Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: 6gDPVSylKYwwGAGU44qX/JWy50abI29u/aeAPtNAACM=
Subject key identifier: CC:59:F5:A0:EE:82:72:D8:82:B3:76:D6:9A:D1:D4:CA:BC:6A:7C:10
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019E30E0CF3D1FC1014B447DE98DE80080D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 13:01:39 +0000
Manifest this update: Sat 16 May 2026 13:01:39 +0000
Manifest next update: Sun 17 May 2026 13:01:39 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: iCluQYOms/wHGEAGPE/5c6MGZbsqppLovw3HOPY8Lqg=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:cf:3d:1f:c1:01:4b:44:7d:e9:8d:e8:00:80:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: May 16 13:01:39 2026 GMT
Not After : May 17 13:01:39 2026 GMT
Subject: CN=cc59f5a0ee8272d882b376d69ad1d4cabc6a7c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:fd:35:e7:92:17:a7:be:dd:ea:d0:c6:08:
b5:44:42:a4:08:a9:23:18:66:33:84:69:a4:5f:5d:
c0:8c:1a:7b:78:a8:88:a3:66:56:d2:32:5a:e1:4a:
29:5a:14:43:9f:46:4a:df:f9:aa:1d:f6:29:e9:73:
27:09:0c:b8:62:e4:45:b4:cd:0b:58:a8:e7:99:bb:
b4:fe:91:f3:28:b5:42:41:d8:21:33:d8:ad:79:55:
61:83:d3:ae:85:57:e4:f6:5e:15:3e:7b:37:6f:34:
d8:af:f9:f8:62:4e:03:99:3f:e0:88:bb:e2:46:7a:
07:63:57:80:0a:1d:7d:8d:c3:c1:a4:1a:4d:d9:d8:
07:d1:8c:98:0a:90:7d:af:03:03:9a:e8:3a:e5:3d:
84:a2:7c:60:35:84:2a:55:30:81:49:88:c9:26:50:
e5:ca:c1:c4:ce:ba:b8:13:62:e0:a4:d0:e9:2c:2f:
b1:5d:57:03:76:ca:2b:66:f5:f9:0c:16:03:a8:4f:
c5:0d:25:0c:8c:91:6c:91:0c:50:93:ab:e7:be:b6:
79:61:07:8c:cf:64:f4:c2:e3:a0:55:5c:65:da:98:
e4:94:ba:85:57:0d:ad:13:f9:66:29:86:7b:3f:ec:
2d:3c:7e:c2:cb:c3:0b:5e:c7:fb:01:de:94:35:06:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:F5:A0:EE:82:72:D8:82:B3:76:D6:9A:D1:D4:CA:BC:6A:7C:10
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e6:ac:ff:c4:82:db:ce:04:0b:18:b8:05:b8:7c:a7:44:5f:
68:58:a6:32:44:e3:cc:ee:2c:6f:56:cb:95:39:9d:97:71:ae:
da:b3:01:16:bf:d6:d2:35:8e:b7:1a:0f:9e:74:72:5f:70:77:
31:49:bb:c4:43:a0:39:7b:4d:d4:a7:0d:70:aa:8c:f9:01:92:
f3:37:44:a5:42:b4:18:69:da:8a:eb:13:ea:47:31:24:02:2e:
48:1d:1c:ed:7b:b6:03:a2:d7:31:fb:09:ba:bf:88:d1:9f:d9:
1d:76:29:86:99:81:f5:a7:d5:67:99:30:35:e5:e7:22:54:f1:
ba:44:fb:41:e6:4d:b6:40:75:b2:4b:90:3d:3e:bd:f2:29:54:
3c:ce:a1:bf:f7:dc:cd:66:f4:2a:31:a4:49:24:ed:5c:fe:ab:
d1:4e:84:ab:b4:89:78:09:c9:62:b8:51:07:e6:ed:5a:16:71:
4d:1d:93:25:af:38:5a:22:60:d0:21:f0:be:ab:a6:b4:74:50:
e1:67:35:a2:5b:e1:51:ae:e8:3f:c0:de:60:d1:cc:76:b2:dd:
91:77:c4:c7:35:53:7a:52:19:9e:25:82:cf:db:27:c8:73:9a:
c2:2f:02:1c:f8:c1:be:95:74:87:a0:0e:23:14:42:a6:c8:0a:
34:a4:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:21 2026 by rpki-client