Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: ROB6+2Ik5P3qhaSWa7B/81zlg3VuDhLNwDw9lNyA7u8=
Subject key identifier: 50:D1:B5:75:BB:7A:3D:55:EB:E5:39:A1:FA:08:93:1C:6C:D6:02:0F
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01A168D92DF3C4778C21D2EF10D4D3B7CAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0E81
Signing time: Fri 23 Oct 2026 13:00:25 +0000
Manifest this update: Fri 23 Oct 2026 13:00:25 +0000
Manifest next update: Sat 24 Oct 2026 13:00:25 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: crRFMEkDIrk3yIL+UkAJc7GiWGxCS1ChkyORY+Cfzwg=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:d9:2d:f3:c4:77:8c:21:d2:ef:10:d4:d3:b7:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Oct 23 13:00:25 2026 GMT
Not After : Oct 24 13:00:25 2026 GMT
Subject: CN=50d1b575bb7a3d55ebe539a1fa08931c6cd6020f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:03:e4:3e:d8:09:75:4f:f2:00:59:f4:9d:
4e:3a:60:76:c5:3c:b5:5a:66:fa:e0:2a:cd:87:61:
02:58:4c:74:53:70:b7:4b:29:26:dc:e0:a5:00:72:
1d:45:af:8c:17:78:82:d7:23:7c:14:08:66:bd:73:
44:b3:e4:4a:5a:b5:82:0a:f8:be:84:4d:8e:bb:aa:
2e:4e:f0:16:08:ff:43:80:e3:d5:ce:02:d1:38:22:
14:4b:e9:6f:6e:6d:4f:d3:80:1e:c1:2d:6e:bb:87:
37:e8:73:33:68:9a:42:a1:12:90:62:a7:e2:57:27:
66:57:53:9b:d6:72:2a:3e:b4:0b:26:5c:24:23:d2:
d7:eb:9e:5f:db:d7:39:0b:06:9f:43:da:03:cb:ef:
df:e0:5c:fb:92:88:a3:4c:5c:1c:aa:67:24:44:5b:
2e:13:12:51:32:2a:b4:8b:40:82:b6:af:d6:a3:49:
23:11:24:b5:ca:fc:f6:c4:90:5c:28:5d:64:31:6f:
14:eb:74:48:07:4c:6c:ba:fe:81:1f:3b:5c:3d:24:
31:f5:c9:09:e6:dc:55:31:fa:2b:27:3b:8f:33:37:
fd:a0:a1:7e:28:0e:93:d9:02:6f:e3:bc:ef:fd:a4:
b9:10:ce:e6:80:f5:9f:91:d7:c2:c7:91:b8:0b:e0:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:B5:75:BB:7A:3D:55:EB:E5:39:A1:FA:08:93:1C:6C:D6:02:0F
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:78:ec:d5:0e:89:95:93:70:80:6e:cb:70:13:44:21:9b:
7f:e5:39:1c:92:12:e0:25:e5:9d:5e:45:80:1e:bd:14:12:e4:
e5:cd:48:3f:01:0c:cb:de:38:d4:58:58:61:59:9d:66:75:eb:
f6:84:2b:48:7d:4a:37:a5:00:2e:bf:f2:a5:28:10:d3:19:9f:
74:a9:8b:4f:5d:dc:bf:a8:69:61:8c:84:cb:e7:95:5e:92:ae:
99:f1:61:ee:6f:27:f9:a5:c2:5b:ee:45:bd:bc:3e:00:6f:61:
d6:ef:dd:ce:d0:cf:b4:b0:77:56:62:5e:ee:f2:6d:73:22:a7:
9e:7e:5d:e4:2f:b2:db:b1:39:92:54:36:20:ce:ca:72:a6:7a:
5d:8b:37:00:3c:8e:8c:d7:93:f6:56:ea:fb:78:68:8e:34:8d:
54:bd:0f:2c:83:12:97:36:a9:6c:27:1e:79:b7:e1:54:b9:e1:
fa:76:c7:06:8a:69:12:d1:cd:c5:59:4f:fb:a7:74:77:bb:1a:
62:01:ee:47:2f:a1:4f:b0:eb:1d:3b:23:4a:b5:9d:62:b2:9f:
89:b9:fb:e1:d7:87:11:f2:ad:b2:63:e2:4e:49:a8:63:4d:91:
01:f8:c1:a4:0e:72:37:ab:79:80:73:31:88:52:6b:00:8a:48:
41:de:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 17:35:43 2026 by rpki-client