Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: 61CtGBD/FqHk9JrA6+keVH16mu515+4vCmleZ9G1LzA=
Subject key identifier: D1:D6:F3:4E:DB:C3:98:85:CF:7E:BD:B5:1F:EC:D4:A6:3A:AE:76:BD
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 019D3865C5E4A085B3DBAFEF9759872095FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 15D7
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: EBjSa7A-On9uI8_gmDnR7SDL_J8.roa (hash: cYEOk8Kxrw9KuVJI4MOZDU2QZ9S+tI4rD6Xrsxto8lg=)
2: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: UA5HoAm+vq8ddkVcQXpclfIekvqTkTaszFBQmG3o/LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c5:e4:a0:85:b3:db:af:ef:97:59:87:20:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=d1d6f34edbc39885cf7ebdb51fecd4a63aae76bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:52:16:3f:f7:03:f5:8e:34:ab:11:13:28:
00:15:85:ae:16:62:40:22:37:37:63:bb:c6:e6:af:
69:93:03:ed:a5:1e:c4:c3:0f:a0:18:09:35:f6:86:
43:27:f2:47:b6:a0:34:12:00:92:4f:0c:ef:f6:68:
1e:62:6b:2b:ed:bb:70:08:ef:46:76:f5:b8:3d:a1:
44:06:82:51:03:e8:91:81:b3:08:3d:29:71:7b:36:
73:bb:18:c9:e1:d7:fa:90:a3:fc:41:b3:07:bf:f1:
2d:af:29:ff:97:29:25:85:b0:47:d4:2e:6a:46:2c:
65:db:d9:91:03:c8:52:49:51:52:0b:37:49:7d:cf:
2d:d3:3d:f6:3f:f6:98:b2:ac:91:a8:67:ff:c9:62:
2f:1b:89:11:73:2e:9b:3e:54:c8:d6:7a:4d:84:42:
32:73:98:ff:2d:5b:90:b6:e7:6c:d2:86:6c:ae:17:
b4:d2:69:4c:1c:a4:65:ee:9d:7e:1a:3d:9f:35:18:
d4:8d:60:bf:33:b9:a6:0a:82:d2:c5:34:a1:6a:2a:
e6:a8:ce:ba:ff:b3:64:df:b3:34:fc:26:92:db:9b:
28:b1:d7:c0:87:06:52:b9:9f:c7:79:85:9d:ed:26:
cf:fe:55:17:5d:b2:41:98:1d:44:cc:da:50:7e:bf:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:F3:4E:DB:C3:98:85:CF:7E:BD:B5:1F:EC:D4:A6:3A:AE:76:BD
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dd:bb:40:01:01:58:68:4c:d3:f4:a8:6b:cc:62:6a:bc:49:
cc:8d:a4:6d:a4:89:9a:db:e0:c3:c1:2e:51:a6:6d:76:9f:b8:
bf:f2:9c:9b:00:2a:a8:86:50:9c:97:d9:d8:5f:27:8c:c8:73:
a4:25:76:6f:fa:c4:ba:28:64:99:7a:f5:9a:28:16:5a:b4:62:
79:e3:6b:65:82:f6:79:5e:8f:02:33:af:00:3f:48:e0:90:3e:
a0:82:bd:58:0d:7e:cc:3c:2f:1d:8e:2e:ee:72:9a:1f:c1:79:
e0:30:45:ac:37:5a:00:ce:bf:48:b5:b2:5d:b3:f8:97:d4:4b:
06:83:92:97:85:63:66:62:4e:f4:7b:3b:2e:0c:b4:72:05:bf:
a7:f8:6c:fb:e1:85:64:4e:45:f4:a8:59:56:98:d6:5c:7d:4c:
a8:62:6a:5d:ba:97:09:39:cd:9d:da:97:f2:fe:8c:cb:c2:09:
e0:16:04:43:c4:1a:39:17:c1:ff:2d:39:f3:fe:2d:60:a5:9f:
ac:6e:06:de:2f:0a:43:45:5e:1f:15:e7:4c:96:c6:61:31:e1:
73:b4:0f:0e:6d:74:f2:5b:a1:fb:29:54:9c:1d:1c:fa:0f:12:
03:f0:06:ef:dd:da:42:d7:34:e9:8e:f2:f3:87:1c:1d:e1:39:
96:48:8e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:18 2026 by rpki-client