Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
File: I3_mTWhI-AEgq-aV4x-sScpdB_M.mft (raw, json)
Hash identifier: tTJ+HOMK8XzrUJpiRl3fzFL58fnF4blPBa1/RhqXZV0=
Subject key identifier: B3:40:5E:F0:40:E8:97:86:B6:EC:DF:50:61:2B:44:64:EA:19:89:0D
Authority key identifier: 23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
Certificate issuer: /CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Certificate serial: 019F82304D02E84AF93A5E6D8A2849C26718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
Manifest number: 06BE
Signing time: Tue 21 Jul 2026 01:00:31 +0000
Manifest this update: Tue 21 Jul 2026 01:00:31 +0000
Manifest next update: Wed 22 Jul 2026 01:00:31 +0000
Files and hashes: 1: H8UNN8H7VPAPeU8HfY2pZ9baom8.roa (hash: aa3mwH6a5yy6jaHkG9FnSEuRMRDZi+0YDMCMC7O4/3M=)
2: I3_mTWhI-AEgq-aV4x-sScpdB_M.crl (hash: 0wL/69p3VfkeoKErQeq8aZSiFNz8TMSEjbf2/yts3uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:4d:02:e8:4a:f9:3a:5e:6d:8a:28:49:c2:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Validity
Not Before: Jul 21 01:00:31 2026 GMT
Not After : Jul 22 01:00:31 2026 GMT
Subject: CN=b3405ef040e89786b6ecdf50612b4464ea19890d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ae:2f:c9:c7:35:fe:4d:71:86:67:4d:a5:09:
75:dc:74:fd:72:58:20:94:42:8d:fa:1f:c9:76:0f:
e4:c9:15:51:c9:34:f7:14:ff:0b:f1:ae:d3:7f:28:
d1:f3:8c:4b:b8:5b:20:35:c2:7a:e5:4a:aa:90:b8:
84:01:81:c1:cb:fe:c2:3a:fc:9d:55:98:71:8d:e2:
39:26:2a:41:52:1b:59:6b:7f:5c:d6:0e:52:c1:85:
b2:d9:43:34:1d:28:8a:96:d3:d9:d6:6e:ca:3a:72:
02:43:85:30:4a:81:54:2b:26:24:c5:2a:68:9f:2e:
4e:de:39:d1:fa:48:5d:96:4e:25:4a:12:0d:8a:21:
5e:5a:a5:82:aa:53:39:93:38:ec:5a:ce:2c:f8:3c:
30:11:99:b6:e6:25:b3:8a:3c:48:be:dd:6f:d0:3d:
22:31:a6:29:2b:ce:5f:41:68:9d:da:c8:55:a1:cc:
0e:5f:be:4b:95:c4:d0:b3:b3:d0:a0:95:35:c4:6f:
77:31:bf:b7:e5:82:7f:d7:91:77:a4:b5:39:af:f0:
de:49:d0:4c:03:fe:6a:0d:46:b7:8f:38:32:2e:59:
27:d9:d3:14:67:f6:09:d1:9c:1a:63:08:2f:d3:8e:
9c:a8:19:b0:27:eb:72:1e:a8:2c:3c:b0:8c:60:0a:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:40:5E:F0:40:E8:97:86:B6:EC:DF:50:61:2B:44:64:EA:19:89:0D
X509v3 Authority Key Identifier:
keyid:23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1d:76:9a:6b:52:49:f9:49:c1:d2:24:ff:4f:64:a1:e3:56:
e1:c9:70:a4:8c:fb:45:35:de:77:2a:c9:b9:b4:01:41:e0:d8:
49:46:3e:33:7a:9d:15:3c:5a:4d:1a:df:1a:9a:36:1b:de:b3:
f9:6b:c3:4a:fd:68:f2:f5:1a:d1:e3:9c:69:29:8f:dc:5f:4e:
1e:de:62:f1:ea:75:95:17:9c:bd:2c:a0:c3:4e:ba:7d:1d:8f:
ae:0a:d2:7c:17:51:b6:09:0c:de:3e:0a:8f:0c:ab:23:dd:92:
2d:5f:d3:90:c0:59:52:d0:36:97:1c:a3:97:9e:a3:65:c4:16:
11:a8:a8:49:95:b0:8e:31:04:bd:bc:54:2c:7b:2f:d2:ed:3d:
7f:9a:54:89:a3:ea:b9:fc:9c:8f:16:db:a8:76:ed:d8:f7:47:
c0:d9:b1:bb:14:74:cd:1e:12:b1:70:6f:18:39:83:48:b4:9a:
77:10:d2:5d:e1:7d:8a:ba:e1:11:71:dc:12:2d:1b:4f:de:60:
97:53:ab:18:ad:68:26:0a:14:80:8a:e4:ae:68:07:02:4b:2a:
3f:c6:7f:20:53:a3:d0:1f:75:95:c3:23:26:c3:bf:bb:2f:bc:
c2:84:f7:98:35:58:f1:68:2f:67:63:b4:17:db:23:c1:49:6a:
3e:23:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:17:33 2026 by rpki-client