Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: Sbwd5I8NexNIwyHKq92qHjzL5pSxGAQTkO1Ba6gulBQ=
Subject key identifier: A6:81:8A:39:75:2A:58:47:78:7C:64:61:52:3A:24:E0:61:03:1B:28
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019F916D8F97DE769CFA4A4DFE5A40793679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 16CA
Signing time: Fri 24 Jul 2026 00:01:44 +0000
Manifest this update: Fri 24 Jul 2026 00:01:44 +0000
Manifest next update: Sat 25 Jul 2026 00:01:44 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: YOw/SFWSq1h+tbNc8+PAdFl9YpNUgrUy8qSyb1/zmIM=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:8f:97:de:76:9c:fa:4a:4d:fe:5a:40:79:36:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Jul 24 00:01:44 2026 GMT
Not After : Jul 25 00:01:44 2026 GMT
Subject: CN=a6818a39752a5847787c6461523a24e061031b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:49:bb:49:cf:59:cb:83:95:d7:92:a6:b6:
58:53:35:62:d1:90:5c:b3:e3:bd:bc:0b:0b:cc:53:
35:3e:ca:dc:71:05:47:12:f7:ce:3d:93:c1:ac:8a:
b5:64:be:d8:09:0e:69:bc:aa:2a:34:c5:f3:d8:2c:
d2:4c:f6:b2:17:b1:8d:b9:ca:d1:f9:b6:0c:01:dd:
ce:93:83:ca:58:7d:1f:3d:ec:73:30:58:14:f8:64:
70:80:0b:1f:52:ca:3f:42:53:dd:1b:36:ca:ef:44:
8c:50:d3:c2:51:53:09:bd:b4:39:78:9b:c4:98:96:
ef:6c:af:67:af:a5:49:de:5f:0c:c6:c4:a4:6c:21:
b9:2f:ba:f9:01:c9:23:c6:08:7c:db:91:04:3c:70:
78:77:89:f4:83:da:18:f3:9b:00:cb:9b:ea:df:c3:
7b:f2:78:4b:85:42:cc:54:61:19:cf:fa:a9:d5:46:
14:b5:b0:4c:23:72:1c:e7:8d:f3:33:85:fa:fa:e3:
66:a7:a9:6b:bc:43:f9:ef:8e:13:4b:d7:61:71:b8:
3e:70:31:56:9c:46:0b:d4:8a:5d:e8:fd:49:c0:af:
0e:a8:a4:94:39:2b:85:c8:82:a7:2e:2f:45:72:7d:
1f:39:37:e9:8b:c5:ec:37:e7:5c:5a:f2:f5:f9:ac:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:8A:39:75:2A:58:47:78:7C:64:61:52:3A:24:E0:61:03:1B:28
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0e:ab:b9:74:71:d3:8f:ee:b2:5c:18:84:86:fa:72:bf:31:
fb:65:ec:b5:4b:19:09:a9:a1:e0:b0:8b:64:e6:56:0d:6a:30:
f8:be:80:1c:d0:cf:ec:95:5e:04:c3:ec:3b:51:71:96:23:d5:
a4:72:bb:03:1b:c2:1d:08:df:2d:31:85:c9:e2:14:06:8b:c4:
df:6e:cb:4f:90:90:8d:33:2c:fb:d1:63:b8:17:ad:ce:f8:c7:
44:71:3f:e8:49:20:44:ea:0a:6e:9f:d5:41:6d:f8:0d:2e:5e:
1f:3a:65:43:86:b7:67:ce:58:6a:9a:00:9b:3c:52:c5:8b:51:
c4:a7:d5:c7:e6:67:02:65:85:85:70:7a:47:81:c1:29:7b:70:
15:71:7e:73:48:7b:c8:bc:59:52:fe:f0:b6:89:b4:bf:64:fb:
ea:4a:d2:5c:80:78:d6:bf:f8:c1:8f:7e:8f:ec:a5:32:45:f0:
10:56:81:59:d6:7e:b1:43:70:4b:91:02:f4:d5:37:fd:de:83:
75:86:63:07:00:b3:c9:9a:d4:06:39:2f:8c:55:e7:96:cc:c2:
b5:e1:97:76:73:d2:93:52:f1:2c:1f:33:40:c1:92:01:e3:40:
5d:c0:74:42:3d:87:3c:fd:2e:12:e2:45:2f:b0:d4:84:ba:05:
e3:73:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:48 2026 by rpki-client