Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: UJ+UoBvrb63aDnz2gYV5Aod7qPZV9kCJYXHkxZPFuMo=
Subject key identifier: 3D:CD:5C:C4:81:9E:30:00:65:9E:D2:64:A8:7E:79:A7:D6:2E:FA:2C
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 01A1084ACB8EC2CFFC74807EC8817D4C84D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0E40
Signing time: Sun 04 Oct 2026 19:01:21 +0000
Manifest this update: Sun 04 Oct 2026 19:01:21 +0000
Manifest next update: Mon 05 Oct 2026 19:01:21 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: rWU6bUTw9yP9XYGSkH2PN+8NS4LXzyQUPDSPICyxwHE=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:cb:8e:c2:cf:fc:74:80:7e:c8:81:7d:4c:84:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Oct 4 19:01:21 2026 GMT
Not After : Oct 5 19:01:21 2026 GMT
Subject: CN=3dcd5cc4819e3000659ed264a87e79a7d62efa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:21:63:12:63:4f:96:20:f2:21:e6:45:0b:
74:1d:c0:11:b2:f6:2e:63:6b:16:70:2f:9f:dc:17:
f2:ae:e2:3f:73:f8:40:b1:44:c3:36:61:e1:13:1c:
cb:ee:c2:f5:9d:34:1a:7b:64:c9:a4:d7:4b:00:70:
f9:96:b2:67:4b:91:e3:0c:e1:75:1a:69:04:19:c1:
1d:d1:50:e4:60:b2:61:56:6e:e1:49:d6:44:b3:62:
bf:9b:bf:13:d5:d7:f7:9d:bc:f3:f0:f4:11:af:74:
27:23:6b:06:2e:72:5b:c1:36:a1:8d:38:a5:9d:5b:
40:49:d2:e4:6f:6a:f3:b2:0f:92:30:ae:c6:74:2c:
5f:16:2e:1c:cb:70:60:70:bb:24:f1:2a:58:90:4b:
e7:ed:72:02:f9:22:8e:84:40:7f:5a:b3:e8:9f:6d:
d3:a4:39:f0:93:4f:0f:49:95:ff:be:50:12:1a:bb:
b8:71:17:be:dc:1c:60:d2:81:87:65:b8:b1:f7:54:
53:09:a5:f7:5c:92:f4:2f:e7:bc:f1:77:ad:a3:c7:
19:9c:dd:c4:39:e6:21:6f:2f:d1:8c:e5:c5:f5:8c:
85:f7:dd:cc:d5:a5:35:8f:2f:d6:d0:91:b6:18:92:
76:c9:b1:d0:1c:6e:7a:19:cd:6e:5a:e6:cd:e7:59:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:5C:C4:81:9E:30:00:65:9E:D2:64:A8:7E:79:A7:D6:2E:FA:2C
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a1:c7:f8:fb:f5:61:5d:c7:e2:28:0d:15:60:65:d7:02:3b:
d9:bd:e3:fc:9f:1c:ab:ce:db:fc:d5:62:c0:41:a0:8e:b4:d4:
96:d7:cd:6d:89:0f:05:19:c3:cd:c2:df:17:51:99:a0:7b:f3:
10:a0:5e:7c:23:02:87:d0:7c:23:2a:53:d9:8e:76:80:dc:ca:
34:51:86:e2:be:fe:aa:37:ea:1c:28:c2:fd:95:af:b6:20:7b:
de:02:24:78:3d:c7:e8:a9:be:1a:67:1b:28:3c:60:c4:e3:f0:
a6:fd:83:17:b3:fa:d0:32:44:9f:3b:92:e2:0e:9a:39:b8:e6:
6c:90:35:ef:a8:8b:c1:94:6c:a3:0a:29:42:ad:6d:c4:63:97:
c7:e1:03:72:3f:90:07:55:50:48:39:a9:4b:77:ba:c5:fe:08:
78:91:cf:69:9f:6f:81:cc:12:57:30:01:88:8b:b3:5a:97:c8:
98:7e:c4:d1:4c:e0:30:85:7e:e8:57:3a:ce:b9:10:7c:5a:5e:
67:2f:4a:82:b2:66:a4:ed:c6:53:79:ff:f9:08:53:d0:7d:2d:
a5:95:48:3a:f9:48:59:78:d2:aa:60:d0:8a:c4:e7:e3:6c:22:
84:25:b8:d6:df:ba:b6:b7:ea:29:c2:e8:16:0d:91:3f:4b:8b:
59:e3:e6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:43:01 2026 by rpki-client