Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: DZVtCpp2X6rmZJXVjy/2+bseHr/eNNLt5nTTH5I5kmQ=
Subject key identifier: D6:9E:9A:A8:B0:05:C2:1E:CB:58:EE:39:8C:B2:75:CA:0F:50:22:4C
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 01A1803D8E3E5E66F3C28A075143291086A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 0953
Signing time: Wed 28 Oct 2026 02:01:20 +0000
Manifest this update: Wed 28 Oct 2026 02:01:20 +0000
Manifest next update: Thu 29 Oct 2026 02:01:20 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: 3eepa6Dy3gxZQPk9PLKT6KQ3t+9UiK9jmepYKr9kXh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:8e:3e:5e:66:f3:c2:8a:07:51:43:29:10:86:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Oct 28 02:01:20 2026 GMT
Not After : Oct 29 02:01:20 2026 GMT
Subject: CN=d69e9aa8b005c21ecb58ee398cb275ca0f50224c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:88:8d:14:c5:6d:2a:31:5f:2b:31:eb:1e:
6f:54:74:95:cf:da:79:11:de:01:b9:a9:d8:c6:04:
83:e9:a1:b3:40:16:d2:4b:1d:5e:a5:82:99:55:fe:
00:b3:02:7d:63:a4:5d:80:5b:71:32:a6:e5:58:49:
c8:78:2e:7a:cb:b6:3e:fc:54:92:c4:13:7b:0e:43:
98:32:e4:c3:e4:2c:e1:84:10:bd:ac:1c:19:79:10:
fc:15:56:45:5e:ae:ea:20:7f:98:cf:38:d5:17:32:
cc:0d:0c:79:e7:99:3d:c8:62:42:2b:0e:3b:13:30:
66:b7:ef:d1:61:ca:1f:2f:59:ac:12:67:21:8b:ed:
59:61:44:c0:b6:f3:83:14:a0:a3:b2:0c:63:a1:48:
c6:20:2d:d2:7e:46:bf:13:8f:af:7c:1d:61:52:d0:
d7:ee:b1:df:06:20:cd:d5:e0:78:67:57:a1:39:af:
e0:00:5c:1a:68:d0:de:5b:08:36:c7:c1:b0:b9:a0:
bf:92:89:52:32:4d:69:20:76:a4:98:9a:84:17:11:
1d:6b:78:69:3e:91:2a:20:e5:e0:ac:1a:8f:9d:b9:
5f:ec:c6:ce:f0:ce:ab:6f:40:eb:90:1e:80:6f:ad:
ef:7b:06:5b:a2:68:d8:25:69:3d:87:38:9f:3f:6b:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:9A:A8:B0:05:C2:1E:CB:58:EE:39:8C:B2:75:CA:0F:50:22:4C
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e2:93:33:0e:c5:b9:0d:98:30:83:4a:32:23:b6:b9:8c:52:
b3:f3:9c:cc:e6:0e:06:3a:96:dd:b5:4c:85:11:1f:91:0b:09:
53:9e:b1:8c:53:8a:2c:9f:09:ee:8e:b7:64:75:21:3c:fd:ea:
d2:d6:14:f9:53:26:aa:09:6f:68:a6:94:56:8d:45:4d:d4:e7:
f5:26:ee:2f:0d:16:12:4d:f5:d6:de:34:7c:81:1d:96:d0:54:
96:33:c2:3c:83:bc:43:e6:40:ae:e5:2b:75:5e:da:6d:e7:cd:
9a:27:09:ad:bc:53:86:a7:c9:d5:c8:93:86:4f:6d:cb:ea:1c:
cb:a5:12:4c:aa:47:5e:4d:b8:87:37:0f:7c:f1:e9:41:e4:fd:
7a:46:be:3f:12:a3:a1:86:72:71:d7:c6:1d:d6:d0:bc:ac:ce:
57:b2:d3:c8:08:29:b4:1f:93:8d:fd:21:9d:c6:53:af:44:f7:
f1:5d:eb:59:6e:30:41:2d:39:5c:7d:62:53:5d:f3:50:2c:31:
59:e1:95:aa:43:52:db:92:a7:28:70:de:97:0b:e7:cd:3a:21:
12:ba:22:ea:4f:89:8b:99:28:0f:32:d2:df:ff:70:de:5c:4b:
7d:7a:89:af:9b:09:00:f8:a8:3d:ec:81:13:16:28:b7:d7:d3:
53:1d:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:20:26 2026 by rpki-client