Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: TuDCy1+tGoOFcvd4c1pHgZjw5mJ2qJ1TPgC1/OgGG+E=
Subject key identifier: 2C:C9:FF:56:BF:7B:63:6B:67:08:F6:D1:4B:D0:1E:87:91:08:4B:DF
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019EFACC7F2E68EBB4D1AAC9CDA37815ACED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 167C
Signing time: Wed 24 Jun 2026 18:02:46 +0000
Manifest this update: Wed 24 Jun 2026 18:02:46 +0000
Manifest next update: Thu 25 Jun 2026 18:02:46 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: 9Bh9ORlMYvwIa04ezexKWsvj6dYIUv6ma/jbpO9rm6I=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cc:7f:2e:68:eb:b4:d1:aa:c9:cd:a3:78:15:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Jun 24 18:02:46 2026 GMT
Not After : Jun 25 18:02:46 2026 GMT
Subject: CN=2cc9ff56bf7b636b6708f6d14bd01e8791084bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:68:23:8a:4b:22:8c:c2:8b:aa:cb:d1:98:
d2:a5:b6:d2:67:f0:72:2c:59:0e:80:14:a5:ee:c5:
01:bd:27:96:6c:a8:d2:1c:04:8e:0a:c8:34:cd:e4:
9e:86:74:9a:ce:79:82:f6:a4:1e:93:a7:b0:aa:e2:
a1:fe:4b:ba:7c:4c:87:71:fb:a4:14:04:6b:c2:ea:
e7:6d:89:42:b1:3b:52:fb:99:d8:db:9c:70:21:08:
c2:63:28:dd:d1:7b:63:84:d5:e9:ef:30:b8:53:e9:
74:0e:98:87:75:3b:64:c0:50:cb:76:f4:f8:44:3d:
25:e0:53:b5:30:3a:d5:c5:ed:de:4c:0a:b2:04:6b:
ae:a2:bd:d4:b7:79:88:c0:84:da:62:50:54:bd:cb:
0a:81:ca:78:50:d4:7d:77:47:f7:aa:28:dd:61:76:
49:c6:a8:c6:f2:31:8f:a9:1e:92:c1:72:ee:41:4b:
65:d3:42:e3:e5:b9:0b:ff:99:6d:5b:58:ce:62:65:
c8:a7:01:27:1a:f4:28:9a:d9:2f:fe:27:c2:8f:da:
43:15:95:7b:33:9e:42:69:6d:32:3d:7e:9b:b3:bc:
a9:45:98:95:4d:5e:f6:0e:c4:b5:41:fe:72:cf:ed:
64:fd:53:39:d6:26:e7:12:3f:7a:90:a8:e6:04:b6:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C9:FF:56:BF:7B:63:6B:67:08:F6:D1:4B:D0:1E:87:91:08:4B:DF
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e7:09:ec:f1:54:88:20:c2:31:11:44:93:26:31:63:ac:8a:
a5:9e:c8:6b:5b:51:86:6c:68:0c:9a:66:5a:ba:7d:f5:0b:69:
c5:09:f8:54:a8:67:d4:91:93:2b:21:84:21:1a:fd:70:92:5b:
e6:c3:7a:e9:c4:fa:dc:80:ff:48:8d:5b:1c:78:7e:b5:68:04:
b8:34:1d:9e:57:56:53:fe:c8:86:26:30:d3:11:df:65:f3:0d:
65:7b:4c:a3:5d:7c:c3:a1:be:c4:a1:83:52:c0:6b:e4:8b:0d:
79:10:53:04:e2:a4:8c:fa:60:2e:a9:e6:3f:74:75:40:c5:bb:
3f:df:28:55:d4:8d:bf:50:4f:11:5d:ff:b9:cb:3d:52:aa:25:
e5:47:b2:e5:e2:39:71:91:ce:37:5c:ff:b2:11:a4:39:b1:c4:
5a:27:e0:b3:6e:bc:73:33:5f:c9:4e:e2:31:5c:83:18:8d:5f:
1b:eb:d8:cb:04:29:cf:e3:49:e4:d4:44:f2:dc:8f:26:07:be:
63:24:0f:92:ec:e5:bb:84:de:79:5b:81:65:b5:62:11:cc:cb:
eb:cf:b4:cb:d2:d7:d6:6d:04:46:8f:58:ad:c4:86:f5:e4:ce:
d3:fb:ae:2c:b1:f1:c4:2a:67:81:6c:a0:af:b9:ea:14:d4:b6:
65:14:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:19:18 2026 by rpki-client