Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: lX2TwKiRf9eeZsp7JCyXj2Ls5g4KNmLPj19an+AjJ4A=
Subject key identifier: 97:6C:5A:AA:0C:14:48:90:76:8A:8A:D9:8A:F4:D2:1B:FE:E9:07:81
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 01A199FCDE45B009CEA48CA121971EDE8FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 1828
Signing time: Mon 02 Nov 2026 02:00:48 +0000
Manifest this update: Mon 02 Nov 2026 02:00:48 +0000
Manifest next update: Tue 03 Nov 2026 02:00:48 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: GNaLbMbzREc8CqeYR+3lXUcd4QyFPJeIIP8B3AuJFtc=)
2: K7k2wTc_sjyYfFx23FMzKfg8QD0.roa (hash: FDPYoITUuwad+pKyr3wEscJ86wRTd6OsrGdHbeG17s0=)
3: RstGJIXrGP_zn4niceGRZ3XM7pY.roa (hash: iIYRPvDwo0qkOrNzYmf7D6l8FHyxcrfNiQYhWcOuB58=)
4: WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa (hash: uHLuQi8KJbVs5VqNtZkcp+fIJy6HLJbaJ1btjtIY4cM=)
5: XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa (hash: xDb3dtwGlNAHcmXCM8UYUqhwZfzy/vemU3ULkTqFlkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:fc:de:45:b0:09:ce:a4:8c:a1:21:97:1e:de:8f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Nov 2 02:00:48 2026 GMT
Not After : Nov 3 02:00:48 2026 GMT
Subject: CN=976c5aaa0c144890768a8ad98af4d21bfee90781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:c4:5d:9d:c1:18:fe:ce:0f:be:46:67:0f:
07:25:1a:22:43:7b:12:71:97:ae:0f:f8:05:88:fd:
b4:cc:e1:22:2f:73:8b:00:2d:73:9f:e6:0f:4f:09:
41:9f:d7:4a:ef:f9:31:98:c0:ff:22:a2:22:cc:5f:
11:6c:a6:04:77:e8:af:5b:d0:62:d6:12:ea:4a:46:
f9:5e:2b:f9:22:95:4c:c0:d1:c3:04:ca:0d:77:94:
16:4e:f1:db:e0:6f:42:f2:8b:91:8a:9e:dc:39:eb:
ec:8f:73:4c:5f:ce:6b:57:e4:c0:d8:ba:48:86:cc:
4f:a7:14:51:53:e2:c7:e5:fd:5e:bb:da:6c:18:01:
0f:8b:12:5d:65:4b:a7:b1:09:b0:19:06:a9:4d:86:
f2:bc:34:f3:9f:9c:36:90:41:31:d6:a5:5a:1b:ac:
89:cd:bf:db:0f:a9:b1:e0:44:e7:a7:6a:ea:86:17:
0b:07:45:54:69:69:d8:1f:b7:c9:cf:b9:17:bd:48:
b5:5d:0d:ef:37:f2:9a:b5:87:55:3d:0c:e0:83:b8:
e3:b9:51:72:ac:cc:14:e8:ec:fb:de:bd:e4:92:9c:
6d:26:a7:85:1c:b0:0c:71:10:43:f4:93:d2:36:2d:
21:dd:03:b5:d9:d2:43:1d:ba:ea:0f:51:d4:b2:72:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:5A:AA:0C:14:48:90:76:8A:8A:D9:8A:F4:D2:1B:FE:E9:07:81
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:2b:ba:41:75:d4:91:d7:cb:db:b4:90:a8:6a:5b:fc:3b:
85:aa:10:d8:e4:fd:51:d7:1d:29:aa:de:a9:15:fc:55:21:78:
af:ed:37:1e:0c:41:26:b2:b6:97:6f:4a:1d:3b:a8:8e:b6:b8:
0a:0e:21:2b:94:23:96:9e:c3:74:9c:ca:50:c7:b1:05:28:3f:
d7:d9:05:5e:c1:db:0c:49:66:9d:14:7e:b2:12:fc:9c:b8:f7:
b2:fc:52:c4:2c:9e:44:8f:2b:e9:1e:d1:68:47:93:6a:e9:ff:
57:00:28:35:47:a8:7e:b6:9b:14:0a:cd:90:e8:76:fe:62:74:
fe:c4:c4:85:73:32:34:ee:08:f8:46:cf:93:77:23:15:40:f9:
71:8f:d5:02:af:b5:da:03:93:05:d3:e7:90:44:02:35:0e:de:
7c:f9:df:64:50:9c:5c:59:78:3a:9f:28:9f:4f:fe:87:d7:65:
55:47:71:a8:0b:2b:da:96:a9:c6:00:f1:9d:f2:db:02:c2:ea:
2c:b4:b4:f0:96:ee:68:53:23:47:bd:1c:d4:21:27:ee:6f:8b:
e9:31:da:ea:c7:a0:ca:1d:5e:ba:74:ce:a1:9f:89:a3:c0:23:
34:08:6f:27:c5:46:bc:b1:77:29:9c:f7:b1:4c:40:cb:ff:2f:
c9:56:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:26:23 2026 by rpki-client