Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: D+nl4FGPf2SECLeJpIO+JyK8OQHNFuj1prW5piZaTgQ=
Subject key identifier: B2:F7:A6:C9:59:56:D1:7D:D7:6B:66:AB:55:C1:F9:53:1D:09:10:6E
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 01A10FCCD609362741692CA82525E369BB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1790
Signing time: Tue 06 Oct 2026 06:00:44 +0000
Manifest this update: Tue 06 Oct 2026 06:00:44 +0000
Manifest next update: Wed 07 Oct 2026 06:00:44 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: Xzy4ldelBLBSFohgs4uIIY1wv1PmucgFgPC4Z8thgy4=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:d6:09:36:27:41:69:2c:a8:25:25:e3:69:bb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Oct 6 06:00:44 2026 GMT
Not After : Oct 7 06:00:44 2026 GMT
Subject: CN=b2f7a6c95956d17dd76b66ab55c1f9531d09106e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:84:0b:e1:58:42:bd:1a:11:09:7a:66:84:
d2:15:52:c3:ae:ea:a3:50:61:2e:e1:af:41:a9:b1:
87:10:6b:ce:32:07:00:2d:1d:1c:de:d7:e1:ab:6c:
f0:bc:46:bc:7f:4f:3f:02:8a:67:3e:a1:7c:ab:87:
6e:89:c7:c3:68:6e:49:b3:c1:aa:5c:45:92:a3:08:
80:9b:c3:4c:8f:92:7c:f0:6e:52:ad:33:35:bf:65:
b3:fc:44:b9:29:e1:82:c3:5d:86:95:55:96:df:c9:
e7:9b:76:e4:a0:23:a7:5c:2e:32:d5:f0:18:b7:d3:
a4:a0:85:80:65:14:74:ed:07:8c:44:8f:0f:4e:b4:
19:18:7d:3f:be:e9:ba:80:9b:38:e7:5b:ec:e7:41:
49:0a:6e:a6:c6:35:47:3b:8e:8a:98:9e:df:4e:73:
53:42:ae:be:af:24:03:db:9c:61:39:82:e5:41:fc:
f8:fe:85:11:45:ce:6f:c9:42:a6:3b:a0:43:84:26:
ab:bc:5c:2b:cd:cb:29:90:3c:7b:e7:ea:2d:1f:e9:
4e:b2:b1:68:a4:39:64:f3:1e:93:01:4e:8a:47:37:
93:90:3f:e2:a9:76:e1:93:30:e3:47:33:15:69:ff:
d9:36:ef:84:2b:35:d9:cc:87:6c:c0:01:22:61:c5:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F7:A6:C9:59:56:D1:7D:D7:6B:66:AB:55:C1:F9:53:1D:09:10:6E
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:34:b6:36:29:4d:6c:4d:6d:84:8a:9f:bf:aa:a9:6d:e2:f2:
d9:83:6f:54:50:10:da:7b:fa:10:08:c1:c8:95:ff:49:65:29:
91:e0:3f:f4:cc:8b:ea:d9:2b:bd:63:2c:70:b4:1f:67:6d:26:
9c:11:bf:5a:cf:bd:e2:1e:22:f7:a1:9f:84:01:b0:15:ee:d0:
6a:79:4f:fb:b9:9d:33:08:b0:27:cb:05:db:b2:67:fa:6b:a8:
c6:de:a7:38:16:15:06:ef:7a:f6:60:cc:0d:22:f3:cf:a9:ab:
eb:35:80:8d:2f:35:88:c5:45:fc:f2:6d:f9:b3:7e:ef:a7:c9:
d0:69:90:74:06:ba:6a:20:58:ac:97:db:52:80:7a:a0:9c:97:
e5:ec:0e:3d:2a:59:4f:f8:66:5c:42:be:93:d5:18:64:5e:0e:
34:bd:47:c3:c1:64:3b:75:a2:c1:25:d2:08:07:65:a8:d4:95:
e2:5e:ac:ef:a7:8a:19:70:32:9d:0e:1d:82:23:84:a3:3a:58:
4b:14:14:bb:3e:77:60:58:c3:e6:ca:2a:2b:5c:89:21:9b:f2:
54:12:12:03:03:cf:f9:ff:71:bb:a5:52:b8:28:f7:a6:f9:af:
ec:77:e2:30:e6:3c:ec:f9:ca:04:1a:f0:09:c6:be:c4:06:33:
38:7e:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:17:29 2026 by rpki-client