Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: jb+p7b3sB2D6BYsCbK5F13pDoTXSDAG7l1282bDlm60=
Subject key identifier: BA:19:A6:0B:6D:FD:02:54:50:1B:ED:9B:2C:AC:29:BB:15:D3:BF:B3
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019D6619E4F6B2D9E2A03254F012947B6902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1493
Signing time: Tue 07 Apr 2026 04:01:06 +0000
Manifest this update: Tue 07 Apr 2026 04:01:06 +0000
Manifest next update: Wed 08 Apr 2026 04:01:06 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 5LiGcKxTQq/iRk54xHAwPkq9oeekXD9XWDbtWXypEGA=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:19:e4:f6:b2:d9:e2:a0:32:54:f0:12:94:7b:69:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Apr 7 04:01:06 2026 GMT
Not After : Apr 8 04:01:06 2026 GMT
Subject: CN=ba19a60b6dfd0254501bed9b2cac29bb15d3bfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:35:df:7a:d1:21:4e:c9:ab:6a:f8:d9:b9:
81:df:1d:7f:5e:64:23:b1:c1:33:5c:b2:8e:26:8e:
0f:a7:f3:44:a4:90:bd:cd:e9:1d:29:2b:63:d6:69:
19:0d:2a:12:24:18:90:3c:bd:ef:46:f0:62:82:e6:
18:35:c7:de:a6:48:16:29:a3:f8:5a:fb:33:91:ac:
04:d3:b1:88:cd:af:bf:01:70:c4:24:ec:3f:ab:7f:
3d:f2:ba:cb:32:18:b1:22:fa:4d:1b:7c:0e:74:29:
61:48:d8:3d:5c:dd:07:30:e3:53:6c:ca:f1:bc:64:
f4:59:0b:a5:66:01:4c:1a:98:bf:1f:ac:ff:16:ee:
48:a8:db:5b:58:26:3a:eb:5d:bb:44:ac:f7:27:34:
8a:d7:47:87:fd:a4:cf:a5:12:2a:e5:77:33:2b:07:
6c:08:23:32:f6:03:f9:67:6d:e5:5b:5f:78:ae:51:
5f:e0:da:e1:17:05:2f:f1:0e:b6:35:ca:44:55:60:
0f:ef:49:78:8b:72:6d:2f:6d:76:3e:74:fa:a1:4f:
a4:5b:8e:ab:49:8c:a6:7e:ed:6f:bb:6e:80:51:ec:
03:dc:88:a6:07:eb:6a:56:5a:1d:91:0f:96:2a:b8:
3f:3f:87:f0:86:15:d8:c6:4f:98:65:93:c7:33:49:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:A6:0B:6D:FD:02:54:50:1B:ED:9B:2C:AC:29:BB:15:D3:BF:B3
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d5:7a:e7:29:14:7d:6c:73:5b:bc:e9:33:59:64:c4:dc:c8:
1b:e6:82:c3:92:15:12:8e:4c:9e:75:58:1b:5e:e2:a9:4f:29:
79:6c:01:38:10:dc:70:70:d7:66:1a:bc:a5:e0:e5:72:11:19:
45:7f:dc:d7:06:f3:78:3f:7f:7a:b0:9d:28:a6:a1:c5:7c:f6:
39:ab:cf:62:24:c0:7f:41:18:fa:9e:d5:45:01:b4:56:86:fc:
17:f1:80:56:a5:4a:83:1e:d4:0f:7a:36:4f:1c:b5:bd:5f:28:
b9:19:8b:a3:cc:4d:a7:66:85:10:95:db:6d:35:e3:14:90:bd:
ce:ad:ce:7b:2d:a3:2d:9a:d7:72:70:b2:3e:1e:de:a1:f9:1d:
c5:8a:19:55:64:f7:7b:b4:71:38:44:9f:d4:f3:8b:f4:42:77:
cb:95:9c:bf:65:46:c0:cc:2d:e4:48:37:53:65:1a:e6:d1:39:
05:fb:18:98:70:2a:f7:58:c4:de:34:d2:5c:71:30:c1:63:dd:
52:3d:d9:2f:e7:d0:5f:a9:9c:65:02:12:39:fd:13:c3:bb:18:
b5:75:2e:c7:2d:1c:11:de:a8:1c:ec:31:07:a1:11:2e:e5:82:
b1:8c:1d:a6:7a:84:c9:87:b8:ed:8d:ef:e9:68:06:28:8e:9e:
d2:46:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:04:36 2026 by rpki-client