Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: hdRQhxsxpbbODS3KTJT9oRTe/jBeoDje/qPyMKooQSk=
Subject key identifier: 73:DB:C8:7F:A0:3F:53:B5:D2:CB:42:EF:2C:E1:8E:76:7A:9F:31:AA
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019E1EDA6A76AF074187F9FD777195F64E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0CBE
Signing time: Wed 13 May 2026 01:01:30 +0000
Manifest this update: Wed 13 May 2026 01:01:30 +0000
Manifest next update: Thu 14 May 2026 01:01:30 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: 5Qzzm2vn7y+yY/SLsBOYhfts8Kk5sUnVAFLu+Ok4QIo=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:6a:76:af:07:41:87:f9:fd:77:71:95:f6:4e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: May 13 01:01:30 2026 GMT
Not After : May 14 01:01:30 2026 GMT
Subject: CN=73dbc87fa03f53b5d2cb42ef2ce18e767a9f31aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:90:8f:4c:7a:7a:bc:86:ac:68:4d:4c:a4:
ed:06:a7:f2:0a:bb:f3:5c:50:3c:bf:2c:6a:43:99:
70:2f:3d:cf:eb:79:d5:22:0a:81:13:7e:65:c2:ed:
af:ee:aa:40:6c:6a:98:ea:07:85:de:05:10:2d:e7:
12:60:1b:65:41:df:1c:b9:f5:28:c1:3b:9c:f8:4a:
15:fc:6f:a5:14:c9:b6:f0:44:f0:ae:ae:ae:0b:df:
68:d4:cc:64:a1:6a:ec:d3:d7:2b:56:27:5d:3d:c3:
62:c3:38:a2:48:21:35:6e:8e:f4:3b:fa:93:51:3d:
d3:7e:bd:58:d2:7e:40:db:d0:0b:33:ca:9c:12:65:
e3:c2:89:4f:f1:60:73:1d:cc:be:3f:fc:20:f3:7b:
64:e6:e9:e2:da:89:93:60:c4:3a:79:e9:2c:13:b6:
47:76:2b:59:23:34:87:81:0a:f8:0c:2e:7e:cd:db:
68:dd:60:01:57:9b:72:e8:71:98:93:fa:02:2b:26:
b6:37:1d:69:61:6b:46:8f:c5:a7:7c:9d:84:ce:53:
54:29:ab:ea:18:3c:9f:97:62:be:0d:49:ea:5d:ef:
c2:25:2d:59:b2:c2:45:7a:59:80:7d:7a:d3:26:ed:
68:d4:f0:0f:f1:3a:02:9e:b3:2a:59:60:f2:c8:bb:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:C8:7F:A0:3F:53:B5:D2:CB:42:EF:2C:E1:8E:76:7A:9F:31:AA
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:02:46:53:9a:b2:cf:5b:03:2f:e7:90:41:d8:27:f6:9c:ac:
40:f1:5e:b0:1b:d7:b9:0c:c3:c6:46:82:80:2f:3d:fe:c3:e1:
33:0e:0a:ac:79:13:cb:62:5e:0e:56:82:f3:b9:2d:45:0e:f1:
e8:47:3d:ba:0b:a9:e8:4c:44:66:48:fe:e6:b5:90:22:a1:ed:
fb:c0:a1:ab:a8:e1:c1:df:21:0f:9a:7d:24:a1:4f:b1:04:33:
59:c9:c3:57:a7:b2:35:7c:36:55:fb:97:9b:c2:0a:15:04:96:
08:7c:10:00:de:b6:84:a9:f6:b1:9f:f8:b7:8d:92:50:45:6c:
15:3a:82:d9:c7:5c:95:ad:c6:6b:cc:14:46:76:d2:1a:95:1c:
90:ef:9a:cc:f8:2c:12:b3:f8:4a:36:f9:95:bb:6e:69:23:83:
a5:77:99:03:63:a9:f6:88:a7:5d:89:5a:af:bc:82:dc:0d:72:
59:26:48:cf:ae:0e:26:f6:80:52:70:4e:a2:48:82:c2:bb:f0:
35:f2:4e:28:3a:8e:66:a2:47:cd:ae:58:20:a2:a1:76:44:e6:
d7:7e:61:1a:77:13:9e:42:0a:7a:96:ff:df:53:29:6e:91:db:
89:95:02:68:a5:fe:0b:0a:4a:a8:4e:4c:79:69:76:32:ad:d9:
17:b3:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:03 2026 by rpki-client