Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: +NlOcUAsjpD/oSligC63sXajRREYQrTTH0NYIV3ltvY=
Subject key identifier: 09:E6:35:F8:B6:A2:5D:0A:1C:D3:11:BA:42:04:86:2E:F8:8C:A3:F8
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 019EB76ACF7C432DBBE196A35E7DF3C8609C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 16:01:30 +0000
Manifest this update: Thu 11 Jun 2026 16:01:30 +0000
Manifest next update: Fri 12 Jun 2026 16:01:30 +0000
Files and hashes: 1: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: 0GquZr6BbOOQ2uoNCSTLaN/BOGpxgP2FeGVZm8kDO74=)
2: zKzb524TG9Tb_yZBVp0kQkUxmSk.roa (hash: cnf66+cFIoDpuzcLy7f9twjeNJ6EZMaeYTno/sX1Zz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:cf:7c:43:2d:bb:e1:96:a3:5e:7d:f3:c8:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Jun 11 16:01:30 2026 GMT
Not After : Jun 12 16:01:30 2026 GMT
Subject: CN=09e635f8b6a25d0a1cd311ba4204862ef88ca3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:ac:fa:13:fe:d0:d5:4a:65:db:ba:e6:38:
cf:ad:78:64:49:55:68:e7:02:12:45:fa:d2:ab:c9:
96:29:49:a4:a9:82:e5:40:56:01:da:97:e3:dc:12:
a4:3b:06:ce:29:1c:fc:3b:a5:88:38:3c:c6:6a:54:
8e:40:ce:74:c0:5d:2e:12:6e:9e:ff:94:36:8a:9b:
fa:6d:12:59:9a:12:58:90:4d:92:5c:36:0c:01:f9:
90:bc:8e:34:69:f7:93:10:ce:c4:76:76:e5:ca:73:
7e:f4:fe:e2:8b:57:d8:23:2c:d8:31:5d:d3:5b:bd:
2f:c8:99:28:7e:2b:a1:6e:83:0e:80:31:62:fb:bb:
b9:25:18:f1:50:6d:85:6a:62:df:c2:41:34:e8:85:
9d:7b:10:44:3f:6c:e1:40:f7:aa:37:4e:67:a1:7b:
75:ee:c6:33:98:0a:92:f9:f1:ef:60:9e:52:32:82:
2e:af:d3:d4:41:42:22:40:c2:28:67:10:e9:e1:b3:
d1:0d:72:ce:f9:00:dc:e9:3c:42:9b:b9:53:d5:50:
18:08:2b:e2:10:b7:c4:28:6e:e8:09:18:3e:98:55:
8a:b8:f0:4f:96:d9:61:7e:e6:98:66:aa:7b:5b:22:
87:ed:5d:4e:70:a5:3e:58:38:c2:bb:74:ad:df:86:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:35:F8:B6:A2:5D:0A:1C:D3:11:BA:42:04:86:2E:F8:8C:A3:F8
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8d:91:91:22:4e:c3:a3:86:42:72:b6:4e:b7:91:2e:42:85:
4d:37:f3:ad:eb:53:22:51:20:b0:9f:e7:58:5d:34:2d:f2:9e:
f8:fb:65:a6:0a:fb:79:45:be:61:e2:c8:d9:29:b5:e7:94:20:
6f:09:4e:a9:f3:1b:5f:4e:fd:64:88:9f:47:35:a9:31:d2:86:
0f:00:8d:04:f5:8d:2d:53:fd:4d:25:cd:d9:39:db:d6:c4:d6:
3d:e7:0d:d0:c4:1a:b1:99:ec:63:78:4f:87:5d:c4:0b:eb:c3:
63:fd:72:f0:9e:17:01:36:ff:c2:d2:a8:81:d7:86:a6:23:f9:
ad:82:3c:72:04:f1:37:c6:22:b9:02:30:c3:a3:40:11:4d:36:
55:ff:a5:d7:4c:0d:6d:53:3f:76:6f:57:57:fc:14:e6:1f:06:
38:bd:1c:f5:17:f6:24:2e:3c:a6:ca:57:1f:55:0c:0b:ac:55:
58:91:93:65:16:3a:3f:ec:1d:da:61:db:ca:ac:a5:bc:bd:79:
5e:36:66:7a:7f:89:bc:a0:dc:60:b9:39:a6:88:44:97:74:fe:
9f:a7:d1:6f:5a:b8:5a:8b:53:78:35:20:bb:a7:9e:9a:a5:7c:
e5:7a:f2:9b:82:ec:8a:84:8b:68:cc:30:0f:24:b2:4a:51:3f:
74:44:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:05 2026 by rpki-client