Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: +EPMhqsFElm/MV6j0Hs73TzDcZ1OrS+MVk2f+g7KMpg=
Subject key identifier: 67:87:4E:B4:05:10:3E:77:60:26:12:A4:CF:C3:27:E9:1B:41:97:3E
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 01A08B68C268FCB8AAB39A3FF6DAACCFB7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 17B9
Signing time: Thu 10 Sep 2026 13:01:33 +0000
Manifest this update: Thu 10 Sep 2026 13:01:33 +0000
Manifest next update: Fri 11 Sep 2026 13:01:33 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: cP0H50GZm4pjfuPEouBqyJXbiDWsdGQIxr8A1/9MSQc=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:c2:68:fc:b8:aa:b3:9a:3f:f6:da:ac:cf:b7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Sep 10 13:01:33 2026 GMT
Not After : Sep 11 13:01:33 2026 GMT
Subject: CN=67874eb405103e77602612a4cfc327e91b41973e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:83:7c:75:3d:e2:e4:c8:f1:4b:fc:52:dc:
a4:a8:b8:09:b4:ef:fe:af:c0:92:7b:21:2d:e1:41:
da:65:87:b2:6e:38:83:40:43:09:8b:7e:ca:df:1a:
5f:3d:8c:de:57:38:3f:b0:00:40:de:59:0e:34:da:
25:b2:b7:ca:4b:94:26:0c:7d:4f:d4:95:f7:3d:c5:
51:a4:97:bb:75:3e:37:5c:35:3b:d9:90:06:41:d3:
e6:4f:f7:be:f6:f6:53:72:73:96:5e:c2:de:6b:b7:
34:44:02:76:5f:c4:b6:ec:90:9c:18:44:76:1e:71:
08:4c:52:46:18:33:28:28:eb:48:b9:d7:79:71:3d:
66:71:69:05:18:7e:e2:91:c5:60:53:df:d8:6b:33:
8f:ba:f1:eb:59:70:25:40:24:e2:f1:4c:5d:a2:2a:
b7:43:65:b4:38:06:46:35:ff:cd:00:6e:cc:72:1d:
c7:6d:b2:3b:78:70:71:26:11:17:75:5e:67:f8:5a:
38:c7:96:22:51:9b:92:04:4b:44:63:4d:6c:cb:39:
96:41:fe:b5:60:73:fa:cb:e2:6e:4b:5a:06:b3:32:
2e:a5:e7:b8:ab:fe:1b:b7:66:bd:2a:41:d4:4c:33:
14:83:c2:43:37:9c:e1:a7:91:7f:2f:1d:3e:e6:d8:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:87:4E:B4:05:10:3E:77:60:26:12:A4:CF:C3:27:E9:1B:41:97:3E
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2b:37:fe:7c:2c:19:56:ae:86:3a:bb:91:5e:47:8f:85:f2:
61:e7:ed:5d:36:88:e0:26:2b:f3:4e:6d:a4:1b:76:b1:44:5a:
5c:78:f7:b6:3a:be:3f:f1:6d:c4:16:82:ac:d8:9d:08:2b:90:
74:a1:1c:ee:42:85:c0:03:25:65:79:34:ef:c1:0f:ed:e0:20:
b6:7c:c3:9a:a2:19:dc:c8:73:95:be:a8:d0:dd:c6:e0:ca:fc:
52:1f:a1:6b:24:95:5a:2d:8e:75:5e:dd:5c:35:12:c2:aa:2b:
14:3a:51:ae:38:01:18:6f:ff:b0:e9:07:b3:31:fa:b9:a4:66:
b5:fb:e4:87:da:b5:fb:48:54:69:45:05:b8:9a:f1:e7:34:c4:
01:3b:35:47:80:29:23:9a:f9:9e:0a:52:51:2e:3d:c7:c9:61:
6f:af:80:27:b0:63:e2:a3:f4:ed:f6:f0:74:1e:b4:2b:3b:99:
b7:a2:39:7e:1a:63:1f:a4:cf:7c:21:23:47:de:a5:49:1f:7d:
5f:e1:59:a1:2c:39:47:7b:8c:8f:71:b2:5f:e7:6b:09:02:7e:
a8:48:d2:af:da:6b:9c:4d:99:e9:a6:f5:8a:70:27:b5:04:a3:
66:c7:01:9c:c4:68:a4:c7:ed:83:25:e4:eb:52:a5:b6:46:b5:
39:59:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:44:51 2026 by rpki-client