:
af:5b:0f:bf:31:67:66:40:e9:6d:84:e9:fb:eb:fa:
3a:f6:dd:1b:46:46:91:a8:dd:e5:be:ff:ca:87:a2:
2b:2f:b5:25:7a:3d:76:e1:7f:b5:ba:91:c6:ec:81:
9b:a2:b9:40:df:6b:4f:96:ea:41:50:29:59:23:d6:
98:70:34:6b:58:c7:c1:57:59:9e:4d:58:e8:c3:98:
e9:96:a4:9e:c2:14:24:0f:47:0f:7f:e5:19:07:4f:
3b:59:3a:6b:79:89:21:84:ed:c1:92:e7:60:6e:f5:
20:24:15:97:1d:33:90:27:20:1a:70:47:93:41:96:
b1:dd:3b:d7:28:3e:04:97:4d:a8:39:e5:a1:fc:4d:
17:ea:5f:fd:3f:8f:d9:93:75:40:ef:bb:bd:f3:4c:
1b:3d:2e:75:24:21:29:6b:95:52:9f:16:5a:48:83:
7b:b1:1e:f7:df:c9:81:99:45:91:05:11:c0:9e:6b:
22:8e:c5:6c:02:8f:fc:1f:1b:b3:98:8c:64:09:d2:
f6:13:67:f0:95:fe:fb:7a:59:80:45:96:64:f4:f7:
fe:a2:10:9b:62:0b:7f:54:fd:29:1a:f4:1f:d5:dd:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:9B:A9:56:13:10:37:4B:40:98:3A:A9:77:83:1A:6A:74:DF:CF
X509v3 Authority Key Identifier:
keyid:22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5b:58:c7:13:1e:84:03:10:d9:5a:d0:f7:61:b8:d9:35:ee:
ff:6d:71:44:e5:72:c1:d8:76:5b:dc:98:e8:42:e7:a8:10:65:
14:14:74:84:f8:b2:c1:89:ef:bc:bd:e6:95:a9:e1:cb:ff:fa:
93:be:77:df:53:a3:ae:24:80:30:64:0b:05:b7:34:2e:f6:a3:
da:44:eb:9d:cf:a6:78:41:84:c8:44:cb:87:bc:31:6b:e7:8c:
47:56:89:bc:7b:6f:5a:25:0e:6c:6e:fe:2f:57:c6:91:ee:ba:
e9:0e:f9:5a:d6:b9:c2:eb:34:ed:7e:d4:22:16:9a:a5:0e:6e:
cd:d0:95:aa:48:f2:b8:e4:2e:6a:35:6d:cd:73:fa:ca:3e:22:
9d:b2:0f:37:c3:fc:ec:58:35:55:7d:cc:46:27:0e:8d:25:16:
ef:01:34:87:97:1f:8f:58:03:7a:6d:84:86:2a:42:71:11:3b:
b4:6f:8a:46:1c:15:3b:3a:6e:94:74:7e:96:3c:0b:6f:4e:be:
32:31:8c:95:64:6c:51:c5:50:b6:33:b4:2d:b2:de:63:b1:ea:
20:de:4c:0a:c8:27:b6:07:dc:0d:0c:15:ed:ff:61:e4:51:3f:
50:3f:a1:27:a2:17:d4:a0:d6:e7:d0:56:a2:78:21:3e:64:14:
a8:76:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:06:55 2026 by rpki-client