Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: gI/sT9BTheViziwJu8lFzpv1CdjBBFBKVlCSLVI5lWk=
Subject key identifier: 25:CC:28:BA:C0:22:20:42:49:1F:9C:0E:D7:AC:FC:6D:86:A5:C8:E1
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 019E1FECD09AB49A6D4342FC469CEE47704D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 0644
Signing time: Wed 13 May 2026 06:01:13 +0000
Manifest this update: Wed 13 May 2026 06:01:13 +0000
Manifest next update: Thu 14 May 2026 06:01:13 +0000
Files and hashes: 1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: o4n54gRX2RsonrksBikFYLOMIPAS51YIjBrkZROPll4=)
2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:d0:9a:b4:9a:6d:43:42:fc:46:9c:ee:47:70:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: May 13 06:01:13 2026 GMT
Not After : May 14 06:01:13 2026 GMT
Subject: CN=25cc28bac0222042491f9c0ed7acfc6d86a5c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:70:10:ad:5b:e3:15:f2:1d:52:74:c3:55:
7c:ba:90:7c:40:a9:7d:7c:9a:01:25:34:11:4b:55:
82:ed:a5:b8:e2:e4:35:97:36:c3:91:d2:75:90:05:
e3:1d:f9:4f:c5:ca:c8:92:48:33:8c:10:be:c0:1b:
bd:a5:18:b0:74:f1:aa:56:4c:9d:1e:ab:36:a2:42:
dc:fe:46:79:a5:84:4c:e9:4b:69:ef:dd:d0:ae:8a:
f3:31:c4:82:d6:02:4b:07:34:58:d9:52:43:f5:14:
ea:6e:f4:12:c9:52:73:5b:8e:44:dd:5a:f6:09:14:
59:42:33:b9:b2:3e:fc:72:cc:ad:1c:38:74:27:da:
df:f6:88:86:1f:f6:49:fb:2a:3a:9c:ac:bf:0f:2e:
24:24:14:0a:71:b7:b4:1a:b2:7b:51:45:55:41:23:
27:bb:7d:43:13:fa:ff:f5:3f:b9:0f:f7:84:b8:23:
01:37:72:2b:ff:37:88:11:c9:42:45:e1:dc:01:58:
a6:17:62:28:94:98:56:77:45:75:ee:76:94:d3:a0:
10:05:5c:23:4e:66:9a:30:80:42:b3:35:56:8d:86:
9d:b6:3c:be:5a:56:6f:3c:19:3c:33:31:bf:6f:94:
d4:dc:34:ff:93:36:88:a0:ab:2f:14:e8:5f:b6:ef:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CC:28:BA:C0:22:20:42:49:1F:9C:0E:D7:AC:FC:6D:86:A5:C8:E1
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f0:38:81:05:6d:0d:12:ba:6a:cb:94:fa:ef:b6:e0:3f:de:
0d:41:dc:14:66:76:84:38:ec:d1:45:9c:c0:fb:33:a6:6f:6b:
84:b9:0c:17:2f:6e:2c:70:f5:2d:a1:93:30:d8:47:65:64:94:
df:03:ad:bc:69:62:a9:86:63:1b:af:4b:0b:d4:21:3a:6a:0b:
05:40:11:46:4d:cf:49:c4:19:75:29:9f:47:f6:83:61:b9:81:
63:0b:23:54:48:78:f7:21:b7:02:5b:57:8c:cf:ef:a7:6a:6c:
f0:86:41:91:9f:cd:88:ef:06:17:5c:65:81:c1:13:01:73:1b:
fa:4a:7d:bc:0d:91:6a:68:c4:54:d0:06:51:95:24:c4:92:9a:
66:10:68:16:9a:3b:f1:fb:2d:97:4d:05:b4:e2:e4:79:82:21:
85:8a:4f:6a:ce:75:cb:a6:6e:49:f5:aa:b0:c1:69:6e:d4:32:
64:ea:de:13:7a:49:43:a4:d7:9a:0c:83:58:ff:92:fa:98:c4:
51:8c:a6:45:c2:9d:5b:10:4d:a9:28:99:78:59:29:dc:b1:09:
20:43:b3:b4:a5:9f:a0:96:44:45:bb:40:c5:55:05:26:b2:ee:
3d:ea:30:22:72:8c:c0:69:ec:3c:be:f7:0e:8a:e0:f9:81:09:
ef:ae:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:22 2026 by rpki-client