Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
File: ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft (raw, json)
Hash identifier: Im5n8525xOxgRblxrnq0rXo1ZGhFHT1RrGtbuFZKNdE=
Subject key identifier: CA:D6:36:16:65:68:50:EC:02:ED:98:4F:8F:24:BB:9D:39:E7:F3:E8
Authority key identifier: 8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
Certificate issuer: /CN=8b18de6736e258b5f1a008d529922229a2932393
Certificate serial: 01A0F3E81EE62466927A9C200CFC661DDD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
Manifest number: 0135
Signing time: Wed 30 Sep 2026 20:01:10 +0000
Manifest this update: Wed 30 Sep 2026 20:01:10 +0000
Manifest next update: Thu 01 Oct 2026 20:01:10 +0000
Files and hashes: 1: IpDjDaen4M-VqbxT-HsQgW2lzN0.asa (hash: rQjAT1n9bsLsCJwTibsu+CoF2MQ8QmY/T0w14G7X9uY=)
2: ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl (hash: /NZeLS/UNPrulGuk2dTnd2+MO7BVjLWXgxvN6LoNB8s=)
3: taKgYCsZGDvagGUF19ZXEeasAPU.roa (hash: nJ/FzSD5iy11Q8Vrz1U8qvB/SWPV18wb+knyLGsBd54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:e8:1e:e6:24:66:92:7a:9c:20:0c:fc:66:1d:dd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b18de6736e258b5f1a008d529922229a2932393
Validity
Not Before: Sep 30 20:01:10 2026 GMT
Not After : Oct 1 20:01:10 2026 GMT
Subject: CN=cad63616656850ec02ed984f8f24bb9d39e7f3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:3a:4f:4f:d8:6a:63:82:a4:f0:ab:ed:2a:
69:19:b7:21:52:b4:51:b2:30:ca:05:70:88:ef:9b:
30:97:b3:f3:bd:f9:80:39:06:93:84:70:01:0f:a1:
ed:80:2a:de:eb:be:09:37:4a:b3:04:5c:5b:9b:69:
83:10:44:3c:2c:27:11:f0:f7:31:eb:25:e2:d0:8b:
5e:84:0d:82:6d:f8:f5:ca:be:86:44:74:79:ba:96:
8f:cf:2c:91:0b:93:d9:9e:bc:c9:e6:60:e9:dd:38:
63:14:03:b9:75:21:f0:fb:b5:fc:c0:7d:6b:ed:da:
3a:df:8c:6b:79:06:d6:06:39:7b:bc:1d:a1:89:a1:
fb:c6:66:6f:c0:8f:e7:20:32:da:b6:4b:2d:93:39:
3f:60:93:05:bf:52:c4:6c:5b:59:55:1f:d1:ef:ea:
7a:e8:25:35:c8:42:a2:e0:f6:e5:19:8b:8a:bb:3c:
ac:bb:7c:3e:07:82:32:bf:c7:88:4f:29:7c:5e:15:
7d:08:5f:45:7f:ef:9a:8d:20:ec:6e:69:27:b0:88:
d8:bc:e9:bd:3b:8f:34:1c:ca:1f:ac:5e:98:de:e3:
a4:a8:2e:ac:e0:a5:f6:c8:19:50:c0:18:8e:87:28:
f0:30:3b:48:64:66:17:4a:17:6f:26:4d:48:17:7e:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D6:36:16:65:68:50:EC:02:ED:98:4F:8F:24:BB:9D:39:E7:F3:E8
X509v3 Authority Key Identifier:
keyid:8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:eb:ff:17:41:65:fe:d3:e1:84:c1:d1:2a:fc:ac:c1:7e:08:
3e:8e:9d:29:36:25:b8:a7:a9:47:d6:6f:cf:78:74:cd:48:1e:
ab:0b:0f:b7:e4:13:91:15:c4:ee:d4:e7:5b:c9:d6:c8:e7:63:
ff:cb:d2:38:8f:cf:0a:f4:0e:d9:40:76:e5:a6:63:66:5c:f5:
20:96:50:f8:f8:03:e2:38:18:ad:d2:79:35:f5:8c:2c:9f:38:
e0:a9:ec:47:7c:bc:67:d8:a2:09:81:84:cd:8a:5d:7f:33:94:
09:d4:45:bf:3b:52:5f:8e:29:8b:e5:00:80:da:0c:34:8f:85:
9b:ba:3f:ef:76:9e:62:66:3c:0c:c7:0f:77:44:b6:35:71:c0:
34:1f:f6:20:48:84:f0:12:4f:cb:71:bc:e6:43:6e:60:4d:14:
07:56:9b:63:d6:15:1d:0d:8a:08:98:2c:9d:05:ae:f5:bf:47:
9e:13:1b:ee:b4:34:e8:68:67:0b:84:46:c9:36:f9:b8:c5:fe:
bc:a3:07:fa:1a:8f:1d:44:5e:72:a2:67:fb:2e:db:60:a9:7c:
96:bc:31:0c:30:9f:a1:65:cb:f8:94:07:b2:53:d3:58:42:2b:
15:44:e8:da:e6:13:96:a0:06:7b:ee:46:03:0e:09:b4:a9:9d:
d0:0d:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:36:21 2026 by rpki-client