Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
File: I6iatTI5OGO8sTkWPc9BWKV_G68.mft (raw, json)
Hash identifier: v1iy2KmABOSTc5HTDxW8eZR81i4LDO8B33ibSLTkN38=
Subject key identifier: FE:A6:FA:83:DF:63:14:BC:8E:55:BE:4A:09:AD:F3:16:BA:29:1B:99
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Certificate issuer: /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial: 019F129C88621A9C3B1497334E8C0C729A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
Manifest number: FE
Signing time: Mon 29 Jun 2026 09:01:16 +0000
Manifest this update: Mon 29 Jun 2026 09:01:16 +0000
Manifest next update: Tue 30 Jun 2026 09:01:16 +0000
Files and hashes: 1: I6iatTI5OGO8sTkWPc9BWKV_G68.crl (hash: Ug7AF3iwBIgMhGxo81a70LJiF0Hkf6fTbUbbJ5++qVM=)
2: TeBvR9keyGWF1HddOFbKAa_omvQ.asa (hash: CT9r+WMtWcO8eC0u8ppmte+isZN/hlSgsMu3YMgGTWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:88:62:1a:9c:3b:14:97:33:4e:8c:0c:72:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
Validity
Not Before: Jun 29 09:01:16 2026 GMT
Not After : Jun 30 09:01:16 2026 GMT
Subject: CN=fea6fa83df6314bc8e55be4a09adf316ba291b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:1e:d8:59:72:52:d1:31:32:40:b7:7b:a7:
d5:4a:f2:23:89:4e:0d:54:09:7e:e8:59:ce:d0:3b:
04:9b:98:6c:69:56:38:8c:ad:8e:b7:7b:8f:e0:1c:
47:49:03:7b:e8:eb:c4:5e:0b:06:e1:18:17:0e:26:
12:90:df:0b:65:21:63:29:02:bb:4c:7d:f5:c5:de:
25:f5:a7:03:2e:5e:09:08:6e:26:91:d1:b7:fa:00:
90:3a:7a:fa:bf:34:38:27:e6:9e:a5:19:45:0d:d2:
c2:5e:a4:4b:c6:0b:bc:22:2a:23:af:8a:87:18:1a:
ef:46:0a:59:de:6b:c6:a2:a7:52:7f:a0:48:c6:27:
6d:b6:57:08:c6:e8:a7:5e:72:d8:5e:f7:f9:f3:c3:
8d:8e:2c:f1:ea:81:b3:4b:60:7e:a3:88:38:9d:7b:
2a:53:da:0b:0f:b4:1c:0d:81:ce:db:57:f0:30:1c:
76:d9:b3:f4:48:0f:2d:00:16:c5:2e:93:a6:45:17:
82:41:5c:25:9d:d1:f8:33:5e:7f:53:48:e0:a2:3b:
26:6e:6a:35:67:03:18:53:d7:4b:e8:d0:e6:3a:5f:
93:59:b0:0f:8d:d7:b3:4a:69:96:3c:e2:4b:42:1d:
9c:0e:5b:ad:b1:dc:92:a1:e1:97:81:61:93:eb:54:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:FA:83:DF:63:14:BC:8E:55:BE:4A:09:AD:F3:16:BA:29:1B:99
X509v3 Authority Key Identifier:
keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:79:5b:d1:25:06:f5:f4:80:19:4b:a1:63:1a:57:0d:84:
c7:08:36:57:12:ad:96:24:ea:1c:55:79:9c:71:38:16:8a:7a:
83:04:8e:7f:e5:39:5d:ae:de:96:e1:78:f6:e9:68:b4:25:b4:
0b:22:fc:ed:fc:f6:f0:4d:eb:3e:a2:1e:4a:a7:05:bb:cb:79:
55:52:e3:24:d0:02:db:15:6a:82:6a:e4:d9:fb:10:69:11:48:
ba:8a:86:04:ed:80:72:4b:19:2e:6f:ba:4f:bc:eb:61:68:6a:
57:3a:a4:b6:e9:90:e9:a3:b7:8e:f7:46:ef:eb:84:fa:b3:16:
df:44:1c:6e:20:04:dd:f9:7c:cf:51:5f:91:82:23:86:cb:c0:
d1:7d:96:56:9c:e6:4e:32:8b:fd:c7:1b:04:7e:29:60:f1:dd:
c9:13:23:b7:dd:2e:16:63:f4:d1:be:32:00:19:55:19:15:09:
ae:2e:4d:b1:bd:d5:b4:0f:00:83:c5:aa:03:05:3d:de:1a:49:
71:a2:49:71:4b:7b:a8:14:5e:c6:21:ab:cb:b9:c9:d0:96:0c:
eb:fb:75:e8:a0:dd:9d:07:b7:de:ef:e4:4d:d4:23:f9:73:d5:
3e:74:61:de:c9:6c:c7:83:05:55:87:c8:c2:e2:a5:e9:3d:0d:
79:b0:ba:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:21 2026 by rpki-client