Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: n1L8QvLPsOfAQcRETQh/R4kMZvCJXfYFLoxZpG9mIP0=
Subject key identifier: 39:AB:69:CC:AD:6A:8F:C1:A3:18:68:A1:0B:1E:13:A3:F4:BE:45:42
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019E1ED99F90F96C19EB8C54579CE1CECA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0CCD
Signing time: Wed 13 May 2026 01:00:38 +0000
Manifest this update: Wed 13 May 2026 01:00:38 +0000
Manifest next update: Thu 14 May 2026 01:00:38 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: EVE4jf3Rt/TjWyDibx5WRpRuMEQmHOhb5vw8pwPB+QA=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:9f:90:f9:6c:19:eb:8c:54:57:9c:e1:ce:ca:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: May 13 01:00:38 2026 GMT
Not After : May 14 01:00:38 2026 GMT
Subject: CN=39ab69ccad6a8fc1a31868a10b1e13a3f4be4542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:0d:af:d1:ba:3e:fe:6a:fb:b4:ef:96:f5:
30:38:e6:1b:0b:43:9b:58:88:0c:0d:3d:f7:0d:b9:
73:02:af:7f:66:13:e0:a4:27:dd:99:f6:68:32:85:
72:66:94:9e:35:10:25:32:31:78:54:a3:6a:4b:92:
7f:63:be:b6:e1:e4:5b:a1:7e:f7:4b:7a:c9:10:81:
dd:81:93:db:af:ca:00:d5:e6:7e:b8:bf:d5:e7:db:
23:13:98:0c:44:c8:d4:07:ea:e9:0a:46:45:0e:61:
3d:ed:ed:e8:81:51:1b:1c:ea:f8:48:b5:1f:9c:e8:
33:cf:ee:11:51:ba:a1:7f:5d:d6:ea:a7:5a:97:07:
9f:27:68:0a:48:38:e4:50:1d:7d:d5:a7:ed:4e:a7:
9c:41:1e:73:4d:2d:d1:f6:83:d7:4e:92:ed:d0:ef:
1e:c0:d4:87:38:fc:d0:37:b3:7a:1e:75:0a:8c:a7:
ec:51:4c:56:60:1d:7e:2b:91:40:11:eb:b9:f4:36:
ed:07:53:50:92:0c:27:df:b1:80:c9:75:86:57:7a:
0a:eb:b5:0f:c7:50:a0:c0:2e:f4:2d:8a:0b:06:62:
c7:bc:92:8c:ac:16:2d:35:1b:ca:f8:f1:09:26:d4:
b7:f6:51:89:53:a1:f7:bb:aa:1a:6d:dd:a5:ee:ea:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AB:69:CC:AD:6A:8F:C1:A3:18:68:A1:0B:1E:13:A3:F4:BE:45:42
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:14:70:dd:af:a7:97:da:98:92:a3:c1:9b:72:e8:6e:4c:74:
f2:e0:3e:9c:d8:87:af:21:0d:99:6c:85:6b:f3:1d:1a:23:22:
b9:2c:1c:53:02:19:73:03:c0:23:84:b4:44:aa:9c:60:26:36:
1f:b7:00:04:bb:2c:b8:8b:c0:73:e3:60:fb:4c:52:d9:9c:4b:
07:30:fc:9a:48:ba:b3:d5:1a:ce:10:4e:9b:33:a2:41:14:96:
10:9a:38:0d:f6:72:b2:a4:d8:98:2a:97:43:94:88:07:29:b2:
5f:56:82:db:ef:d4:22:d4:3b:1c:9a:b3:d3:f4:90:5e:97:39:
44:ba:79:d0:a9:74:ba:b6:fa:eb:c8:a7:65:4d:5e:76:a6:c1:
bd:ae:1a:80:c7:8a:78:07:91:d5:46:6f:51:f8:9d:df:dc:8e:
2e:e0:1b:c6:df:8a:2e:81:97:ed:28:1c:49:7c:69:e8:f7:b5:
f1:11:1d:20:20:8b:cd:aa:0e:9a:94:e3:f1:0a:c6:b8:ce:0c:
a5:10:f5:29:da:18:48:ea:f0:cd:1d:6c:da:3e:da:03:de:83:
37:31:ef:e0:1a:74:06:07:83:e7:9e:b5:5c:f4:69:39:b6:b5:
18:35:9a:fd:e5:4f:83:8c:8f:67:de:d4:09:38:00:88:37:75:
ec:6d:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:35 2026 by rpki-client