Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: Mrxdfn4TB1N7p8cQbqBQmHP+gllPewHX8M9LWxOhp90=
Subject key identifier: 5C:BE:40:3F:CC:BA:2D:B3:B2:E9:1F:0E:13:61:51:96:41:B9:E8:DF
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019FD7CEE3FCA17D907E126238715B5A9BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 1680
Signing time: Thu 06 Aug 2026 16:01:27 +0000
Manifest this update: Thu 06 Aug 2026 16:01:27 +0000
Manifest next update: Fri 07 Aug 2026 16:01:27 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: WTuSmjdAqz2DqOEXIPeHPAQEsN4hQJ+OcBSuqGWik+Y=)
2: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (hash: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI=)
3: e3q1V2fD2QBr302Nmb_jtOVn5-M.roa (hash: kNGhLH15D9N/CBFSD4P6hJtpDjbOe8kg0SMmM1H5/j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:ce:e3:fc:a1:7d:90:7e:12:62:38:71:5b:5a:9b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Aug 6 16:01:27 2026 GMT
Not After : Aug 7 16:01:27 2026 GMT
Subject: CN=5cbe403fccba2db3b2e91f0e1361519641b9e8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:d4:09:ef:ab:c3:de:0a:dc:e1:27:fd:08:
b7:0a:61:02:4b:66:11:4a:cc:31:52:b9:16:c1:bd:
dc:fb:1b:8b:52:52:b9:4a:1c:12:23:d1:70:ab:53:
88:37:80:3f:b7:fc:d5:27:e8:23:d2:5a:df:63:10:
db:0f:f9:1a:44:5f:25:ec:f9:4b:88:72:08:00:58:
8b:04:8b:de:5b:79:2d:45:8a:24:c9:cf:08:50:ea:
17:29:da:a6:09:a7:22:bf:3f:ca:bc:db:2f:64:62:
d2:8f:86:d5:be:a0:5a:27:ad:9a:33:13:ef:88:b6:
54:ec:0f:a4:bb:ca:3a:48:d2:f9:dd:62:c0:d1:8c:
22:ab:f3:bf:47:19:b4:0b:35:26:91:95:fe:05:e3:
0e:95:e2:5d:f2:00:37:83:9a:e2:1a:b4:61:ee:67:
2c:7a:4b:45:1d:d7:08:c3:2a:fa:d8:24:a0:a6:20:
9c:de:3b:13:8d:64:50:94:57:e4:77:77:2f:98:c9:
ea:4c:59:1d:54:7a:4a:81:d3:eb:aa:27:32:39:34:
d5:b2:13:8e:79:56:bd:46:bf:f7:ce:73:bf:ac:28:
fb:5f:d4:c1:d7:bf:e5:fe:8c:92:43:df:9f:46:d7:
66:be:a3:ac:f3:14:0c:ff:1a:ed:88:49:7a:87:7c:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BE:40:3F:CC:BA:2D:B3:B2:E9:1F:0E:13:61:51:96:41:B9:E8:DF
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:5f:3d:3a:ec:e1:06:31:53:5c:9e:bb:1a:54:dc:cf:57:
66:b6:b4:08:c9:10:2c:01:80:a7:4e:71:3c:15:ba:1a:c0:a3:
a8:8f:db:cc:70:2f:8e:c3:81:5a:53:e3:4c:47:63:e6:f0:c4:
1b:80:63:25:5e:0f:fd:f0:e3:7b:02:5d:61:a5:83:43:21:89:
f9:13:da:d1:dc:4e:67:63:1a:d5:06:0c:40:43:5b:dc:a2:81:
7c:6d:4c:54:2b:7a:1a:a0:97:ea:8f:13:f8:a4:2c:4a:15:15:
89:c1:70:6d:11:00:c8:dd:a2:3a:f7:d9:11:19:06:59:fa:7e:
be:6d:af:52:97:bb:16:6d:35:36:a5:d4:a6:73:07:1f:7d:66:
98:3a:99:14:8f:4a:c6:08:3c:d1:24:1a:f5:38:c2:a3:b9:51:
19:0c:51:79:42:40:46:c7:0b:57:8e:45:72:34:a9:a9:ba:8b:
02:51:6a:0b:ec:73:7b:28:08:2a:28:04:9d:61:d4:49:d8:a5:
6e:5f:2c:bd:2f:96:df:80:47:57:2e:d1:31:68:a8:38:d1:ac:
dd:11:5a:ba:46:94:50:ac:7a:86:6b:ca:d8:4f:63:ac:30:1d:
44:ec:7c:8b:35:5b:83:d9:3d:6d:f1:c3:d8:ba:db:45:e1:81:
b8:dc:ff:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 18:55:01 2026 by rpki-client