Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: OU7OrsfRdB9LFWijpQKkKEEH/szMIrt7r7AMl5srltI=
Subject key identifier: 69:56:28:08:96:17:F0:04:55:36:E7:E7:66:27:98:91:59:79:3B:98
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 019D38D35A1566973E92A791E1BFDAFD6365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 0589
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: DLPawj2OgKUwkgMYVqxK640ZM5M.roa (hash: j4U5ZtGc0iAMwMjKy2gODe5wP1RecXvOyD9/RnVr/+s=)
2: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: P091vsVZR0Sgribm4YtRf0v3PCB3qxFQwnvFmb0ryuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5a:15:66:97:3e:92:a7:91:e1:bf:da:fd:63:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=695628089617f0045536e7e76627989159793b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:6c:7d:7d:d5:c4:33:c9:a6:0e:7d:c9:77:
ce:d7:62:fd:4b:f4:cf:d0:bd:9e:de:ed:81:2e:79:
04:06:4f:dd:ec:b8:f5:95:42:a6:e4:bb:d8:a5:46:
8f:68:8b:f5:4a:ff:ae:c3:42:e5:ca:c4:e5:8a:e1:
81:cb:2c:2d:bd:c3:9a:cd:19:58:df:d8:23:ff:28:
8d:46:6b:0a:21:2d:ee:46:a4:a2:00:a9:f7:72:f4:
cb:b4:56:89:39:60:ff:28:63:6a:3b:82:2c:92:b9:
a9:27:2a:b5:6c:c5:dc:10:37:c6:32:d6:fe:86:4b:
a7:6d:b4:fa:dc:f9:d6:d2:ae:c0:61:33:bf:21:42:
2d:d6:72:45:6c:ca:fb:e7:93:b8:3a:86:5f:f7:79:
7e:80:b9:bb:f4:8f:de:66:49:e8:79:5a:d6:b9:69:
20:ac:9d:95:f9:c3:9b:fc:d8:e8:ea:3e:9c:e3:31:
17:04:83:cc:f7:48:78:f7:78:5f:81:c1:d4:96:da:
42:d2:8c:89:ad:8d:88:d5:94:5c:62:f1:28:bd:61:
ed:23:7a:2c:59:6a:48:e2:da:2a:9a:a3:3d:07:3f:
97:04:7e:22:4d:ad:fc:c9:ba:1b:23:c7:7c:04:f7:
68:fc:fe:0b:d7:76:28:00:ea:c2:02:41:b9:b5:a7:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:56:28:08:96:17:F0:04:55:36:E7:E7:66:27:98:91:59:79:3B:98
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5d:e9:f9:2f:4e:a7:9e:ab:e4:00:9a:ff:46:1f:55:4a:81:
f2:fd:7e:e4:0f:99:40:78:3f:81:2c:c0:15:bc:2f:e9:6b:20:
9d:70:cf:c5:3e:95:cb:1d:08:91:57:a5:0d:1f:75:f9:7b:7c:
97:93:04:67:7f:7f:38:12:93:73:cf:e5:43:6f:0e:5f:00:35:
0b:a0:66:8c:56:b8:bf:3d:cc:22:87:7a:99:e9:4d:7e:87:0c:
1d:18:a8:9f:79:06:45:3d:d2:f4:9b:62:f0:50:c6:4b:1f:8b:
4f:0c:ba:d0:c7:65:e5:cc:73:ac:8a:36:7e:fd:3d:cd:6e:e0:
67:10:4e:e1:a3:36:0b:d9:de:cd:21:4c:c7:14:56:f7:5f:26:
cb:bc:5f:75:74:9b:53:20:05:ca:1b:75:89:ae:12:fc:7a:16:
f1:87:4c:ab:46:5d:32:86:8e:d6:85:36:f1:aa:47:5d:25:03:
47:c8:b4:0c:32:76:76:1c:a4:13:b7:75:b5:fe:86:3a:2e:4f:
c5:a9:13:fd:8f:f4:9f:6b:0b:36:5a:96:8d:b6:01:04:03:18:
14:73:5f:29:d6:e6:00:c6:fc:a6:9d:2f:73:98:96:72:43:3c:
0b:97:64:09:71:44:70:5f:31:78:aa:b0:35:b0:28:05:6f:aa:
ce:ec:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:32 2026 by rpki-client