Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: 583Wb6OBo0s7lw8litP7UtSsd98TPJIz4ztCsyaJGjo=
Subject key identifier: 96:51:98:BD:52:E0:29:9E:42:73:82:00:77:9F:CB:3B:DC:29:42:C5
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 01A08B68577FA71A63D5D9BFC6492B5DD13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 13:01:06 +0000
Manifest this update: Thu 10 Sep 2026 13:01:06 +0000
Manifest next update: Fri 11 Sep 2026 13:01:06 +0000
Files and hashes: 1: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: dGxXipkCg4EQ44F5YTZIzQayDmgk2qBalHwZT2gK8tE=)
2: TlCjshw48MI80zaCqZRdp10HXmU.roa (hash: IUaeg0F1EJZvlebFMhAdUjihSrKer72rVZfI7a/WmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:57:7f:a7:1a:63:d5:d9:bf:c6:49:2b:5d:d1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Sep 10 13:01:06 2026 GMT
Not After : Sep 11 13:01:06 2026 GMT
Subject: CN=965198bd52e0299e42738200779fcb3bdc2942c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8e:dd:40:58:78:7d:11:84:b5:ac:de:0d:fb:
75:78:79:36:a1:c5:fe:c4:1a:37:87:a6:d8:df:08:
e2:2e:07:cc:85:bb:d8:63:bc:be:74:77:df:75:45:
f4:cb:c3:3c:ce:f5:2b:27:18:58:19:bf:24:84:29:
31:4a:c8:18:36:c6:cb:1a:db:62:2a:f2:c1:37:17:
73:84:d8:1f:0e:2d:46:db:ee:48:01:19:30:a7:a7:
53:01:2e:29:a3:fb:c4:86:ab:69:c4:6d:8d:de:96:
5b:ed:4b:56:2e:a1:f2:0f:2f:2d:cb:d8:53:96:fe:
f8:aa:88:2f:bf:f4:06:03:db:8a:7f:1b:fa:f7:91:
f0:3f:81:a0:54:a9:7d:2c:8f:83:64:4f:54:22:c9:
36:73:0d:9f:79:36:6c:c3:3a:6f:6c:54:55:17:bb:
a0:d5:a9:81:92:9c:86:74:ab:e8:6e:25:f8:fe:f6:
c7:07:83:13:43:e2:8d:15:30:3c:c1:85:51:cf:7f:
f7:b9:62:1b:16:bd:f3:ab:d0:6e:83:4d:18:95:1d:
57:66:42:96:4c:62:16:f5:fe:f3:49:77:a4:a2:2f:
6e:31:aa:7a:d0:1e:33:bf:53:64:af:0f:3f:e1:43:
2b:e3:85:82:12:64:75:4e:1f:35:c3:b1:a5:2d:9c:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:51:98:BD:52:E0:29:9E:42:73:82:00:77:9F:CB:3B:DC:29:42:C5
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b0:ff:51:ca:5f:84:05:d5:c9:23:b3:d7:ba:72:df:7b:f2:
71:c0:b5:37:a0:2c:19:a4:e0:21:53:f0:30:23:f3:c8:35:dc:
b1:7e:e4:b6:e6:bb:91:a1:b1:f4:6c:37:d4:16:de:e9:8d:0f:
22:7e:7d:65:57:a8:06:fd:54:3d:5b:cb:26:9b:96:e7:7e:37:
cf:2e:ee:2b:ba:ac:4b:93:5c:02:47:05:bf:c4:08:70:bd:06:
80:39:fe:92:ce:44:0f:2e:48:97:23:46:aa:c7:b9:a4:a0:f3:
62:eb:ca:87:74:3b:17:72:56:6e:de:64:c8:2d:cc:05:ca:75:
5c:5d:78:b2:de:53:bc:58:d8:f2:0e:52:47:5a:d5:8b:ba:50:
0f:53:f3:f3:61:e7:37:37:18:a5:dc:08:40:91:9c:42:2a:59:
1c:41:f2:7a:2b:70:2f:25:d1:b1:f4:be:3b:b6:b1:27:38:3a:
c3:86:f8:54:b4:ec:0f:33:11:76:2f:a9:b5:9c:e1:aa:d1:d7:
be:88:95:30:43:11:8e:45:78:fc:f3:cf:0d:42:e2:d5:f2:a9:
70:25:8d:28:bb:90:b0:1e:d7:d7:0f:58:89:bb:b2:78:0e:f4:
7c:7c:f9:eb:18:2d:14:cd:2c:73:0c:fc:85:3e:44:09:17:e5:
8a:9d:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:59:23 2026 by rpki-client