Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: LM4wYrmzC/MpeMEiaZt2uAHHcttgNJHOmML7r5BtvlQ=
Subject key identifier: 05:22:EC:D5:F5:D3:6C:57:BD:9D:50:07:F5:7F:BE:9B:E6:B0:BE:45
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 01A01F42D915CDC59FC6326A91B10194722A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 15FC
Signing time: Thu 20 Aug 2026 13:01:09 +0000
Manifest this update: Thu 20 Aug 2026 13:01:09 +0000
Manifest next update: Fri 21 Aug 2026 13:01:09 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 1oov4SFXFEm6Eo431tHuAgQLF7yT8WXtFBTNBkTGUEI=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:42:d9:15:cd:c5:9f:c6:32:6a:91:b1:01:94:72:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Aug 20 13:01:09 2026 GMT
Not After : Aug 21 13:01:09 2026 GMT
Subject: CN=0522ecd5f5d36c57bd9d5007f57fbe9be6b0be45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:21:a8:c5:a9:12:0d:74:1d:69:9a:92:17:
ac:34:c5:d4:85:76:85:aa:81:46:1c:c2:08:50:0f:
e9:d4:de:25:9e:3b:4c:ba:07:a2:df:10:34:31:84:
75:96:f4:4a:31:d8:25:97:95:9b:3f:34:3b:f6:ab:
5d:c3:1c:00:8b:5c:aa:44:3b:02:eb:9f:c4:ca:c0:
d6:8c:6d:a0:dc:82:a8:ae:43:b9:b5:7f:d6:52:48:
5e:46:c6:dd:ef:29:bd:5f:42:17:76:16:ac:d9:29:
f1:4a:db:e6:9f:1d:25:65:93:47:5f:ad:dd:69:d5:
67:da:6d:6a:d9:66:9d:8e:99:29:08:9e:1f:24:d3:
cd:c3:e3:9b:c6:4e:8f:a8:b5:3f:57:f8:62:aa:4b:
46:83:ce:9b:5b:c5:c0:0f:48:57:a9:61:00:34:c9:
58:7d:9d:9d:db:fb:59:4e:3c:90:d6:51:6f:a4:96:
bb:9e:9b:3d:55:31:f6:72:81:ba:df:69:68:67:94:
35:bc:f1:f8:ce:2d:2b:ab:b1:78:44:3e:68:a6:be:
56:63:eb:64:b8:4a:f1:04:f8:bf:21:cf:1c:f8:a2:
a4:d6:93:70:9f:32:76:72:b8:38:20:d0:63:94:41:
2b:74:c7:17:28:fb:f0:1b:42:25:38:ba:e4:62:01:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:EC:D5:F5:D3:6C:57:BD:9D:50:07:F5:7F:BE:9B:E6:B0:BE:45
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cf:54:37:a2:8b:36:8c:9f:00:73:69:9d:7b:cf:a2:c3:1c:
db:fa:0f:50:5b:30:8f:aa:69:4f:64:04:22:ac:24:f1:9f:fc:
b9:6b:67:67:4e:47:d9:1e:69:70:18:ad:9d:7c:f4:99:f7:40:
8b:60:c9:50:c3:46:bb:24:ae:b4:bb:78:c1:97:83:46:07:af:
12:c3:72:1e:55:f4:0c:98:91:35:72:c9:a0:c6:13:85:9e:56:
0e:ca:a8:68:85:30:43:92:d6:76:8b:a5:14:f2:62:89:58:70:
8f:15:8d:56:0f:0c:7b:fc:84:a8:7e:53:cc:9e:5b:a6:bf:f6:
a3:40:a1:e0:28:af:51:56:1f:e1:52:8f:ca:b2:f7:f6:0b:85:
fd:0d:af:2e:8e:06:d6:50:eb:88:c9:ef:44:21:1f:7d:bb:17:
33:5e:9d:e0:da:3a:ae:da:d9:a7:6b:7f:45:dc:7a:4d:e6:17:
45:8a:47:88:86:51:a5:a8:4d:a9:4b:4e:96:79:0d:34:77:3d:
04:26:77:bc:e6:31:ef:bb:39:87:0f:bf:17:79:ee:94:e4:7f:
52:18:ff:27:70:ea:ed:26:09:f7:13:8f:2a:19:dd:7a:3a:2c:
78:0f:20:3f:3e:96:55:64:4d:a6:87:7e:70:d5:c8:53:34:10:
8b:9a:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:29 2026 by rpki-client