Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: UASU8qDvhlbKyRquCuBdK/bB5mQRlMLIx2TUWQIVg+s=
Subject key identifier: EC:AC:A3:66:F8:56:10:EE:3D:87:41:3B:C6:3B:85:58:1C:ED:5E:BB
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 01A17C6027FD1C435BA602B55BFE292E47F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 0951
Signing time: Tue 27 Oct 2026 08:00:38 +0000
Manifest this update: Tue 27 Oct 2026 08:00:38 +0000
Manifest next update: Wed 28 Oct 2026 08:00:38 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: DjdOq/PBYzHBN5XRQ64aq0pvIVRnpqlSw+B1gCCIPGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:27:fd:1c:43:5b:a6:02:b5:5b:fe:29:2e:47:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Oct 27 08:00:38 2026 GMT
Not After : Oct 28 08:00:38 2026 GMT
Subject: CN=ecaca366f85610ee3d87413bc63b85581ced5ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:99:f6:36:0b:f6:8d:3b:bb:1d:ba:58:a6:
72:03:86:4a:9b:24:14:b0:64:ad:b9:3a:3b:c1:e8:
4b:9b:fb:5f:bf:f0:2d:0d:65:b1:d5:1b:4a:dd:9a:
fb:e7:b3:65:3b:88:3a:fb:04:b2:ee:a7:08:4f:cf:
c0:e0:b2:99:b3:82:f1:c8:0b:a1:72:d4:a9:da:88:
4f:d8:7d:06:50:11:a7:99:93:97:be:ba:0f:74:0d:
0c:d5:eb:d3:d9:f9:d2:07:09:94:9b:6c:c1:19:c7:
5f:0c:93:a3:e8:2c:a3:88:8a:c5:aa:e8:53:95:b9:
58:d9:21:6e:08:e9:ac:13:c9:5c:fc:36:4b:be:b0:
7f:ff:4e:4a:e2:77:ce:d3:59:5a:4b:b0:b7:5f:d9:
df:06:53:37:61:7a:2f:c7:77:92:43:4b:26:a1:e4:
6d:33:a8:c7:3c:b8:7e:e7:ec:c8:bf:82:c1:a2:70:
4a:2a:5e:7d:fb:9f:03:09:e4:63:d3:3c:b8:0c:43:
c6:88:0a:2e:cb:f6:3e:67:ad:c6:46:1c:2d:1a:31:
c4:5b:47:ef:0e:ca:2d:1d:fc:07:c5:3a:2b:dc:e9:
9c:b1:30:8e:1c:7d:16:79:26:90:ef:02:27:16:64:
3e:4b:b1:f3:ed:34:51:06:73:d6:3d:85:69:4e:b1:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:A3:66:F8:56:10:EE:3D:87:41:3B:C6:3B:85:58:1C:ED:5E:BB
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e5:63:7d:7e:a8:95:6b:f5:fa:4c:6d:f1:2d:9f:76:be:d2:
95:96:66:6d:ec:1f:76:a0:b4:f8:b3:85:27:2c:95:4e:80:37:
ca:8b:a9:15:a1:86:e9:66:ec:f0:a2:69:33:0c:72:5c:35:82:
46:35:43:cd:a0:f4:34:75:8d:27:df:9b:ab:de:b9:71:9f:95:
a8:06:f3:ff:2a:ab:c4:c9:21:d9:48:80:c2:4c:41:ca:ba:0b:
d2:0e:18:cb:49:61:22:09:8d:22:be:9c:df:06:f8:72:72:be:
c1:8c:a8:10:1c:eb:b8:5d:6e:30:92:4d:b5:39:08:10:56:d5:
05:9c:01:30:01:a4:c7:40:ba:06:ee:a8:6f:50:ae:04:f4:f2:
be:b7:02:e3:e5:e1:13:cb:01:00:44:75:7a:97:ab:8d:ab:23:
13:b5:d2:c8:3d:af:be:5e:a1:b5:f5:19:bb:46:b9:f2:14:55:
f3:85:38:aa:fa:8a:d7:64:94:a6:29:4e:16:95:1a:51:cb:4c:
f8:92:25:3a:24:c0:6c:e3:ad:e1:9c:6b:52:7a:5b:82:e4:5a:
a3:5b:88:c5:4c:2b:6b:07:2d:0f:17:1c:22:76:04:55:88:f9:
3e:21:c5:c9:ba:c0:d9:8c:d6:85:58:4d:64:1f:fc:20:b8:e1:
12:a4:04:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:15 2026 by rpki-client