Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: x29i1pT7TNBvKkY3r0kc40gBig0L/WgROuqaCgFCQ/k=
Subject key identifier: 37:5B:F6:9A:58:DA:54:AA:7A:98:FE:B1:4A:0C:AA:28:76:AD:92:B3
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 01A08A1F2591696D97C4C66B6867F2599A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 07:01:32 +0000
Manifest this update: Thu 10 Sep 2026 07:01:32 +0000
Manifest next update: Fri 11 Sep 2026 07:01:32 +0000
Files and hashes: 1: 9faIgb6vdUmIyTVjibJSuOHDYNk.roa (hash: X64msVLgNRC3fKw+NLkotQNPw2VyPcVaP4QnP3a/6nk=)
2: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: sIRKcgGa2ub2oAQ3Ar4BvrC6JZRuZ3o2rr0QWSitO6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:25:91:69:6d:97:c4:c6:6b:68:67:f2:59:9a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Sep 10 07:01:32 2026 GMT
Not After : Sep 11 07:01:32 2026 GMT
Subject: CN=375bf69a58da54aa7a98feb14a0caa2876ad92b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:bf:05:25:9b:ba:7f:30:c7:ce:1e:9e:30:
70:88:af:35:a8:76:c1:16:2e:ea:7a:00:12:2f:9f:
d5:9f:79:5e:58:b2:12:02:ef:97:46:f1:5f:be:81:
e4:4d:40:04:10:ba:61:02:00:ef:fd:1c:dc:74:ea:
28:c3:4a:73:00:40:3b:93:21:04:fc:8e:90:b6:34:
98:9d:41:b1:8a:7f:46:fc:e7:6c:fe:ae:39:ef:17:
33:b5:b5:3a:38:50:3e:c5:50:6c:7f:66:0f:be:ac:
cc:61:8c:84:b4:90:b5:dc:ab:31:07:eb:dd:df:7b:
38:92:66:79:40:0e:e0:a8:da:d6:ad:3b:bb:93:ae:
f3:fe:ce:f5:2e:9b:c8:6d:77:2f:f4:44:51:99:41:
78:37:be:b7:da:b8:5b:46:2b:bd:a2:9e:5f:41:45:
50:cc:d1:91:16:af:0d:4d:df:55:5a:ab:e1:b0:f9:
b6:64:f4:cd:a4:01:8e:cb:d9:53:ae:a5:7f:8d:bd:
d8:ce:91:6f:6b:95:2d:0b:68:59:0b:57:23:71:eb:
51:93:6e:b4:47:e9:4a:56:21:cc:69:cd:56:81:83:
2c:47:81:7c:78:75:d6:eb:38:e6:ad:63:75:99:4a:
75:5f:df:e5:9d:08:ac:6b:7e:28:38:70:e7:36:e2:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5B:F6:9A:58:DA:54:AA:7A:98:FE:B1:4A:0C:AA:28:76:AD:92:B3
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4b:c3:f8:23:6a:a5:e6:ce:c7:35:3e:e2:dd:89:2f:d0:36:
98:c2:92:11:2e:82:bf:07:53:75:3b:2b:37:1a:48:bb:a4:eb:
82:e5:68:e6:f8:c5:99:6a:63:2d:4c:ab:12:fb:88:c2:69:e9:
89:0c:0e:b8:d4:5e:97:b0:4f:c2:c5:a9:7d:ea:8a:82:2a:3a:
10:de:4a:dd:5f:13:62:b6:e0:8b:db:d4:16:1d:c7:92:a4:3a:
dd:4e:0b:74:48:35:63:5b:f1:c1:30:76:1b:34:7a:66:58:c9:
8c:c2:e3:ab:5b:11:54:cb:48:4d:5f:43:26:fc:ab:ad:eb:61:
46:9e:77:f5:84:9a:57:ee:b3:a2:81:e7:a4:e4:3d:c0:81:8a:
40:28:e6:b7:a0:6d:53:e1:23:dc:7f:4c:d9:04:a7:7f:73:04:
50:63:6c:a0:1f:57:c4:d5:7b:5b:17:06:31:7e:bb:f9:c9:10:
95:28:a8:70:cf:e2:90:b9:48:d6:53:69:17:82:ca:92:76:a0:
ae:e3:7b:87:1b:5d:92:17:69:6d:36:cc:06:c8:8e:b6:4e:44:
b9:a5:e8:7d:1a:fc:b3:23:57:89:1d:7e:8b:87:9a:1d:d4:ec:
3b:d9:ad:6e:76:f2:50:3a:1d:ea:34:fe:9e:dd:a2:37:d8:3a:
53:c4:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:02:51 2026 by rpki-client