Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
File: I6iatTI5OGO8sTkWPc9BWKV_G68.mft (raw, json)
Hash identifier: IgB2ECp0LNO3qcTlkwQo+SWMLDWVYmKANwMSmNe2Ik0=
Subject key identifier: B5:43:D4:2A:3A:78:07:B3:B1:24:8E:87:70:33:0D:2C:02:01:DB:34
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Certificate issuer: /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial: 019E28EFF2A58ACBABA5C782A580947AE7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
Manifest number: 85
Signing time: Fri 15 May 2026 00:01:14 +0000
Manifest this update: Fri 15 May 2026 00:01:14 +0000
Manifest next update: Sat 16 May 2026 00:01:14 +0000
Files and hashes: 1: I6iatTI5OGO8sTkWPc9BWKV_G68.crl (hash: p2jDP2R9p6V2h951OOgIASExApmqaLp7oB7HCUyih00=)
2: TeBvR9keyGWF1HddOFbKAa_omvQ.asa (hash: CT9r+WMtWcO8eC0u8ppmte+isZN/hlSgsMu3YMgGTWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:f2:a5:8a:cb:ab:a5:c7:82:a5:80:94:7a:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
Validity
Not Before: May 15 00:01:14 2026 GMT
Not After : May 16 00:01:14 2026 GMT
Subject: CN=b543d42a3a7807b3b1248e8770330d2c0201db34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:0a:45:a0:48:0a:07:95:83:5b:4b:91:c4:
b4:61:3a:c2:3b:b7:bd:14:8f:cf:8d:8e:1a:68:b2:
25:6e:f2:ac:7b:3f:2a:79:aa:26:4a:24:60:30:31:
ab:79:21:80:66:3c:18:83:5b:20:49:c7:bf:94:4f:
29:11:f9:25:80:56:74:01:2f:1e:8b:98:51:d7:a4:
68:88:80:26:85:53:7f:9f:3e:f4:64:37:42:52:d7:
3c:64:10:b5:08:b6:ad:58:ad:c0:80:3a:7e:fe:fe:
b2:7f:69:a0:4e:e1:5c:bc:d5:ca:51:fa:47:98:8e:
e0:ce:c1:e7:87:5c:6f:a2:ea:44:44:91:c7:4d:7e:
4b:8b:25:ca:fd:6a:3b:67:c0:4e:a0:64:02:2d:e4:
d2:8d:fd:28:b1:b9:29:73:9d:70:b2:6b:13:e8:0d:
40:9e:65:0c:40:70:8c:2b:5f:12:c0:ea:08:3f:d4:
ad:7a:9a:34:72:7a:fd:d2:36:3a:3d:e8:7f:2b:33:
a9:25:7a:e0:c4:d2:4c:5f:a6:11:c1:3b:4e:93:e5:
92:0b:0a:0c:dd:7b:48:f3:74:01:6c:54:ae:8a:6e:
4a:3f:9c:d9:bb:7e:22:de:b3:fe:ae:7f:e9:db:85:
1f:59:97:e4:ea:98:25:af:17:aa:fb:66:06:ab:b9:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:D4:2A:3A:78:07:B3:B1:24:8E:87:70:33:0D:2C:02:01:DB:34
X509v3 Authority Key Identifier:
keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5b:c1:e4:24:d0:0b:ff:7c:b0:9d:c7:7e:73:c6:ae:e7:d0:
6a:8f:ae:12:3c:29:f4:d1:e7:67:39:4b:91:3d:92:f1:a3:29:
75:ca:f4:2d:da:3d:ea:42:12:ff:e2:fc:0a:f8:db:7d:54:64:
1b:3e:f6:22:d6:ce:97:7c:53:9a:3e:34:93:24:0a:09:d5:01:
a0:b2:8a:26:53:02:54:f8:f1:5f:ab:ac:28:62:f2:cd:90:9a:
1f:b4:f6:6e:58:c4:57:ff:37:83:c8:5f:a4:8c:20:57:0c:1b:
c2:18:79:82:71:79:ef:8c:4d:39:9a:94:4f:dd:7a:c3:3c:59:
e8:20:de:09:2d:2a:02:17:04:d6:13:9e:a1:e8:77:f6:96:15:
0f:8c:ee:7d:02:af:85:30:d1:08:08:f4:cc:e5:d8:ca:e1:0f:
ca:e1:0c:7f:28:e0:ef:34:55:2a:bf:bd:85:b3:5a:c0:31:68:
2b:dd:0d:f9:86:a9:18:75:80:1b:aa:5b:b9:7e:21:aa:95:9c:
a8:8e:f2:6a:fe:e7:b6:2a:f2:e1:4e:ae:eb:65:53:1c:b7:6d:
7c:0a:a7:94:50:d8:cc:b8:b8:53:c3:da:48:df:2e:ac:55:9d:
cb:72:8b:40:1b:53:0a:ab:da:c9:8b:c4:88:08:dd:86:c8:bd:
df:a1:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:04 2026 by rpki-client