Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: F573cXzLDpQR4qsYtAuM/E7kTtunYYbdZJq9vVOHpm8=
Subject key identifier: DA:3C:A0:28:36:70:AD:22:5F:FF:29:40:E7:A7:3F:C0:69:DB:EA:0A
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 019EB6C5E90E96F0FDDDB24332AB05B9358C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 13:01:23 +0000
Manifest this update: Thu 11 Jun 2026 13:01:23 +0000
Manifest next update: Fri 12 Jun 2026 13:01:23 +0000
Files and hashes: 1: 9faIgb6vdUmIyTVjibJSuOHDYNk.roa (hash: X64msVLgNRC3fKw+NLkotQNPw2VyPcVaP4QnP3a/6nk=)
2: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: 4BUYFEF538clJxaig5B5vewyVoPnIUE3FzzTQ/9Adbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:e9:0e:96:f0:fd:dd:b2:43:32:ab:05:b9:35:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Jun 11 13:01:23 2026 GMT
Not After : Jun 12 13:01:23 2026 GMT
Subject: CN=da3ca0283670ad225fff2940e7a73fc069dbea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:24:7a:9a:9c:4c:05:78:48:b3:7b:92:e9:
4a:26:9e:cf:d7:05:ad:cd:6f:a6:69:8f:f9:8f:eb:
57:43:fd:f5:d4:a5:bc:2b:ca:dc:d7:1e:73:87:d8:
f4:63:a7:36:46:f0:30:03:38:1d:57:99:77:96:5c:
cd:9a:a2:f3:18:39:2b:35:11:2d:8c:45:2e:91:12:
4f:a9:60:f8:10:74:9e:03:04:77:c9:7a:2b:b8:d1:
de:1d:b4:14:de:a3:52:ea:e7:6a:ad:d7:92:26:fa:
c2:68:a6:3f:5b:3e:77:c4:cd:a8:9b:7b:24:ed:3e:
fa:67:bd:bc:07:df:87:57:a8:33:c7:f3:c6:95:b7:
80:87:d7:45:45:a3:8c:5d:26:56:e4:2a:1a:1f:54:
db:92:cc:0e:5e:be:dc:bc:38:61:6f:84:c7:0c:04:
27:cb:28:7c:02:e6:2b:00:4b:45:32:04:e6:39:b5:
9e:ed:f6:75:8a:5b:af:2a:62:14:2e:76:8d:c5:d4:
10:01:ef:48:52:df:ab:27:08:71:76:ef:76:35:88:
5a:76:83:a1:86:07:c4:e6:98:14:ed:ba:63:12:47:
0c:18:b2:b3:9b:38:00:9b:ba:80:2c:4d:3d:66:cc:
fd:4c:c9:16:44:27:66:1e:90:06:cf:34:8f:70:61:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:A0:28:36:70:AD:22:5F:FF:29:40:E7:A7:3F:C0:69:DB:EA:0A
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:42:23:81:aa:06:04:75:52:c5:ee:0a:9e:b4:92:1e:2f:dc:
f7:c5:2c:9d:b3:99:90:35:32:da:44:e3:2a:28:2c:4c:76:3e:
1a:e9:f4:43:56:d6:7c:c5:86:1a:67:3c:a0:de:38:64:75:f9:
eb:a2:31:e7:84:c5:e5:54:56:5b:1a:e3:bb:be:9e:e4:1a:db:
f0:29:e6:5e:59:d4:64:c3:76:67:f0:e5:3d:90:0a:ad:6b:f3:
16:8d:b6:68:3b:5c:fc:af:16:5a:81:07:82:8f:f7:3b:6c:b6:
e4:b6:21:50:a5:f6:8d:2a:13:7e:c9:c0:17:95:03:95:61:4f:
8c:ba:97:b3:71:9f:cc:fa:d1:fc:42:76:5b:f7:4c:2d:91:f6:
a9:d4:7c:57:30:92:67:f4:8e:5c:b9:d9:7f:26:ed:69:2d:6d:
4e:49:84:f0:d3:f4:b7:60:2e:71:5d:98:b0:6e:8f:a7:95:07:
85:fa:0b:d0:1a:9c:fc:73:2e:51:43:fd:ff:76:bc:ae:a8:b3:
cc:ca:89:5d:04:e3:66:ee:4f:66:b2:c9:ab:ca:83:fb:0c:53:
e2:67:12:87:5a:34:c2:71:91:61:43:2e:75:b2:cb:5f:0b:7a:
e4:7c:08:4b:dc:5f:90:8b:05:2d:88:99:d2:30:91:5e:d1:42:
4c:f9:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:49 2026 by rpki-client