Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: A8rfB+2aDu2E5rY2hnHRI4fx9MDNZNltDgvA0QSQo5w=
Subject key identifier: 05:E4:88:FA:45:8E:DC:F2:79:2C:A9:B6:5A:48:A5:84:8A:D7:B6:D7
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 019EB87CBC1D62C79A888C8EF2431B09BD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 0693
Signing time: Thu 11 Jun 2026 21:00:42 +0000
Manifest this update: Thu 11 Jun 2026 21:00:42 +0000
Manifest next update: Fri 12 Jun 2026 21:00:42 +0000
Files and hashes: 1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: dGWmPxB7H70Kh8pzwmFr6V8A6gorpfQVnQWT1wejVHA=)
2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:bc:1d:62:c7:9a:88:8c:8e:f2:43:1b:09:bd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Jun 11 21:00:42 2026 GMT
Not After : Jun 12 21:00:42 2026 GMT
Subject: CN=05e488fa458edcf2792ca9b65a48a5848ad7b6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:5d:25:d3:07:4b:ca:1b:5a:89:b7:9e:9a:
8d:bf:50:9d:34:68:1b:6b:e7:20:93:1c:14:21:76:
9d:83:97:31:d2:f9:7e:c7:e4:ab:39:99:0f:07:25:
44:d0:8b:b7:a9:50:62:40:40:29:cb:41:93:8f:c7:
19:91:08:65:3b:70:24:6f:bc:d8:4b:2e:d1:fb:0c:
4c:ed:e6:4f:f0:ac:27:10:e0:97:0b:2b:90:b5:e7:
7c:f9:a7:30:1c:37:80:4f:f1:7a:76:6a:c0:78:9a:
2b:db:ac:09:f8:8d:94:37:89:9c:50:33:fe:69:83:
5a:af:f0:43:0c:46:23:34:10:69:2f:1b:c7:19:c4:
70:9f:a7:f6:53:88:cc:d2:89:58:c0:d4:5b:71:68:
df:63:66:cd:f2:6a:12:bb:c3:ff:97:9f:52:20:2a:
04:9f:98:44:4b:72:8d:21:27:f0:f4:a2:e4:40:05:
3b:6e:7e:90:b9:e4:3f:b0:43:c1:37:a6:8b:07:18:
9f:b8:e4:f5:ab:0b:b8:c8:1f:bb:b0:14:30:c1:97:
75:3c:2c:91:1c:ea:c9:80:57:98:b5:c7:f8:cb:bd:
0c:d8:b8:df:3b:dc:9d:7a:a4:0b:02:36:65:4d:83:
97:cc:b5:37:3d:9e:07:e8:da:e9:1e:20:cf:55:04:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:88:FA:45:8E:DC:F2:79:2C:A9:B6:5A:48:A5:84:8A:D7:B6:D7
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4e:c0:48:80:fa:57:b3:ab:0c:3b:00:6c:58:17:1d:5d:db:
b5:ea:a4:7e:38:e3:b9:7d:72:21:7b:e4:19:c3:09:67:b9:ab:
91:98:a0:da:40:b3:75:83:b5:35:f9:6e:73:04:6d:36:8d:7a:
4c:69:15:7e:8e:d6:c5:02:d9:0e:b3:06:4c:56:b2:c9:00:69:
22:22:33:f2:90:b0:38:84:66:90:72:e1:d6:e1:6f:e6:45:d6:
d2:09:e6:a9:63:f4:e8:0b:78:2c:88:31:18:77:e7:1c:ad:a9:
75:83:45:bc:6c:cd:e2:8a:e3:49:7a:e2:82:18:06:dc:3a:6b:
74:d6:51:d3:88:11:cd:d0:b0:a0:b9:2d:11:46:be:2f:da:1b:
f1:c3:f8:0e:79:32:b3:0a:06:db:73:a0:29:7e:ac:bf:31:1b:
2e:34:30:4d:7d:02:4b:22:02:1e:83:52:2f:2c:76:e4:e4:8c:
bb:c0:3f:f1:94:80:bd:2a:0a:bb:7d:e4:bb:a9:59:96:09:d3:
1a:8b:eb:59:77:74:40:19:f1:2d:db:1d:9a:8d:32:66:4b:2a:
01:0b:2f:ef:5d:ab:db:c5:5a:45:a0:95:ba:05:f0:b9:d1:01:
a3:38:7c:c9:50:28:29:e2:4f:a3:a6:dc:b1:cc:3f:96:0a:44:
ce:9c:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:55:45 2026 by rpki-client