Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: 6yexsPNuHO0CajMcox3q0wVWRMBAVtiKTeEv8DP9S5k=
Subject key identifier: 67:DA:E3:8B:27:C8:C5:8F:7B:BF:E1:FA:BD:16:4A:6F:78:23:83:BB
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019F37851D608162000BD93002AA676B2C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1584
Signing time: Mon 06 Jul 2026 13:01:38 +0000
Manifest this update: Mon 06 Jul 2026 13:01:38 +0000
Manifest next update: Tue 07 Jul 2026 13:01:38 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 3AIDhs0xj2nqeCCSog7tVd2Pne1g+ge43C8+ZVH9GR0=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:85:1d:60:81:62:00:0b:d9:30:02:aa:67:6b:2c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jul 6 13:01:38 2026 GMT
Not After : Jul 7 13:01:38 2026 GMT
Subject: CN=67dae38b27c8c58f7bbfe1fabd164a6f782383bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:ec:9a:3a:d9:fc:c1:ec:eb:09:12:30:e9:
6c:7d:e3:fa:76:92:e4:e4:07:c1:83:1c:22:69:d8:
fd:a2:97:a2:35:8a:31:30:eb:29:54:02:e4:c5:0f:
18:3f:05:cb:40:ed:45:e8:55:ae:51:fb:5a:41:1e:
f4:cd:68:e4:d3:f3:93:52:f3:30:41:99:08:e1:5b:
35:cd:d4:8e:b2:65:a8:bb:fd:0f:ef:60:35:b6:01:
22:bb:8e:63:47:d4:fa:2a:3c:12:c2:b5:8d:bb:25:
d9:b4:de:d5:1e:97:6f:2e:57:9c:30:d2:29:1e:cb:
36:d2:38:2f:83:81:14:4f:67:1f:63:0a:68:e9:7a:
2b:54:cc:41:91:00:b5:bd:eb:0e:83:b4:09:3b:29:
cd:b4:dc:9a:3c:c8:55:5d:58:56:a5:0a:6e:80:76:
6f:fc:cb:a0:95:0c:49:dc:fe:ec:d0:63:b1:ed:44:
28:19:75:63:dc:cb:a5:4a:5d:a1:06:d0:72:c1:2a:
5b:53:b8:cd:7d:04:aa:d0:a4:4d:d0:ea:3e:a9:11:
16:c0:f3:d9:46:76:fc:60:8c:51:9d:3f:a3:0a:26:
e9:6f:cf:97:7f:c5:23:0c:04:c2:cc:6d:73:74:8f:
3d:78:64:18:c7:9f:4d:9e:a4:73:45:3f:f8:ae:09:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:E3:8B:27:C8:C5:8F:7B:BF:E1:FA:BD:16:4A:6F:78:23:83:BB
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:02:d0:64:3b:c5:a0:37:2f:f4:f6:dc:70:0a:41:75:df:bb:
d0:e9:3e:ca:61:ff:f6:28:a7:57:38:4c:7f:d5:62:ae:e8:b4:
ab:41:1c:6e:fc:3c:f7:b4:22:4f:36:87:99:b8:7c:8b:22:78:
26:58:87:ac:0b:bc:d1:76:5c:e0:46:5b:74:21:f9:c5:49:9d:
79:59:4b:44:7b:7c:1f:78:76:b3:95:d2:3f:bd:8d:26:4b:5b:
4d:da:3b:cc:42:46:f9:e0:80:25:ac:ae:06:c8:13:76:13:8d:
23:06:78:ea:b7:46:c4:9d:23:f8:10:ab:42:e9:e6:41:a2:88:
df:11:e8:b5:7a:33:a5:76:4c:4c:72:f8:19:c0:90:26:bb:e0:
ca:72:d0:86:1a:d7:e0:4a:7a:7e:92:32:8f:02:7b:13:85:10:
5b:dc:ec:53:65:dc:97:98:c5:d0:22:d6:c6:b8:45:98:c5:d2:
e0:60:a5:64:d6:e1:0f:9f:37:c8:ed:22:d7:c7:2b:4d:94:75:
50:6c:3a:9a:5f:dc:eb:ed:85:13:29:ed:bd:4c:6d:46:ca:1c:
d0:6e:f7:63:db:ca:d9:4a:65:72:09:98:88:35:e8:52:ee:ec:
fb:27:d9:b7:cc:dc:76:c8:67:50:4d:ad:81:83:07:49:1a:4f:
97:b2:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:07 2026 by rpki-client