Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: YDjynb0LzhppK5NZ+zpAwy7pRBg8O2at0x7iXuJnmYA=
Subject key identifier: 84:38:67:7E:56:DC:92:C6:80:4E:15:C3:C3:F0:73:FD:8B:C6:63:4F
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 01A135C8101DD6BD277CB715B97C88E87004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 15:01:06 +0000
Manifest this update: Tue 13 Oct 2026 15:01:06 +0000
Manifest next update: Wed 14 Oct 2026 15:01:06 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: F2OgmjL2T1I2GDjnmAhfq5Xt56AgDcdqhz9jDI4/lgA=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c8:10:1d:d6:bd:27:7c:b7:15:b9:7c:88:e8:70:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Oct 13 15:01:06 2026 GMT
Not After : Oct 14 15:01:06 2026 GMT
Subject: CN=8438677e56dc92c6804e15c3c3f073fd8bc6634f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:51:f1:e6:36:3a:60:9e:3e:4e:07:24:66:
b0:80:9e:df:d4:3f:af:ff:c0:0f:71:0e:e8:5c:0a:
35:85:62:29:c5:f4:b6:29:2b:2c:c0:4c:01:4f:22:
1b:b6:83:20:03:e2:53:fe:22:d8:a4:31:8e:e1:cd:
57:80:15:72:42:f0:63:23:54:6a:39:ae:9d:76:13:
97:b8:01:d8:98:5c:d2:c1:bf:de:ae:10:3b:0e:e3:
9f:75:b3:31:ee:0c:74:d3:a9:13:16:7b:f5:fc:0b:
99:ab:4a:51:b8:01:c5:4b:e8:90:11:1a:3f:f7:0f:
8d:f7:b8:72:7b:b8:cd:60:f3:cb:4a:18:4b:06:9c:
ac:04:2c:af:98:2a:1b:93:f0:19:01:32:34:10:d0:
09:2c:6c:c0:a7:99:82:da:06:66:a7:0e:6b:5e:05:
24:f2:83:9e:e1:b9:19:58:f7:da:c1:9f:47:af:62:
c9:aa:9b:9b:6f:91:5c:aa:fc:6e:f9:72:a6:1e:72:
bf:6e:1d:de:90:c3:30:b1:3b:00:de:42:82:f3:91:
1a:0d:21:f0:b4:e3:84:43:82:86:0a:8d:9e:17:98:
e1:37:a9:dc:c0:5e:4a:f3:b8:60:de:4d:c4:a5:ad:
3c:d5:c4:11:85:e2:2e:59:c3:92:55:9b:3c:e4:ac:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:67:7E:56:DC:92:C6:80:4E:15:C3:C3:F0:73:FD:8B:C6:63:4F
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:93:f0:71:c0:c7:cd:de:57:ac:0a:13:06:2c:ba:fa:16:f4:
ea:db:0e:85:31:36:f4:ac:99:1f:95:be:09:32:d7:52:43:e2:
58:52:a3:bc:36:6b:a3:e0:bd:91:0a:d0:f9:67:77:da:3a:49:
18:d0:12:64:dd:cc:28:13:98:6c:a9:8e:d0:de:62:54:1c:58:
31:e3:56:aa:6c:f7:a1:1f:0a:bb:05:7b:6c:8a:79:48:5c:d0:
a6:27:04:16:e9:bf:12:5b:da:67:00:bc:e4:bf:ee:0f:46:6d:
a5:4f:6e:0d:0a:59:f8:be:c4:b6:06:d5:17:11:bf:ac:a3:0d:
20:f6:b4:1a:7e:79:f3:1d:c0:10:a2:4a:15:49:6a:6f:6e:d6:
70:33:5e:e6:57:03:14:5d:08:b5:d7:53:0c:d6:d5:4b:e4:96:
1c:2b:05:e1:7b:5d:04:09:5b:13:1e:b1:28:95:5e:47:02:6e:
72:9c:41:1e:9b:fb:bc:b8:a1:bc:ee:2f:19:0a:98:f6:68:bb:
16:37:d6:5f:41:75:03:02:1d:4c:0e:95:a9:a9:87:0e:9d:45:
f2:a4:1e:5a:23:7e:ff:4c:3a:ac:94:ed:be:93:3b:40:36:13:
ed:2c:39:ca:72:6f:90:0f:c9:77:32:d0:c7:5f:1b:a2:5f:74:
6c:96:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:35:34 2026 by rpki-client