Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: BAvttHb8nJTGiqtmazbb1Hl6sTpQfGjWv5pe70EmE6A=
Subject key identifier: 89:22:47:F9:EC:62:AD:CC:27:C7:EC:D2:F2:C2:71:E2:2E:06:09:7F
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 01A0009399D47B89DEBA9F1D1C5B6E528971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 16B2
Signing time: Fri 14 Aug 2026 14:01:08 +0000
Manifest this update: Fri 14 Aug 2026 14:01:08 +0000
Manifest next update: Sat 15 Aug 2026 14:01:08 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: xJrT1rQhjE6kNw8ZII+/O14ouN5nwoCZMyhlz3NGeMY=)
2: NRwgJUwXk3BWkcpGjCMp97lO_U4.roa (hash: cqI/kILVJcAeJ0Tz95y2zzvYBTUTuf7X5Zw7I2eBtl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:99:d4:7b:89:de:ba:9f:1d:1c:5b:6e:52:89:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Aug 14 14:01:08 2026 GMT
Not After : Aug 15 14:01:08 2026 GMT
Subject: CN=892247f9ec62adcc27c7ecd2f2c271e22e06097f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:48:b6:c6:b4:e8:41:94:60:b7:a5:c9:35:ae:
80:73:10:cd:7e:80:b5:f3:33:5f:92:d6:b8:87:93:
cf:60:9a:dc:a8:44:16:41:09:7f:89:4b:54:c3:9d:
07:1e:75:b5:9b:1a:e0:2d:cf:27:cd:9e:93:6a:4e:
13:ea:bc:d8:11:bb:b5:60:62:80:dd:db:0d:10:c0:
1f:09:be:73:42:4a:d1:d9:2b:fa:07:a0:cf:79:04:
5f:96:d7:0a:ee:5f:1a:6d:3c:11:e9:06:a4:8e:49:
10:e4:e6:e7:d3:cd:dc:23:b2:be:70:e2:ad:e6:ed:
38:26:d2:07:15:32:de:45:cf:26:ed:7a:b7:98:e5:
8e:d5:ff:65:46:41:13:e8:d3:ae:31:e0:fa:b8:19:
7e:98:44:de:48:db:c4:02:43:7f:7e:26:2b:35:46:
7f:76:13:7d:42:1d:98:93:96:86:e3:8a:ac:23:66:
b6:69:60:b0:91:c9:f3:f1:36:f5:22:44:ec:87:9c:
c9:0c:4b:9e:20:05:bc:81:bd:98:3e:a9:25:3c:ac:
52:63:25:3c:52:8c:e4:d6:97:4c:cb:65:5f:32:a1:
07:ad:37:0d:b6:60:12:9d:aa:88:ea:c9:7e:24:b7:
e2:36:fb:0f:ae:bf:0f:50:1c:b3:31:ce:19:69:2c:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:47:F9:EC:62:AD:CC:27:C7:EC:D2:F2:C2:71:E2:2E:06:09:7F
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e6:f0:a4:64:34:d1:d0:f0:b5:55:c0:ed:34:1d:63:3c:6c:
d7:96:a4:f0:6f:41:f8:89:08:0a:51:ea:42:0e:44:8d:45:9f:
9e:88:f4:1d:88:7d:06:ba:9a:9c:17:82:c2:d5:b8:7a:1e:77:
9b:2c:01:af:d1:ab:30:ea:e0:b2:06:77:fc:1d:ac:12:79:3f:
28:21:ba:36:f8:ad:d7:e1:73:7e:6c:9d:ab:48:de:99:b5:31:
4b:66:89:7a:37:88:5e:4e:e9:33:03:00:17:51:6b:74:3a:24:
1f:1b:3e:d0:55:c9:7d:e0:a7:ea:b9:b2:50:92:cb:c1:6f:d5:
5b:8c:74:fe:7e:b9:55:a7:e5:5c:db:71:f6:c7:fd:46:6a:24:
3c:fa:57:08:39:ed:55:48:7c:90:f5:f7:37:8b:82:87:61:47:
78:ab:aa:60:e3:b4:d4:c0:84:39:c5:ac:ed:62:3f:d9:78:b9:
7b:43:23:94:25:83:5f:3a:e9:fe:50:be:b1:6b:96:d4:ba:50:
b4:b5:d1:d0:43:cb:9c:cd:3c:d1:19:cd:77:a3:9e:5f:30:ca:
ac:23:e7:64:c6:75:e3:7e:23:0f:c6:7b:47:e4:81:7a:5a:ae:
17:15:bd:c4:ba:45:fb:7f:ae:41:cb:85:bf:ba:6f:91:df:d1:
14:6f:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:34 2026 by rpki-client