Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: +SC3cX3lrOlDz0JBnVHudwMjsrxTZMmt5IPCFXoUN3s=
Subject key identifier: 34:15:A8:6C:36:FA:A8:36:1D:FA:17:48:F0:89:16:4A:8C:2C:4D:6E
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 019D28F3242C4DF7C4B5B6D0C8991887932C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 15CF
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: EBjSa7A-On9uI8_gmDnR7SDL_J8.roa (hash: cYEOk8Kxrw9KuVJI4MOZDU2QZ9S+tI4rD6Xrsxto8lg=)
2: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: XokN+mbQlZmE4xEhl/3kIGzleSh8TuUm3Gra4A+Fjl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:24:2c:4d:f7:c4:b5:b6:d0:c8:99:18:87:93:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=3415a86c36faa8361dfa1748f089164a8c2c4d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:fd:e7:eb:da:47:6f:4e:96:51:6c:8f:c7:
58:32:c9:ce:99:ab:77:d2:81:e9:c3:1a:91:2a:60:
48:05:34:e1:ae:88:b9:c5:26:86:0d:76:3e:a6:20:
5a:98:93:32:66:92:fe:24:07:97:62:fc:95:be:15:
40:f7:cb:bc:5b:9b:02:9a:e8:6d:c1:a7:28:f9:b0:
22:68:12:36:4a:25:2f:31:16:e7:c3:3c:bf:70:53:
d5:64:59:f3:12:8d:36:e6:e6:3d:45:2c:a5:87:e5:
56:f2:52:5e:d3:0a:54:56:3c:a8:80:89:48:75:b8:
5d:59:0d:6f:f5:b7:80:ec:f0:b4:fa:29:c5:1a:e0:
d8:93:2b:57:6b:a6:df:e3:14:35:29:9d:19:b7:c5:
a4:8d:01:c7:0c:f0:75:9d:b0:5f:50:52:a0:3f:fb:
51:7e:d2:29:ad:9a:d2:d6:25:ec:26:a2:c1:7b:26:
a4:4e:77:3b:78:9f:0d:ac:a9:a6:8c:77:ab:c1:62:
4e:57:97:f7:f5:37:46:aa:31:f2:a4:7c:16:6a:34:
03:2a:fd:13:d7:5b:47:0c:07:61:3a:03:52:05:7f:
1d:f3:d0:13:0d:b6:ad:80:15:1c:ea:97:cb:8a:82:
55:f3:cc:03:65:a1:19:14:c3:26:35:ae:52:05:15:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:15:A8:6C:36:FA:A8:36:1D:FA:17:48:F0:89:16:4A:8C:2C:4D:6E
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:13:73:3c:3c:92:04:dd:78:c4:f4:49:69:ae:b1:8a:c1:44:
ee:09:90:d8:df:e0:cf:4e:fe:4d:57:e5:6e:2e:24:8a:d1:7a:
d6:30:3c:b5:4f:0e:39:c6:4a:44:b2:6b:f6:c4:c1:d4:9b:b9:
1b:53:79:11:93:09:45:5f:ce:b9:05:58:2c:03:93:eb:dc:3a:
78:6b:b2:57:5e:10:5c:93:1a:3d:5d:79:dc:55:dd:92:2f:be:
4e:aa:a7:d7:55:5e:58:cc:14:b7:b0:73:a2:f0:29:2f:4b:7a:
9f:ec:06:d9:76:26:5e:5c:ad:18:c1:8d:d3:38:36:f6:a0:91:
d4:1e:aa:b5:5f:ae:cf:bb:04:a0:84:b7:2d:a3:06:4f:57:95:
d6:51:88:d8:16:1a:56:a7:8a:ff:9c:2c:f0:70:62:92:a0:99:
ce:f6:64:2b:e4:ed:ed:b5:98:a7:e2:d9:01:56:5d:e8:d1:fc:
b0:f6:b0:17:04:77:ec:e6:a6:87:2d:48:70:00:81:d6:74:e3:
6b:21:ef:c2:50:6d:0e:4c:1b:52:61:fc:73:b3:2b:3a:ea:63:
e7:8d:fe:61:69:7e:23:9e:c6:74:0a:5a:9a:6b:2f:22:81:43:
8d:01:0a:8e:97:12:44:81:94:d5:f7:a1:1b:7d:36:8c:50:95:
1e:c3:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:37 2026 by rpki-client