Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier: OShfu5HTAFUDScpVSlX4RFjlT7IqeqoZ9oSGnm0tVdI=
Subject key identifier: DC:6C:BA:54:5D:71:DA:67:D9:AC:2E:37:79:73:5B:67:85:6E:61:27
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019E1DC732FBCD805CCDE3BC9605EC58C4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number: A7
Signing time: Tue 12 May 2026 20:00:54 +0000
Manifest this update: Tue 12 May 2026 20:00:54 +0000
Manifest next update: Wed 13 May 2026 20:00:54 +0000
Files and hashes: 1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: rVWU/SDEqJrew4EG5RHnsIEeqmpv+vDWUaZXclkIzfg=)
2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:32:fb:cd:80:5c:cd:e3:bc:96:05:ec:58:c4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: May 12 20:00:54 2026 GMT
Not After : May 13 20:00:54 2026 GMT
Subject: CN=dc6cba545d71da67d9ac2e3779735b67856e6127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:81:e9:04:3d:4a:19:37:5e:b3:ba:db:43:
97:2b:f0:c4:4a:bf:08:1e:69:79:ee:c9:32:56:24:
a3:67:64:bc:df:ab:04:1c:20:1f:ce:5b:6e:c2:77:
d5:d7:0f:1c:6e:24:08:ad:48:5a:59:3d:be:e6:fe:
ca:62:3b:5c:f7:11:8c:5e:22:33:3a:f1:6f:85:2b:
e1:88:12:c4:c1:91:d6:7a:bf:1e:ad:79:6c:7d:1f:
4e:24:79:cb:5c:15:e7:fc:29:db:77:f9:49:09:1e:
a9:e4:fb:bf:99:b8:a4:16:4f:7b:0f:df:94:d8:6b:
3b:5f:75:e4:ad:c9:ff:57:09:ba:0a:24:66:53:07:
86:a1:60:1c:6b:15:17:fd:2e:32:a3:8d:83:f6:7a:
11:b2:5d:25:7c:16:29:f0:d3:91:21:aa:2d:71:44:
fa:48:b8:77:22:24:85:f4:eb:b1:8c:52:78:97:c5:
2d:a8:fa:c9:49:ee:16:0d:c2:53:f1:b2:38:2b:a8:
6a:9b:27:a7:99:2b:6d:9c:f5:ef:a8:3d:ba:b1:d2:
ef:9c:f9:36:11:9c:b2:d5:8d:de:5e:fe:ce:f4:96:
c7:d6:00:46:60:67:07:4a:3a:dd:bc:85:d4:68:1c:
c9:14:d9:15:a8:3d:6e:da:5d:b0:70:7d:7b:bf:8d:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6C:BA:54:5D:71:DA:67:D9:AC:2E:37:79:73:5B:67:85:6E:61:27
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:63:f3:fa:04:01:0a:f2:8c:29:21:30:fb:99:9e:8b:ec:f3:
1c:c7:68:0d:81:e4:a7:ce:8a:f0:74:47:a3:d8:f2:3f:fe:66:
32:b4:b1:b7:37:ed:f2:90:4f:8e:7e:3f:93:c8:0e:76:50:59:
7f:71:eb:14:13:79:07:3b:8b:da:a3:01:3e:99:fd:0e:2e:7e:
76:b1:b2:6a:c5:46:30:16:fc:22:f8:74:9d:04:cb:38:98:5f:
dd:bc:9e:1e:f4:3c:26:25:61:f9:57:5b:85:54:5a:df:1d:50:
d6:97:c9:0b:90:d5:b9:08:b0:2c:36:4b:f5:99:94:18:2c:b6:
d4:fd:63:16:a7:73:5c:66:01:95:28:0f:df:b3:ee:c4:06:62:
d0:28:f3:4b:04:59:69:b6:22:f2:26:24:f2:ee:85:2f:15:92:
0d:47:90:ce:63:0b:20:3b:be:a9:87:c3:90:84:12:a7:51:be:
9b:29:3f:0c:24:c9:1f:de:a4:ce:21:6f:c6:b5:6c:55:22:79:
04:40:10:28:c6:1e:0f:35:53:9e:25:08:33:ff:0b:bf:79:e9:
18:71:27:ce:5b:3d:58:e4:25:94:d6:e0:89:c0:81:77:3f:59:
49:08:64:d2:67:ab:02:32:f2:e2:f0:d1:73:01:24:46:04:64:
3b:a4:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:11 2026 by rpki-client