Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: kiepoWMsgFzSG/H2MHdyVWZ8wxxfs+2Rldl71z7McIw=
Subject key identifier: 2F:33:52:99:8E:97:08:05:18:21:E1:9D:F9:C6:DB:BA:D0:4A:DD:91
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019E4FC60E072A579BBFFD0712027B1B03DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 150C
Signing time: Fri 22 May 2026 13:00:40 +0000
Manifest this update: Fri 22 May 2026 13:00:40 +0000
Manifest next update: Sat 23 May 2026 13:00:40 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: UA5ZFALiQ+th22AdsU+Ycu/qXXYysdMb51cC4YZEYj0=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c6:0e:07:2a:57:9b:bf:fd:07:12:02:7b:1b:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: May 22 13:00:40 2026 GMT
Not After : May 23 13:00:40 2026 GMT
Subject: CN=2f3352998e9708051821e19df9c6dbbad04add91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:69:9c:4f:d8:d9:1e:f6:da:fb:14:7c:24:
ac:57:23:ab:89:65:bb:51:d2:07:8e:f5:57:c9:3b:
e4:3b:1e:e7:ef:3d:10:00:6a:29:70:37:ba:5a:b0:
ae:aa:e6:8e:5f:23:30:63:a7:19:1d:b4:92:e1:d6:
4b:7e:22:67:71:ec:09:78:ff:1d:aa:16:bd:bc:1d:
b9:16:02:5f:1e:ab:98:28:27:f8:c7:82:95:86:0f:
0e:cf:6c:28:09:b6:45:b2:eb:e7:45:4f:b6:98:5f:
fb:47:26:b4:26:1d:37:e4:7e:30:a8:6a:25:00:dc:
12:cc:21:03:2e:60:76:2c:6f:0c:e1:b5:37:c7:f4:
ec:c5:90:4d:f3:1d:b8:a3:28:60:a8:ad:c7:f6:7a:
8f:41:c7:ed:e3:37:e4:bc:84:c4:0c:ea:93:3e:4b:
2b:8c:49:83:a8:c0:65:45:18:d5:aa:7a:bb:53:e0:
4e:77:0b:c0:42:c7:39:42:4a:ac:31:99:16:ac:47:
8a:d1:b0:9e:15:49:9d:bf:df:fc:fe:98:b0:57:9a:
b7:c9:19:e4:ee:3d:a4:c7:88:23:a9:59:03:54:a8:
bc:3b:41:ce:b2:af:8c:dd:91:8b:fd:da:91:62:31:
d1:c7:50:29:f2:54:23:78:55:de:b3:f8:d9:28:0b:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:52:99:8E:97:08:05:18:21:E1:9D:F9:C6:DB:BA:D0:4A:DD:91
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:da:9d:75:74:92:14:ec:df:ac:3c:48:5f:b3:7d:23:6a:
ab:e0:c7:59:ad:b0:46:1f:e3:85:22:b8:59:67:09:7c:35:ad:
ac:db:14:1f:56:31:30:67:69:37:8d:63:b1:97:ae:23:36:a7:
7b:9b:8e:5a:bf:c5:49:a1:56:5b:bd:f7:d4:df:2b:a0:e0:17:
85:8c:48:5e:de:48:2a:b9:0f:f3:77:e7:01:28:cc:35:0b:14:
ff:8a:86:0b:b9:9d:69:c8:a9:56:fd:37:94:d9:bb:ba:4f:3e:
76:d5:01:0b:09:a2:60:78:2e:b4:b5:c9:d1:2a:55:9d:94:cc:
f5:7c:4b:0a:d0:59:3b:c6:84:b4:ed:a5:b5:2f:9c:d6:b6:9e:
d0:49:28:78:de:8c:09:d7:07:ef:f1:c4:c4:52:df:03:36:ef:
82:5d:42:3d:29:99:33:e4:dd:bf:a0:40:c6:9d:b5:5b:08:25:
de:28:92:97:e0:37:49:bd:48:4d:bd:d0:7d:4c:3b:95:a2:73:
0d:f9:26:df:9f:0b:86:94:4a:ee:c5:2b:98:42:f8:72:ed:78:
ad:fd:20:ee:b8:00:c8:bf:18:f8:09:ce:b5:d6:6a:8f:8d:2d:
95:98:7f:9f:47:4d:b2:fe:15:ec:9f:e1:1a:8e:9c:6d:ef:03:
f0:61:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:24 2026 by rpki-client