Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: hkEc7mSkFDeFfXHIRYvNJQI7qwSTx9E+D2U0dB+/svI=
Subject key identifier: 6A:1C:A6:80:8A:E7:34:3E:5F:BF:0E:52:46:43:7C:2B:20:E0:FB:FA
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 019D284E17729FD14E1233421FB27CAEFFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:39 +0000
Manifest this update: Thu 26 Mar 2026 04:01:39 +0000
Manifest next update: Fri 27 Mar 2026 04:01:39 +0000
Files and hashes: 1: 4OtylCmVUOQ1YUFtglhWgqf0IYA.roa (hash: WWTOLHqEiZ6EYrBZLenBHdV2VidIQmH+ASGlD1/87NA=)
2: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: M7gPsos7Z4eA+0xCWmnBn7tx/d1xQ6AhNIDSu0AOJcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:17:72:9f:d1:4e:12:33:42:1f:b2:7c:ae:ff:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Mar 26 04:01:39 2026 GMT
Not After : Mar 27 04:01:39 2026 GMT
Subject: CN=6a1ca6808ae7343e5fbf0e5246437c2b20e0fbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:3f:3d:e9:dc:af:5c:8b:35:c9:1d:b8:05:
42:4c:cb:39:11:12:95:35:66:7d:46:76:63:5f:e2:
1b:b2:30:d6:6f:2b:c9:b8:f9:e1:96:1b:dd:dd:42:
76:cc:39:87:14:18:61:05:30:2c:8d:e9:c8:c4:a9:
bb:ec:21:a3:ca:47:c1:db:8a:e6:38:51:d2:1f:8c:
f0:09:f4:7a:cb:65:f7:4d:23:78:ca:25:49:f3:ed:
06:43:58:82:dc:f1:9a:37:13:83:9c:01:66:0f:ea:
f6:30:02:21:68:d8:93:f4:63:81:e9:8f:9a:2c:d8:
9a:9a:3b:68:95:96:16:d1:01:8a:bb:fa:f6:d0:0b:
b4:e4:dc:9e:4f:91:f5:10:27:96:e6:c4:79:7d:3e:
88:87:34:db:bb:3f:1e:80:ea:94:80:b3:ea:2d:22:
34:57:61:07:22:47:eb:d4:69:0e:50:7a:8f:c4:6d:
51:65:2e:5a:40:19:bd:71:32:14:5e:5a:c5:aa:b7:
28:61:cd:e4:75:ff:bf:5c:8e:b0:3d:34:46:39:0f:
8b:61:58:a6:ff:d1:56:48:96:43:65:d1:6f:c6:92:
a7:c2:28:48:9f:d6:dd:09:11:46:00:67:37:a3:79:
db:a2:01:2f:ea:f6:a3:60:93:19:f0:7c:47:be:9c:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:A6:80:8A:E7:34:3E:5F:BF:0E:52:46:43:7C:2B:20:E0:FB:FA
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bc:7b:fc:2f:02:d4:74:9e:eb:a8:56:95:78:eb:d5:89:df:
05:cf:96:a0:f8:55:9f:3b:20:75:ae:4d:a4:de:1b:5c:5f:66:
e7:c4:ce:8e:ad:ef:48:e9:af:00:52:41:9c:91:95:f1:47:a7:
03:0b:be:70:5a:da:09:3f:3a:f3:f2:5f:3d:79:c4:c0:ef:cb:
9b:b7:b0:fd:1e:d8:0c:c2:f1:52:f7:8e:d1:1b:58:ee:e2:ae:
28:10:be:ed:e5:bd:91:36:dd:38:48:d1:be:0a:1a:1e:df:59:
a6:c9:86:78:c0:d5:32:db:d6:82:9d:90:1c:da:23:41:1b:60:
af:41:a8:f9:67:3c:b2:03:30:d9:3d:16:38:09:d2:e7:ef:9f:
6f:bb:06:41:83:44:c7:7b:33:fc:c9:f1:a0:32:99:05:e1:65:
91:73:db:e8:7f:d4:d9:08:ec:00:6c:7a:42:31:0c:b5:74:61:
4b:80:80:7c:62:7b:69:30:f4:6f:e4:cf:24:10:14:f4:ef:7c:
f0:86:9f:fd:d3:69:6f:9f:3c:5e:65:ed:1c:06:a8:29:77:a2:
11:67:21:a9:2d:69:57:07:6f:67:e8:bc:17:57:2b:a8:16:94:
23:ba:3e:2e:dc:c2:2f:5a:a0:c6:9e:ac:b3:8f:36:ea:b2:e4:
58:7a:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:32 2026 by rpki-client