Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: F+3EOBeNIzvlmvKbtI+75rJVkGopxQqjHvteJZudoNY=
Subject key identifier: 67:7B:BC:52:8E:AF:DE:4C:FF:61:4F:DF:36:67:A8:22:DE:E0:F6:B7
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01A1355A2788826E68454126092AF4F82FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0DE9
Signing time: Tue 13 Oct 2026 13:01:03 +0000
Manifest this update: Tue 13 Oct 2026 13:01:03 +0000
Manifest next update: Wed 14 Oct 2026 13:01:03 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: tX3WzB/qiCMg5s9VZkiCSR/xZcAMiJxQ6iH1aM4myuo=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:27:88:82:6e:68:45:41:26:09:2a:f4:f8:2f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Oct 13 13:01:03 2026 GMT
Not After : Oct 14 13:01:03 2026 GMT
Subject: CN=677bbc528eafde4cff614fdf3667a822dee0f6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:f7:da:a5:d2:af:62:2a:5c:69:a7:0c:28:
82:97:7e:88:14:99:71:06:4c:1e:0f:b0:25:85:6c:
7f:fe:09:72:6f:dd:48:e2:4c:29:cf:48:df:8a:ab:
59:58:a2:c7:19:c4:2c:b1:89:5b:b4:d4:58:96:86:
09:32:67:78:c3:e2:6e:01:ec:50:86:5b:a8:c7:19:
8f:06:cc:13:ec:93:13:0d:25:56:9d:6f:fd:f1:51:
e5:75:91:30:0d:9e:66:c0:89:5a:f8:c1:42:45:6d:
9e:1a:38:bf:40:52:83:57:f3:99:08:75:7b:f1:c0:
03:f6:0a:33:59:10:ad:41:2a:38:e8:8b:15:2d:f9:
90:82:7b:a1:a9:71:25:36:38:28:91:4f:16:f0:16:
ce:fa:76:e8:38:6d:36:fc:a2:83:e6:a5:83:f9:bf:
35:f2:22:e4:e9:f6:40:53:16:5a:1d:57:4e:e0:2f:
91:9a:c2:11:2d:65:26:b1:74:10:0d:8e:d0:fd:0f:
a2:cc:57:06:57:36:15:f7:15:a8:9f:4f:8b:00:e4:
14:da:5d:34:f3:e7:f7:8d:54:9e:79:0f:a3:ac:e5:
e6:74:53:38:02:2f:98:9d:ce:bc:76:8f:a4:66:5d:
21:02:d9:a7:15:f3:1b:1d:d3:fd:d5:ba:ff:e7:99:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7B:BC:52:8E:AF:DE:4C:FF:61:4F:DF:36:67:A8:22:DE:E0:F6:B7
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:81:5a:40:d0:21:8b:06:28:dd:b1:e8:56:1f:bc:d8:fd:1b:
a4:d5:ac:73:f5:b7:9c:34:4c:a2:df:77:25:69:bd:77:bb:40:
41:49:fb:bc:d5:3c:70:5a:e0:37:a2:f9:f2:1d:19:1c:b2:5e:
10:73:51:47:bd:87:df:ad:e3:50:b7:b7:08:1c:a6:52:b5:0b:
e1:4f:be:1d:c1:7f:1f:59:a2:cf:fa:b1:dd:08:8f:ce:10:96:
52:92:8e:ba:50:ed:7f:b4:d1:99:29:7b:06:0a:43:c1:f0:73:
28:91:07:9a:74:3b:c5:1b:2c:cf:41:f5:ae:37:2a:18:a3:df:
f4:da:22:3c:a5:4a:45:e0:82:f7:1e:56:a5:c7:66:ef:fb:36:
06:11:53:57:6c:d7:3c:32:c6:79:ba:4a:41:ed:29:17:e5:7e:
5b:df:ce:52:33:55:9e:d8:72:c3:ac:9c:37:5a:1e:e8:fd:24:
09:76:08:75:72:a9:2e:fb:ff:ab:78:c5:9c:06:5c:7b:5a:bc:
dd:17:72:5e:8a:55:4b:52:be:71:0c:93:88:4c:47:cd:ef:9c:
95:09:1a:f4:8f:6c:77:da:76:c0:32:11:64:8d:38:4e:4c:84:
b7:e7:26:6f:8a:33:07:09:32:a3:0e:68:3e:46:c2:64:00:68:
13:7b:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:52 2026 by rpki-client