Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: BB40jqqXoUc99pyhiZ3sZ3j4qH958yN2fpbeUpCjUwM=
Subject key identifier: 69:F5:0C:BA:29:76:9D:08:EB:C0:FC:11:FA:69:25:F4:0B:A0:DB:E5
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 01A16D5B4DBA211861A331F1F0CF567D96B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1ABB
Signing time: Sat 24 Oct 2026 10:01:02 +0000
Manifest this update: Sat 24 Oct 2026 10:01:02 +0000
Manifest next update: Sun 25 Oct 2026 10:01:02 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: YtAXzpQ4rLm3nKmB87RR0MmsLuGofOADMPN2Kbm6WRA=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:4d:ba:21:18:61:a3:31:f1:f0:cf:56:7d:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Oct 24 10:01:02 2026 GMT
Not After : Oct 25 10:01:02 2026 GMT
Subject: CN=69f50cba29769d08ebc0fc11fa6925f40ba0dbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:67:b9:37:49:66:4b:31:ee:20:c7:52:24:
47:2a:45:7f:97:76:99:0b:09:45:7b:1a:f9:a7:d3:
03:bc:bd:58:5e:80:4c:83:df:93:1e:90:b0:7b:00:
fc:e9:b7:b4:84:0f:c3:1b:2c:53:4d:c0:28:1b:6c:
89:c9:79:ae:26:37:f9:6a:bc:b2:21:bb:3c:fa:2c:
6a:6f:46:d5:67:0b:ee:dc:ac:57:12:64:c0:71:f6:
7c:88:cb:5c:1a:99:b1:28:ba:68:f1:cb:84:8c:dd:
dc:21:9c:61:de:d9:8e:db:36:19:25:66:60:be:28:
bb:fe:a4:67:0b:7d:73:73:ac:ff:46:85:d3:50:e6:
c8:77:e8:fd:2c:5d:5e:da:a0:48:67:9f:f4:ad:16:
be:a3:2f:9e:13:06:38:66:e8:1d:e6:4f:71:62:1e:
e8:d0:be:7c:cc:8c:2c:7a:a7:af:43:cf:55:c1:9a:
10:be:57:05:22:ba:da:05:56:71:51:29:75:fc:90:
d1:f6:27:f1:77:42:8d:0b:f1:1e:15:7e:24:99:2c:
f8:87:1d:fa:ba:cb:ed:82:5e:e4:b3:cd:72:0e:cc:
2f:33:cc:0b:65:98:07:57:8a:11:38:a7:a5:77:18:
b8:a5:b4:97:e1:17:ae:ff:a8:2c:08:da:df:b2:5b:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:0C:BA:29:76:9D:08:EB:C0:FC:11:FA:69:25:F4:0B:A0:DB:E5
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3b:61:05:e7:2f:01:da:dc:9b:55:d4:35:35:47:72:61:ee:
b8:32:3a:b8:af:14:59:f7:df:e2:79:da:74:e8:af:a2:4e:5c:
93:33:07:57:90:2c:51:3c:1a:80:e0:6a:cd:26:a8:db:83:74:
c8:6b:8b:6d:e8:bd:d7:72:97:de:f4:7f:74:c5:9c:a8:53:bd:
c1:d8:5e:be:55:98:2d:22:25:b4:82:a1:37:d5:37:f3:0d:be:
d2:ca:e9:6e:de:90:a0:29:5d:c4:91:33:7c:10:ec:3a:15:98:
b9:da:80:1e:6a:b9:a9:0b:b2:51:dd:af:12:39:c8:ae:bd:c3:
05:34:82:14:c4:47:eb:7c:bb:c8:34:ff:2d:6f:63:69:a8:2e:
63:72:ed:8d:41:ab:81:ca:20:73:16:e6:dd:90:a8:30:6c:e3:
b4:49:9a:c9:5f:f4:72:48:98:74:a5:bd:3b:c3:55:64:bc:e5:
fa:6e:36:03:8b:e7:74:d6:19:2e:a5:67:e9:6f:76:8a:e5:de:
0c:fa:97:38:85:42:fc:89:6d:ea:a0:40:4d:39:22:33:4b:b1:
76:10:6f:17:bb:77:42:5c:32:77:86:53:2a:a2:70:84:c3:77:
87:23:27:5f:3e:b0:ec:e2:f1:37:5d:1f:33:cf:e9:fd:ef:35:
c0:f3:7a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:57 2026 by rpki-client