Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: 97ZOKwtpsgC9TfEtaHoQ5hrpGnHNyB/vd1Ca1FpgKYE=
Subject key identifier: 24:23:C8:98:F9:34:28:6F:F1:2A:3A:C2:E6:3B:69:A2:18:C2:8C:0F
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 01A08CB168CBE3631B94A5B64EB1D2E29064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 15B0
Signing time: Thu 10 Sep 2026 19:00:31 +0000
Manifest this update: Thu 10 Sep 2026 19:00:31 +0000
Manifest next update: Fri 11 Sep 2026 19:00:31 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: /yLz5Czjp+ELjImqeIILEtf6VxOJOg6CGhJEg770Vkc=)
2: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (hash: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:68:cb:e3:63:1b:94:a5:b6:4e:b1:d2:e2:90:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Sep 10 19:00:31 2026 GMT
Not After : Sep 11 19:00:31 2026 GMT
Subject: CN=2423c898f934286ff12a3ac2e63b69a218c28c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:b6:75:02:49:f3:38:4d:ee:42:d0:0d:a6:
42:25:4a:5f:71:fd:cb:59:fb:1f:ee:d8:52:17:3f:
1b:b7:85:83:2b:e6:d4:b8:a4:0f:7b:d9:87:f8:00:
52:4c:6e:70:8d:49:74:ba:3b:ee:8c:2e:93:67:0b:
2a:07:c3:57:86:e4:95:8e:f6:19:7d:c2:7c:2f:00:
e9:6c:74:af:f8:b0:6f:b1:0f:10:30:09:1f:3f:c8:
a1:9a:76:b3:79:49:f4:8e:46:09:73:8f:07:75:90:
b3:74:4c:09:b3:1d:32:09:65:06:31:8a:bb:53:f1:
1a:3c:74:36:f4:52:96:fd:09:67:85:53:b2:c9:4f:
48:c7:0d:c0:14:55:78:5b:b2:0c:aa:29:12:4d:83:
dd:11:6b:56:fe:c0:cb:2d:2d:e0:d1:d0:4f:1d:3f:
54:d5:21:ce:09:b8:d4:53:4c:ff:c0:40:ca:20:16:
ae:a2:fe:59:7b:31:65:04:11:41:3f:65:f4:39:56:
56:e1:72:bc:35:f5:ec:2d:ed:51:e2:55:59:3f:42:
de:f4:c1:ea:81:24:85:f7:61:a4:c3:fc:1e:d7:a1:
2d:3d:15:22:9e:c6:93:d4:ec:29:36:b8:0e:ec:51:
7a:a0:4a:7a:c6:47:a0:5f:05:e2:76:35:87:4a:80:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:C8:98:F9:34:28:6F:F1:2A:3A:C2:E6:3B:69:A2:18:C2:8C:0F
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:f8:fa:67:d1:0a:64:f0:27:9b:c9:ac:c2:6e:73:35:aa:
cc:2d:98:cf:2e:b4:27:11:ff:5e:2f:c7:bb:38:3f:4c:56:9a:
7c:c7:ff:dc:e8:09:6e:21:88:b1:b6:d1:ad:c8:00:19:03:8b:
c4:45:76:82:2e:40:62:58:a7:a1:2b:d9:f4:73:b7:60:70:11:
6e:0b:57:ed:65:ff:ad:4f:61:d7:4b:bc:48:c4:50:4b:32:0a:
16:c9:54:13:7f:56:b8:7d:3b:50:d4:04:d1:a6:17:23:d0:40:
ae:25:17:cd:cb:a2:ea:43:81:a5:f3:dc:d7:e6:9c:b3:5a:da:
a4:e5:8c:02:84:2e:34:20:8a:d4:11:c1:b0:34:ec:3c:8a:6a:
f7:50:66:44:6f:ae:b6:3c:41:d8:c0:f0:4a:00:04:ae:3b:bc:
06:7f:1a:c5:d3:c2:22:de:26:ed:b4:f8:07:ab:59:e1:4d:c6:
9f:a5:0b:38:a7:fd:47:88:09:1d:96:01:d3:b9:d9:36:71:ad:
4f:fc:4a:22:6a:8f:2b:42:19:27:b4:e1:f7:74:fc:02:31:90:
7d:8b:fa:12:4d:5d:4d:6b:64:32:c0:3a:8b:f8:0a:e9:95:1d:
7a:82:ec:ec:9b:cd:53:28:b5:3e:e1:eb:72:85:86:35:ed:f6:
1b:59:d5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:23 2026 by rpki-client