Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
File: I6ejqG_MgpkfsH6OSL1SPi54Msk.mft (raw, json)
Hash identifier: YixuDdyF0Kv22BDHTqWLo6W663zX2DknHEgBTyNhWpk=
Subject key identifier: E8:77:3E:DB:DE:DE:B7:3F:4E:62:52:68:B9:E0:DB:70:B0:58:69:72
Authority key identifier: 23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
Certificate issuer: /CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Certificate serial: 019F92B5EDF529D06AF4CB5491826B844E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
Manifest number: 8B
Signing time: Fri 24 Jul 2026 06:00:24 +0000
Manifest this update: Fri 24 Jul 2026 06:00:24 +0000
Manifest next update: Sat 25 Jul 2026 06:00:24 +0000
Files and hashes: 1: I6ejqG_MgpkfsH6OSL1SPi54Msk.crl (hash: SDX5d25X+u/ewDnaLa9CrA6buWophg+MDTkYQEWjy14=)
2: nuL68rkN370bSNSecNKQgUJTlHo.roa (hash: kH4Pg8lfuIFAxarsDTHycaVnd29w3y5IeFqjSwCd934=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:ed:f5:29:d0:6a:f4:cb:54:91:82:6b:84:4e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Validity
Not Before: Jul 24 06:00:24 2026 GMT
Not After : Jul 25 06:00:24 2026 GMT
Subject: CN=e8773edbdedeb73f4e625268b9e0db70b0586972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:c9:a5:fc:c0:51:71:de:8d:c7:1b:6f:ff:
c9:32:1c:9e:87:1b:ae:00:f0:06:83:5a:c3:6b:8b:
f9:bf:5a:02:34:3f:8b:d1:fa:9f:56:e8:dd:ae:50:
b7:14:d7:7d:b2:d6:d8:64:34:7e:3b:4d:6f:14:3e:
d9:fd:c7:32:56:99:91:2c:64:8d:1f:f5:f1:7e:e6:
d6:19:2a:47:5a:5c:68:18:81:79:82:68:a2:ae:00:
c8:04:3c:65:ab:01:a5:3b:a7:8b:6b:f8:9d:1c:48:
46:d8:26:94:9f:85:3f:86:73:42:89:e5:bc:9d:31:
95:6f:37:b0:b4:4e:eb:14:70:ad:3e:25:70:e9:f0:
65:83:60:fc:f1:5c:b0:7d:8b:ea:84:98:bc:6a:65:
e3:b6:ef:c0:05:39:c9:3d:ee:94:96:4d:9a:60:ae:
26:3d:a5:dd:aa:a4:f1:53:e3:d9:aa:8f:ec:2d:94:
6c:0d:c5:e3:bd:d1:24:79:c8:f3:05:f1:06:a8:05:
f2:a8:d3:85:e6:32:14:1a:af:e4:2b:5c:00:0a:e1:
6b:fa:cb:8a:46:8a:19:8b:60:39:7e:b9:48:ca:6a:
3e:db:e8:88:1f:0e:b1:5f:65:07:8d:28:2c:06:cb:
59:a3:7a:70:39:ce:df:af:82:18:03:a8:1a:79:db:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:77:3E:DB:DE:DE:B7:3F:4E:62:52:68:B9:E0:DB:70:B0:58:69:72
X509v3 Authority Key Identifier:
keyid:23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2b:dd:75:bb:06:6e:93:86:48:ec:a4:2b:3f:6e:e5:73:e4:
c9:1b:87:4d:40:1e:de:aa:04:3e:eb:9b:80:a5:db:2e:80:5e:
09:db:78:37:e4:ea:77:98:ee:99:18:ff:a0:d0:ac:55:d2:dd:
b3:87:36:69:a3:c6:d0:4b:9e:77:7d:d5:be:23:1c:ee:af:4d:
5c:16:b3:df:09:ff:b1:ab:ba:9f:86:7d:a6:63:00:90:c9:4a:
1c:56:60:7e:10:e0:09:c8:13:38:65:ca:53:a3:f1:31:fa:f0:
17:60:b6:eb:db:aa:d6:b6:72:53:8b:66:e6:db:e5:2a:04:3f:
c6:07:c5:02:de:08:03:87:02:3d:b0:35:59:ef:0d:ba:9f:e2:
67:58:a6:2e:63:34:89:00:aa:9b:73:51:8d:b9:05:0c:8e:e0:
6a:3d:5c:ba:1c:07:d2:76:b3:55:1a:b0:69:ab:9b:92:d4:4c:
5a:7a:9e:2c:9c:df:2d:27:08:59:89:ac:89:32:4a:9c:0b:31:
bb:66:23:6b:38:b7:53:2d:1d:44:28:39:73:86:a4:f2:2b:51:
85:d5:46:76:8f:ae:08:34:1d:82:d5:9a:90:da:47:40:c6:5e:
c9:0c:d7:ef:d2:e8:05:36:48:b1:4e:1a:00:f1:06:e1:79:ef:
8e:d6:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:27 2026 by rpki-client