Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: ULJ0rvLKkJBsmC2f3+y74ist0GKDghrmcIepRziTio0=
Subject key identifier: E0:C1:2F:5F:2D:52:7F:81:13:C9:BA:61:0F:3B:EC:E6:7C:8B:81:44
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019F92481B89EED0A593E268518B7494862D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 15B3
Signing time: Fri 24 Jul 2026 04:00:26 +0000
Manifest this update: Fri 24 Jul 2026 04:00:26 +0000
Manifest next update: Sat 25 Jul 2026 04:00:26 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: KM5NmizT+QlLiIDhGaNg6K8wcCuKMJDWU25Jxj7fdoM=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:1b:89:ee:d0:a5:93:e2:68:51:8b:74:94:86:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jul 24 04:00:26 2026 GMT
Not After : Jul 25 04:00:26 2026 GMT
Subject: CN=e0c12f5f2d527f8113c9ba610f3bece67c8b8144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:bd:0e:54:32:72:58:2d:07:02:d2:55:2e:
93:5b:5d:d8:e2:bd:1f:fd:61:6f:da:20:8c:79:06:
63:87:27:50:a0:b4:f1:56:9d:52:04:b7:23:60:aa:
cd:b3:44:d0:18:a8:27:1c:98:c4:93:02:b5:28:a5:
ec:f5:99:f0:1c:b2:7a:34:ac:6a:19:29:58:e4:b5:
4c:31:f3:65:87:e7:89:a6:fe:74:c0:db:ed:4a:8c:
4d:69:88:1c:cf:06:5d:19:0c:a6:3f:9c:eb:d8:ff:
79:ea:ca:91:8a:c8:b3:b0:d1:bf:4e:b1:af:f3:5b:
44:a7:8a:1a:26:3b:14:64:59:f0:ab:97:ae:ff:c5:
a8:29:74:5c:6c:28:02:64:62:1b:9a:ba:07:86:72:
5a:df:46:0e:33:f7:d9:53:d0:ca:51:f2:73:fb:e6:
ed:aa:65:f4:67:ac:d5:00:43:c6:1f:d0:aa:61:c5:
55:8f:de:45:48:6c:13:46:55:a2:f1:9c:12:45:7b:
10:ee:55:a8:73:4d:16:12:bb:4e:7d:1e:14:c4:8d:
9b:de:7e:a0:96:31:fa:5e:5d:78:59:3f:1e:13:3b:
bd:d5:ea:47:5f:1f:82:d8:3a:3a:f6:1f:6f:25:18:
2a:93:f3:7a:de:cf:55:56:66:f5:07:61:c2:ed:89:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C1:2F:5F:2D:52:7F:81:13:C9:BA:61:0F:3B:EC:E6:7C:8B:81:44
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:44:16:85:72:ec:60:9c:ef:d4:79:ba:89:69:03:2c:b1:39:
5c:7d:ca:38:ad:a9:3e:15:af:a5:90:62:d7:60:9e:76:78:95:
b7:44:9e:4d:b2:d4:e6:c9:b3:c5:4e:f9:ad:2b:6e:6a:07:2a:
03:9e:09:b6:c8:13:7e:a5:2e:f1:c7:85:e3:1b:1c:6f:d2:01:
9f:a5:f2:5a:c9:87:e0:d5:25:90:26:67:a3:c9:e6:3a:06:b1:
5c:1b:a6:d3:1d:0a:21:8c:48:f1:dd:61:44:7c:2a:23:52:00:
9a:82:4b:a8:1d:98:28:95:db:ae:66:c5:fa:ca:c8:1d:05:31:
3b:96:d6:62:2e:5a:12:8c:62:df:a3:b7:10:08:f3:e9:84:7d:
80:e3:cf:d1:ca:f9:ce:6a:9a:e2:9e:89:c9:7f:3b:06:e2:12:
04:ac:5b:34:b1:79:32:fc:7d:e4:5d:62:55:d2:25:dc:d1:81:
00:1c:5a:10:68:cf:37:9f:b1:d8:c7:85:9e:41:a3:17:a4:0e:
d2:50:5f:ac:52:ab:4a:a6:bc:61:f9:e6:35:03:bf:82:bf:06:
29:ab:25:55:9d:0e:75:98:8d:ca:b9:2f:75:0f:4e:c7:7c:59:
63:2b:39:b3:ea:2a:27:41:6d:40:75:18:df:e5:cd:c6:c3:4c:
00:b8:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:53:02 2026 by rpki-client