Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: GCT/+MYoPCG8A12Ow0y823Yad6eINOTl0kcsEF2wEws=
Subject key identifier: 4D:B0:A9:D2:51:A1:CC:92:43:12:BE:5A:92:EE:36:91:5B:27:A8:1F
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 019F1B3252427AB8BA87EC4C48A47A96323C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 16D1
Signing time: Wed 01 Jul 2026 01:01:50 +0000
Manifest this update: Wed 01 Jul 2026 01:01:50 +0000
Manifest next update: Thu 02 Jul 2026 01:01:50 +0000
Files and hashes: 1: EBjSa7A-On9uI8_gmDnR7SDL_J8.roa (hash: cYEOk8Kxrw9KuVJI4MOZDU2QZ9S+tI4rD6Xrsxto8lg=)
2: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: XHcJA/8aW64H2KV+XjqJMLN+9Gdpj3gPNyV+n+aEK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:32:52:42:7a:b8:ba:87:ec:4c:48:a4:7a:96:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Jul 1 01:01:50 2026 GMT
Not After : Jul 2 01:01:50 2026 GMT
Subject: CN=4db0a9d251a1cc924312be5a92ee36915b27a81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:91:99:8f:a5:14:78:32:09:66:2c:7e:ab:
1e:be:0b:11:3a:12:a5:ce:ca:07:01:87:58:50:b0:
4c:6f:dd:3a:7c:dc:f7:ef:c5:0a:f0:39:50:11:60:
53:4c:c0:62:ac:4f:f8:8b:67:bd:01:9c:9b:6e:b9:
9f:68:67:b5:9a:cd:2c:7c:14:be:e8:18:2c:1f:b5:
43:e8:bd:12:21:bd:69:96:c4:24:b4:de:d1:11:54:
44:30:aa:0e:08:e0:07:81:22:b4:91:1e:85:20:d9:
88:e6:a6:4c:c6:21:13:19:ce:32:c8:29:c5:39:24:
0e:0a:09:6e:40:b3:34:24:fc:fc:f3:38:4d:e8:e9:
4d:3b:79:67:b4:62:ef:d2:9a:c5:13:73:25:99:6f:
e5:2c:1d:ab:e3:60:cb:c5:01:eb:2d:02:7f:e5:ee:
ce:18:68:d0:eb:ea:d1:ab:c7:d7:73:3d:3e:6e:72:
a6:9f:02:34:a1:87:40:98:6f:e6:e9:16:48:95:72:
54:53:0f:e9:4d:52:eb:09:b4:1b:dc:0f:bb:22:e3:
8c:d6:52:38:0c:ff:3a:ea:98:01:3a:32:fc:fd:ff:
c5:07:d6:b7:5b:09:af:5d:4c:d5:81:24:23:b9:b5:
cc:e8:24:6d:75:71:bc:6f:9d:4b:c0:1f:cd:a4:2d:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:A9:D2:51:A1:CC:92:43:12:BE:5A:92:EE:36:91:5B:27:A8:1F
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:61:3e:3b:60:00:3e:cd:7f:90:c6:81:23:8b:ea:20:58:e1:
ad:cb:8b:e2:41:e7:74:24:d4:17:bb:1a:c3:46:05:fd:19:58:
d6:02:0a:83:36:d2:d6:7d:05:e9:8e:8c:37:15:b2:b7:d6:3b:
f3:f1:48:fa:47:4f:87:ac:2f:88:4e:ef:a7:d1:d1:18:8a:8f:
2a:4b:6a:e6:2a:cb:46:34:5e:33:7a:a7:14:5f:16:3a:8a:b3:
e5:36:79:ec:27:c9:c6:4e:48:74:ff:79:60:58:5a:8f:20:fc:
2c:44:cb:73:39:2c:e8:ef:e1:b1:b9:df:c4:2b:fe:46:43:b0:
a7:b5:1d:5a:a5:17:95:fe:a3:fe:b7:57:c3:34:bf:40:44:a4:
9a:4d:f6:8e:b7:ea:63:a4:17:3f:c3:39:02:bb:9c:77:49:ac:
a9:fd:ed:91:1a:61:0c:33:cf:9a:cb:c9:9a:e4:d7:7b:ae:53:
15:3e:d5:20:9a:c8:37:b2:ed:44:29:bf:0d:47:c8:5d:dc:07:
2e:86:a6:31:91:5d:3a:d3:01:88:83:a6:e2:0f:b4:d5:e5:00:
79:4d:25:2e:eb:9b:01:ba:86:15:13:5f:9b:1f:02:86:93:b9:
e8:a9:90:28:ff:08:a0:60:6d:f0:98:2c:c4:15:0e:5e:f3:1a:
e3:ee:d4:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8bMlJCeri6h+xMSKR6ljI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTdiNTkzYzgwNGE2ODNmMGM4ZmEzZWRhOTMzNWFmOTJh
ODkwNDQwHhcNMjYwNzAxMDEwMTUwWhcNMjYwNzAyMDEwMTUwWjAzMTEwLwYDVQQD
Eyg0ZGIwYTlkMjUxYTFjYzkyNDMxMmJlNWE5MmVlMzY5MTViMjdhODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WiRmY+lFHgyCWYsfqsevgsROhKl
zsoHAYdYULBMb906fNz378UK8DlQEWBTTMBirE/4i2e9AZybbrmfaGe1ms0sfBS+
6BgsH7VD6L0SIb1plsQktN7REVREMKoOCOAHgSK0kR6FINmI5qZMxiETGc4yyCnF
OSQOCgluQLM0JPz88zhN6OlNO3lntGLv0prFE3MlmW/lLB2r42DLxQHrLQJ/5e7O
GGjQ6+rRq8fXcz0+bnKmnwI0oYdAmG/m6RZIlXJUUw/pTVLrCbQb3A+7IuOM1lI4
DP866pgBOjL8/f/FB9a3WwmvXUzVgSQjubXM6CRtdXG8b51LwB/NpC3SswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2wqdJRocySQxK+WpLuNpFbJ6gfMB8GA1UdIwQY
MBaAFCOntZPIBKaD8Mj6PtqTNa+SqJBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjIt
M2ZiNWFkZGU2MDQwLzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjItM2ZiNWFkZGU2MDQw
LzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmE+O2AA
Ps1/kMaBI4vqIFjhrcuL4kHndCTUF7saw0YF/RlY1gIKgzbS1n0F6Y6MNxWyt9Y7
8/FI+kdPh6wviE7vp9HRGIqPKktq5irLRjReM3qnFF8WOoqz5TZ57CfJxk5IdP95
YFhajyD8LETLczks6O/hsbnfxCv+RkOwp7UdWqUXlf6j/rdXwzS/QESkmk32jrfq
Y6QXP8M5Arucd0msqf3tkRphDDPPmsvJmuTXe65TFT7VIJrIN7LtRCm/DUfIXdwH
LoamMZFdOtMBiIOm4g+01eUAeU0lLuubAbqGFRNfmx8ChpO56KmQKP8IoGBt8Jgs
xBUOXvMa4+7UEA==
-----END CERTIFICATE-----
Generated at Wed Jul 1 06:28:25 2026 by rpki-client