Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: Ug797+TE6WhJ/8pA/9jMsNBllEqUiRCbr9dyHznWm7I=
Subject key identifier: 76:BD:76:F3:8D:3D:C7:98:07:D3:13:2A:FF:C9:EF:AC:3C:28:F8:3F
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019E1ED9AFD6F0A5539257A96359DBE06EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 1391
Signing time: Wed 13 May 2026 01:00:43 +0000
Manifest this update: Wed 13 May 2026 01:00:43 +0000
Manifest next update: Thu 14 May 2026 01:00:43 +0000
Files and hashes: 1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: wXScM0hOZDyMnxhCmRl38r+TSMthokBQ1OjVE9nRm0A=)
3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:af:d6:f0:a5:53:92:57:a9:63:59:db:e0:6e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: May 13 01:00:43 2026 GMT
Not After : May 14 01:00:43 2026 GMT
Subject: CN=76bd76f38d3dc79807d3132affc9efac3c28f83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:28:a0:56:ad:ff:0a:6c:a7:40:97:61:be:
af:4b:2a:86:a3:ed:53:d9:f5:ef:49:74:9e:3d:67:
dd:8d:79:16:ba:99:a1:3f:52:8b:27:5a:a5:bf:1d:
d4:bf:2c:96:25:89:b5:ec:f3:69:38:61:d8:9c:cb:
05:a8:15:5b:2d:74:75:c3:5b:ff:c2:14:e4:6a:90:
cc:a6:c3:0f:be:01:9a:cd:78:78:1d:e6:55:68:9f:
a7:8e:0a:2a:bf:a2:ec:00:87:9f:30:fd:04:aa:c9:
1a:c7:12:32:b7:82:7b:80:4c:04:ca:bc:90:8f:4e:
52:96:d6:d3:b2:d9:eb:d9:f9:e7:32:73:cf:a0:e1:
3d:fe:8d:7e:77:2c:5c:74:76:69:12:2a:8e:f6:fd:
46:b2:10:15:20:5a:49:e2:6a:01:d7:ad:77:c4:5c:
3e:4a:b2:a1:39:ef:16:12:f5:4b:7b:6e:fd:2e:59:
47:7b:e9:3d:a8:e9:73:b0:96:77:ad:27:89:50:3c:
b7:44:a4:e9:1c:29:c0:53:8f:4d:00:f8:10:ab:d2:
dc:a7:54:f9:22:58:12:fb:4c:01:d7:5e:47:c4:02:
fd:bd:cb:21:15:9f:d4:c1:47:5b:86:ca:e2:60:2f:
4b:b0:c7:df:b9:3f:62:24:6c:3c:f5:89:e9:53:23:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BD:76:F3:8D:3D:C7:98:07:D3:13:2A:FF:C9:EF:AC:3C:28:F8:3F
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:66:81:16:4c:14:0e:dc:d2:1c:1a:a0:55:5d:fc:da:e9:
76:95:ed:6f:20:11:4f:02:d9:04:70:50:2a:93:a8:fe:36:10:
90:a8:3c:90:67:3e:20:63:4b:ef:fa:2a:e9:76:c6:91:f6:2f:
05:e7:b5:8b:e6:be:e4:18:d8:86:16:75:6c:a7:97:91:2a:bd:
fb:5c:55:15:0d:f6:2b:5e:a2:35:23:8b:7b:78:e1:dc:59:6b:
90:96:2c:5e:af:84:51:02:e0:75:bc:5b:80:18:23:81:3e:83:
80:45:30:fd:5b:8f:0b:aa:47:86:af:18:b8:4c:b2:36:bc:e1:
c5:2f:9e:ea:a9:6d:4c:3b:74:a4:b7:6f:8c:73:c6:80:6e:f6:
03:e7:55:35:67:b2:32:22:f0:a4:b7:34:2c:43:63:2a:a0:61:
94:88:01:45:04:70:7e:34:e2:b2:c6:b0:94:60:08:64:f9:f0:
96:d4:3e:91:69:9b:ed:9c:c6:75:ca:c1:92:dc:db:5b:c3:63:
12:84:7c:d2:ef:63:4a:97:72:62:e7:d1:3c:43:83:09:55:6a:
5b:6a:a4:85:5c:75:75:54:f2:36:e1:67:10:24:56:d1:d6:e3:
f9:fa:51:66:6f:4c:e0:21:e7:3f:63:14:7e:9f:26:c6:d0:b8:
4f:cb:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:57 2026 by rpki-client