Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: Jm4CNqmxLeDfWPq3Tz5/ARG9d/oaaB6S28UXbnF+g6s=
Subject key identifier: 44:9C:57:00:C7:01:F2:94:9D:AB:EC:BF:DA:56:56:DF:66:5E:AF:BF
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019FFA9192A1DCDE7B9333C12276219ABD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 19FF
Signing time: Thu 13 Aug 2026 10:01:11 +0000
Manifest this update: Thu 13 Aug 2026 10:01:11 +0000
Manifest next update: Fri 14 Aug 2026 10:01:11 +0000
Files and hashes: 1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: IqzuGBOq/JpLiqkcHMo/DRCtNT4pLGJyaVOTMymNHBM=)
2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
4: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (hash: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=)
5: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:91:92:a1:dc:de:7b:93:33:c1:22:76:21:9a:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Aug 13 10:01:11 2026 GMT
Not After : Aug 14 10:01:11 2026 GMT
Subject: CN=449c5700c701f2949dabecbfda5656df665eafbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:56:4a:47:de:b0:8d:a9:4f:62:40:1c:70:
cd:63:64:34:c8:4f:f9:7c:2e:be:6b:ba:a9:07:0c:
c0:90:aa:8d:a2:ee:e4:66:09:05:ca:15:d0:36:25:
f1:f9:fc:6c:1f:1a:18:6d:68:9e:df:3e:8d:39:cd:
47:31:81:9e:63:33:e8:52:3a:6e:23:15:40:d6:84:
c6:5f:32:7b:fa:8c:ea:79:b2:d5:9d:71:7f:38:1f:
a5:64:50:0f:8d:c3:9b:89:c7:a7:ff:1e:14:1c:d1:
f0:0d:e1:6c:98:d0:fd:bd:cd:c8:4f:82:d0:2d:7e:
4f:28:07:55:a7:44:fe:02:b4:8c:fa:07:48:ae:3a:
65:91:4f:77:63:38:16:9a:5e:99:96:1b:c0:4c:89:
9e:fd:ed:7f:ba:7f:8c:17:1d:e0:38:78:9a:a4:03:
ab:a7:a0:43:39:ff:20:53:81:bb:35:14:7f:d3:6d:
7c:89:40:a2:99:08:b3:ad:8d:d7:b6:08:89:17:b8:
b8:0c:a7:10:23:84:f2:65:f5:62:42:bb:48:9f:72:
c6:2d:ac:3c:c9:fd:2b:66:b3:7a:04:f0:bb:4f:0f:
8c:ae:fd:12:99:68:ef:07:0d:93:eb:7f:b0:fc:01:
7d:fa:6e:f1:48:d7:12:18:0c:4c:61:a1:90:c5:e1:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9C:57:00:C7:01:F2:94:9D:AB:EC:BF:DA:56:56:DF:66:5E:AF:BF
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e4:a9:31:83:66:7f:40:8c:08:01:5c:4c:a4:7f:e9:55:96:
df:7c:45:63:2a:d2:52:67:2b:8b:ee:cc:12:9e:28:a7:49:a1:
38:87:86:4a:f0:33:85:11:a8:d4:48:79:77:9a:fb:7d:09:30:
c4:07:a9:04:0f:91:b1:ba:93:8e:38:c0:e7:fc:bd:bb:c1:cb:
78:7a:30:b5:01:51:f2:ea:a0:2f:29:91:ba:93:88:ff:2c:fd:
61:c8:0c:2a:a8:f8:87:19:0c:da:a3:37:d3:ea:53:ae:83:c2:
1f:f8:35:07:06:32:7a:50:8d:a2:3d:e9:ab:57:14:ac:26:83:
14:f8:53:d0:a7:39:3d:ea:d6:6f:7a:35:9e:d7:f1:a5:a0:f8:
b3:ba:1d:83:6b:7e:bb:d9:6f:c2:d5:6a:07:84:90:3a:d5:3d:
c4:09:8b:c7:d1:d6:f8:31:89:fc:e4:39:3b:bb:b0:2e:88:bd:
78:50:5e:f6:da:14:4a:eb:62:6c:2a:0d:6e:cc:43:2f:11:a4:
8d:ab:df:ac:98:db:62:56:a1:e6:65:23:60:a0:82:fc:8d:e7:
03:a4:08:22:f9:02:92:54:12:3e:6c:f6:66:72:f8:9a:0b:de:
ba:dc:23:f7:25:fd:8d:9b:76:0e:d4:b8:86:88:13:0c:21:f1:
dd:ed:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 15:55:53 2026 by rpki-client