Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: HO405WU9ecD/RFVp+CG5hua5txP1dQUFM/bF+GU6LAo=
Subject key identifier: BE:E1:43:8B:3C:51:E0:85:D9:64:08:1D:8C:E5:01:C8:1B:68:42:73
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 019E33734B48A37A6878963ECD97FE8C7A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 1659
Signing time: Sun 17 May 2026 01:00:54 +0000
Manifest this update: Sun 17 May 2026 01:00:54 +0000
Manifest next update: Mon 18 May 2026 01:00:54 +0000
Files and hashes: 1: EBjSa7A-On9uI8_gmDnR7SDL_J8.roa (hash: cYEOk8Kxrw9KuVJI4MOZDU2QZ9S+tI4rD6Xrsxto8lg=)
2: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: o7y5R5OaCQzT4XZ3SyvUT0EYtMK+NwG7z+iCixxLxlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:73:4b:48:a3:7a:68:78:96:3e:cd:97:fe:8c:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: May 17 01:00:54 2026 GMT
Not After : May 18 01:00:54 2026 GMT
Subject: CN=bee1438b3c51e085d964081d8ce501c81b684273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:cb:e9:38:e2:a9:47:26:e4:8f:80:0d:a8:
57:3a:1f:f5:33:b4:6a:24:d9:55:f7:bd:d4:86:6c:
6a:0a:c0:29:73:7e:d4:cc:40:10:64:f8:c0:14:b7:
78:9c:79:bf:f3:e6:f8:d9:93:e6:a3:cb:15:f3:f1:
be:8e:af:af:d2:83:e7:be:ad:8e:d2:84:9d:64:44:
55:76:54:b5:0d:a1:74:94:56:05:7c:3b:88:73:27:
80:bd:7a:8d:ce:f8:67:19:db:30:3b:32:5d:5c:8e:
b8:d3:8e:d6:53:57:6c:55:ae:b4:32:b8:d2:1e:7e:
e9:45:90:64:d0:fb:84:a9:f7:4b:2a:95:6f:ba:9d:
b0:b8:3e:df:2b:cf:f1:10:c6:4c:74:7c:42:a3:a4:
29:92:67:5a:f0:d1:ce:23:1d:22:f8:e6:c6:8d:1b:
52:12:68:98:94:50:53:dc:48:2d:2b:9d:12:68:01:
5f:d9:27:80:c5:18:e8:ba:ed:66:f6:34:c8:06:16:
32:d5:ae:a0:21:44:8a:4d:64:8a:35:f9:6a:7e:37:
2b:d7:50:2d:7e:04:6c:76:a6:30:ec:39:05:e3:aa:
4d:33:69:ac:cf:bd:6e:00:b9:2e:f7:29:a0:04:83:
7f:d5:3e:24:24:2b:0c:c3:8a:29:78:ae:f1:91:fb:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:43:8B:3C:51:E0:85:D9:64:08:1D:8C:E5:01:C8:1B:68:42:73
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cb:83:15:b0:ed:5f:40:a6:a1:22:4a:92:d2:99:ef:e2:03:
50:df:5e:75:b9:b3:b1:be:a7:93:a8:73:df:08:50:49:47:d6:
09:3c:99:81:f6:9e:99:83:fd:a1:28:f9:53:dc:36:b8:93:47:
c6:60:93:90:e4:32:00:89:88:94:bb:83:1e:0b:ce:98:47:c8:
5b:fe:68:33:3b:e9:db:65:10:f6:b2:91:10:29:36:48:ef:42:
02:40:67:2f:04:65:86:4e:4a:58:c1:3e:f9:89:fb:da:d2:b8:
01:2e:72:56:7e:1b:fd:db:5b:19:a0:7c:2d:31:f7:1c:48:fa:
63:28:17:ac:ca:45:73:b9:d5:fe:8b:fc:5d:0e:e6:06:ed:0d:
62:4e:75:bd:81:5d:a6:c6:87:1f:06:c1:bd:f3:42:71:5a:8f:
8c:d7:64:01:42:01:0c:cc:5e:ed:af:46:94:81:27:ea:10:aa:
ea:51:ed:02:9c:44:4a:3e:ac:99:fa:02:68:fd:63:a5:b6:9d:
82:18:7d:2f:96:25:b6:b3:8f:d3:aa:8c:f1:77:40:40:44:21:
c8:e8:0f:8e:ff:d1:1c:cf:14:98:9c:c6:15:ed:53:7f:91:21:
44:de:ef:35:7e:73:ae:18:e0:0f:36:cc:0b:b1:5b:9e:2c:b8:
1d:a5:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:32 2026 by rpki-client