Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: 0wVPBNAjnu3/YU9v5FUsadQtynOVGCeCBmGEQQSturI=
Subject key identifier: BE:86:35:D9:F5:3A:AF:4C:0A:37:E9:3B:7F:1A:A4:B2:A7:82:EA:28
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 01A17F61C739382F662D459B334AA29E0772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 22:01:16 +0000
Manifest this update: Tue 27 Oct 2026 22:01:16 +0000
Manifest next update: Wed 28 Oct 2026 22:01:16 +0000
Files and hashes: 1: 9faIgb6vdUmIyTVjibJSuOHDYNk.roa (hash: X64msVLgNRC3fKw+NLkotQNPw2VyPcVaP4QnP3a/6nk=)
2: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: UMrACg7A8RrbU9r37XBVj7aISgPJrgTIQeB2v/RMYvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:c7:39:38:2f:66:2d:45:9b:33:4a:a2:9e:07:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Oct 27 22:01:16 2026 GMT
Not After : Oct 28 22:01:16 2026 GMT
Subject: CN=be8635d9f53aaf4c0a37e93b7f1aa4b2a782ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:d3:6b:26:89:40:ef:32:b8:ae:69:99:73:
d7:5d:7c:06:fd:5c:4b:53:20:fa:e3:14:75:45:14:
2a:8e:f4:08:92:dd:80:36:80:72:9c:61:51:04:f1:
12:87:67:03:1a:53:21:22:e5:dd:5d:4f:d2:f7:3b:
27:14:63:aa:c7:37:4b:1e:38:c9:10:a5:3e:47:1d:
c2:78:c8:69:33:0b:2b:30:2a:b3:9d:7d:6c:b8:a0:
15:89:8a:5c:4e:cb:9a:86:f7:01:0d:2c:ae:77:c9:
74:a7:4c:58:3c:ac:c7:c7:e9:89:fc:55:00:e8:b6:
7d:f3:3e:ec:ae:43:94:cc:b5:ef:2f:59:c6:aa:4b:
ac:f1:4f:32:fc:da:fb:5e:34:af:f6:fa:f9:b6:51:
ce:10:9a:74:cd:fe:11:9e:ac:52:60:4b:30:a9:3a:
1a:02:5e:20:f6:89:eb:9e:f7:91:00:d6:54:e1:7d:
cd:be:45:dc:2d:8e:b5:60:43:9b:75:4b:c0:fd:06:
3c:d8:05:f6:92:bf:0f:9b:4b:4b:ef:90:6d:06:1c:
50:c9:fa:3b:b4:67:8e:96:be:a5:cf:7c:d8:65:fd:
e3:a4:a6:27:09:d3:be:31:90:bf:47:eb:6c:54:08:
c3:e7:e3:15:05:06:33:a6:b1:05:9a:49:49:f2:21:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:35:D9:F5:3A:AF:4C:0A:37:E9:3B:7F:1A:A4:B2:A7:82:EA:28
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:94:e4:68:04:c6:61:6b:f3:74:17:66:dd:0b:09:00:2e:
24:83:90:e9:b5:bd:3b:d0:7a:c3:73:32:36:27:08:d2:ad:b3:
aa:91:b8:99:5b:84:1a:47:5f:13:f1:be:b0:fb:d7:c1:17:71:
b9:7a:32:05:38:92:ac:a2:84:5d:20:51:ef:70:c9:f0:4d:a3:
1d:a9:da:0b:81:9a:cd:61:16:0b:05:f1:b0:22:78:d9:a3:77:
55:8d:32:47:1a:f3:58:39:1d:d2:2c:39:6c:62:5e:67:ba:6c:
d1:78:89:2d:e1:b3:cf:81:5e:cd:2d:2b:1e:cf:39:c6:6d:90:
5c:b2:73:5d:73:c0:45:83:68:c7:8a:af:0c:5e:97:47:d9:fe:
9a:9c:a1:2a:1a:69:62:91:38:ce:28:0e:7e:e1:22:24:cd:13:
31:80:0d:a1:d9:ec:ce:23:6c:46:b2:00:b2:c1:55:70:cc:2b:
34:0e:6f:a6:a8:f3:4f:7a:d4:96:f0:f0:29:03:c8:b4:a4:ad:
3f:7c:e7:27:6f:32:95:08:f7:60:53:51:51:3c:c3:31:6d:34:
6b:a0:4a:56:99:c8:32:73:e8:bd:d9:34:d5:dd:c7:52:1a:cb:
a3:7c:67:4b:55:13:4c:69:40:22:50:7d:e4:3d:6b:61:06:e3:
bd:42:20:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/Ycc5OC9mLUWbM0qingdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTM0ODJlMWQ2NmQ4N2Y1YjlhNWVlYjljOGFmZDZiNWVj
MjMyMjQwHhcNMjYxMDI3MjIwMTE2WhcNMjYxMDI4MjIwMTE2WjAzMTEwLwYDVQQD
EyhiZTg2MzVkOWY1M2FhZjRjMGEzN2U5M2I3ZjFhYTRiMmE3ODJlYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUfTayaJQO8yuK5pmXPXXXwG/VxL
UyD64xR1RRQqjvQIkt2ANoBynGFRBPESh2cDGlMhIuXdXU/S9zsnFGOqxzdLHjjJ
EKU+Rx3CeMhpMwsrMCqznX1suKAViYpcTsuahvcBDSyud8l0p0xYPKzHx+mJ/FUA
6LZ98z7srkOUzLXvL1nGqkus8U8y/Nr7XjSv9vr5tlHOEJp0zf4RnqxSYEswqToa
Al4g9onrnveRANZU4X3NvkXcLY61YEObdUvA/QY82AX2kr8Pm0tL75BtBhxQyfo7
tGeOlr6lz3zYZf3jpKYnCdO+MZC/R+tsVAjD5+MVBQYzprEFmklJ8iEJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6GNdn1Oq9MCjfpO38apLKnguooMB8GA1UdIwQY
MBaAFCOjSC4dZth/W5pe65yK/WtewjIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQt
MTM4NTg3MWE5MDlkLzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81MDJlY2QtZTZmZS00Mjk4LTgwNTQtMTM4NTg3MWE5MDlk
LzEvSTZOSUxoMW0ySDlibWw3cm5JcjlhMTdDTWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5eU5GgE
xmFr83QXZt0LCQAuJIOQ6bW9O9B6w3MyNicI0q2zqpG4mVuEGkdfE/G+sPvXwRdx
uXoyBTiSrKKEXSBR73DJ8E2jHanaC4GazWEWCwXxsCJ42aN3VY0yRxrzWDkd0iw5
bGJeZ7ps0XiJLeGzz4FezS0rHs85xm2QXLJzXXPARYNox4qvDF6XR9n+mpyhKhpp
YpE4zigOfuEiJM0TMYANodnsziNsRrIAssFVcMwrNA5vpqjzT3rUlvDwKQPItKSt
P3znJ28ylQj3YFNRUTzDMW00a6BKVpnIMnPovdk01d3HUhrLo3xnS1UTTGlAIlB9
5D1rYQbjvUIghQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:13:09 2026 by rpki-client