Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: +zlEyjQEX+Z+DihhfJ0b8BqDuTds2eanJLt86DfoNrY=
Subject key identifier: 6A:9B:D3:BA:AE:15:91:E9:B4:24:D3:6C:F9:F0:46:80:6E:05:6D:A5
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 01A08C439CB80FC636CAA5D881CCFBF3707C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 0A85
Signing time: Thu 10 Sep 2026 17:00:36 +0000
Manifest this update: Thu 10 Sep 2026 17:00:36 +0000
Manifest next update: Fri 11 Sep 2026 17:00:36 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: lPMMXdy3B/8Ro2CNl2aDm1JegX3p8Hn1eBhIt1IlGiY=)
2: dshUZvB4McXbpCwuJto_ABAOvNQ.roa (hash: V5ln1lpZELvPyBOpg3oQ56WAm93C6lBYruWQT9Rpyxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:9c:b8:0f:c6:36:ca:a5:d8:81:cc:fb:f3:70:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Sep 10 17:00:36 2026 GMT
Not After : Sep 11 17:00:36 2026 GMT
Subject: CN=6a9bd3baae1591e9b424d36cf9f046806e056da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:f1:89:4f:a0:d4:4e:51:d1:b3:be:cf:28:
5b:88:39:9c:fc:e2:c2:ce:3c:66:49:69:f9:29:f6:
d1:bf:27:e1:a3:cc:d0:ef:c6:1c:83:60:51:2a:da:
c2:94:a4:a2:0a:9a:c2:d6:d8:dc:18:0c:4b:d5:46:
67:72:54:c0:86:97:cc:1c:ff:3d:91:90:f3:c2:8d:
b5:c1:fa:97:79:24:a7:9c:4d:ce:6d:46:0b:0b:4b:
42:c0:7f:a2:b0:83:b1:d3:8a:ee:76:1c:cc:b4:c6:
d3:42:96:64:56:2d:06:f2:14:20:c8:f7:c1:e0:38:
99:2d:57:ba:79:0e:ef:d9:cf:6d:d9:b8:5a:40:f4:
3a:ab:cc:4c:73:be:c1:4e:a2:8e:fe:8c:5f:13:7a:
1a:3e:bd:07:c2:51:e7:f5:21:7e:40:6c:f4:b7:7e:
9f:7b:20:7b:50:ac:04:60:58:32:43:18:c5:8a:10:
22:89:c0:71:56:74:c8:bf:50:c0:b7:5a:1d:48:1c:
3f:f9:02:be:47:b5:15:ba:56:57:b7:2d:de:8e:4e:
aa:77:77:87:f5:4a:74:8c:d8:00:ee:0f:bc:13:09:
4f:cf:27:ab:4d:f6:fc:3d:df:e6:d0:27:3a:f7:f1:
52:ba:ab:42:c1:ee:74:29:d4:be:1c:86:0b:0a:44:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:D3:BA:AE:15:91:E9:B4:24:D3:6C:F9:F0:46:80:6E:05:6D:A5
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5d:b0:69:60:92:ae:32:bb:06:31:76:14:7a:da:98:70:97:
3d:a1:22:63:1f:82:d6:e5:9d:83:ed:87:2f:f4:71:31:fe:ba:
0d:0f:4f:4c:b6:d7:cf:9c:b4:18:3a:72:b2:cd:84:12:e6:c9:
82:6e:f2:83:c6:bb:66:45:46:f6:8d:57:a6:96:a9:f7:71:0c:
48:d3:f7:e9:d2:dd:2c:a5:5f:35:e3:3d:7d:01:3f:89:d4:6f:
15:88:31:aa:6f:1d:ac:d7:5f:37:0d:33:5f:17:ac:40:a1:41:
f1:76:b8:6a:27:03:8e:03:12:a5:88:45:50:88:80:44:7e:8d:
a3:a7:9f:e3:80:59:c0:80:24:43:61:a7:0c:70:5b:0e:ca:54:
94:88:e8:31:9e:6e:7d:ec:25:ae:f6:47:93:a1:9a:aa:86:52:
a3:a2:a8:f2:e3:66:2c:4d:e0:70:99:27:81:a9:a3:a0:a8:b9:
5a:63:2d:60:ca:93:5b:52:18:e7:8e:33:1b:9c:50:7a:e4:06:
58:3e:3a:41:ac:b0:f8:3d:80:93:2f:11:07:5e:f3:c5:e3:4f:
08:79:6a:06:db:bc:e3:8b:e4:1b:2c:1b:e7:17:68:a7:30:f2:
b1:cd:94:38:22:c0:8a:1f:49:59:bc:b7:ba:8d:72:82:e1:96:
d7:4c:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:10:40 2026 by rpki-client