Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File: I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier: ETV7nVhIa3MPo3kwKDaN+kcPiQa8N2s8onNyFdviHWc=
Subject key identifier: 48:A9:59:82:B8:33:EC:D2:37:CD:28:D7:6C:5A:99:B6:1B:FE:9F:17
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 019D0AE82E857BB8B640C56CD2839684BD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number: 0C63
Signing time: Fri 20 Mar 2026 11:01:21 +0000
Manifest this update: Fri 20 Mar 2026 11:01:21 +0000
Manifest next update: Sat 21 Mar 2026 11:01:21 +0000
Files and hashes: 1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: 2lFa4f3IR13N/pFT0yZoBcOsHPzhxGh3Q8uBVYg5Rt0=)
2: vXDjFBq71vr1IHmRZPDL7wXcmG0.roa (hash: NqguKijKf4+Gz8cTHroyn7BkPdAYo3NsoAn4kS9xt0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:e8:2e:85:7b:b8:b6:40:c5:6c:d2:83:96:84:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Mar 20 11:01:21 2026 GMT
Not After : Mar 21 11:01:21 2026 GMT
Subject: CN=48a95982b833ecd237cd28d76c5a99b61bfe9f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:70:18:9d:2c:2f:bd:9f:b4:a2:13:ed:c4:
d4:ad:ee:0e:6c:4f:e1:2b:9b:05:9d:a0:a1:73:93:
31:66:e5:de:66:34:9c:1e:b5:58:a9:03:eb:53:98:
eb:f7:da:f1:a7:f9:55:2f:29:25:93:4a:a0:09:b2:
24:eb:65:7b:d7:ee:68:8a:9d:e1:72:35:c4:82:7b:
8d:2b:93:0a:0b:00:86:b0:1e:b7:69:ea:29:47:78:
4e:5b:bc:99:1d:c1:14:b5:de:b2:a1:32:0c:27:19:
1d:4f:4f:e0:e1:7b:79:1b:83:26:b9:09:54:dc:e8:
13:c3:84:66:61:81:f7:44:c2:5d:21:6e:1d:3f:7d:
c7:13:50:da:13:6f:13:21:f7:cc:41:d8:7e:10:fc:
4d:50:fb:b1:3a:20:64:25:e7:c9:04:48:85:af:81:
a4:69:3e:c1:7a:a9:1d:a4:9e:a4:a4:d4:ee:ec:f8:
54:fd:74:01:39:04:c8:ea:ea:0e:fb:69:df:86:66:
6d:d3:8a:72:9d:c0:ba:f3:b0:c5:31:ab:be:10:81:
9f:2b:c7:ca:30:11:35:41:96:0a:06:0b:2f:d7:aa:
1e:ef:82:2a:8f:74:05:96:b5:b8:fc:8b:24:b1:e3:
a8:d8:7e:dc:39:50:3e:20:88:90:34:cf:b2:d6:49:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:59:82:B8:33:EC:D2:37:CD:28:D7:6C:5A:99:B6:1B:FE:9F:17
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c6:0d:43:17:e8:0a:40:f4:6c:f3:77:a9:9f:db:45:71:08:
72:94:a2:4c:ac:ce:33:66:82:8a:32:ad:9e:c1:ef:68:20:2a:
f8:cb:06:28:a1:3d:68:19:b2:26:68:b7:d5:1f:9a:03:71:fe:
22:f4:f0:ec:a1:42:b2:37:7f:da:42:b1:ad:5e:bd:d1:bf:d3:
c4:4b:40:e4:20:12:7d:be:ab:a4:7d:47:81:c8:73:7f:b2:0a:
84:01:ae:c6:1c:ed:77:95:f5:cb:c1:c6:87:17:fc:77:1c:02:
26:4d:0a:3c:f6:a4:8e:25:ea:21:56:59:e7:58:28:62:55:79:
f4:70:64:07:23:02:8f:11:10:59:43:1a:57:8d:83:b5:0c:d8:
47:a2:54:a0:e2:0b:3d:99:9c:88:08:da:fb:1c:5f:e2:78:4c:
c9:41:0d:1a:83:b1:3a:f9:e6:6f:6a:34:2d:cb:f2:a6:af:7f:
4f:fa:9c:b3:08:ec:e1:fe:2e:88:6b:30:e7:1b:ce:c4:49:91:
5e:49:85:aa:29:76:2e:77:a3:70:cc:5e:c2:0a:a0:35:cf:28:
5c:f9:b4:db:79:5e:13:8c:72:df:19:97:33:3b:2c:22:57:1a:
30:04:7f:4b:86:61:8b:d4:cb:52:b8:66:86:48:99:b1:a1:32:
d0:78:48:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0K6C6Fe7i2QMVs0oOWhL0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTYxMWY0ZGFhMWQ0OWFjZmIyZGIyMmE3ODBjY2U3YjA5
YmRmZTkwHhcNMjYwMzIwMTEwMTIxWhcNMjYwMzIxMTEwMTIxWjAzMTEwLwYDVQQD
Eyg0OGE5NTk4MmI4MzNlY2QyMzdjZDI4ZDc2YzVhOTliNjFiZmU5ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+FwGJ0sL72ftKIT7cTUre4ObE/h
K5sFnaChc5MxZuXeZjScHrVYqQPrU5jr99rxp/lVLyklk0qgCbIk62V71+5oip3h
cjXEgnuNK5MKCwCGsB63aeopR3hOW7yZHcEUtd6yoTIMJxkdT0/g4Xt5G4MmuQlU
3OgTw4RmYYH3RMJdIW4dP33HE1DaE28TIffMQdh+EPxNUPuxOiBkJefJBEiFr4Gk
aT7BeqkdpJ6kpNTu7PhU/XQBOQTI6uoO+2nfhmZt04pyncC687DFMau+EIGfK8fK
MBE1QZYKBgsv16oe74Iqj3QFlrW4/IskseOo2H7cOVA+IIiQNM+y1klKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEipWYK4M+zSN80o12xambYb/p8XMB8GA1UdIwQY
MBaAFCOmEfTaodSaz7LbIqeAzOewm9/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85MTIxNTItN2RmOC00ZWJmLWIxZDMt
NDc3NmM3MDkzYTI5LzEvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85MTIxNTItN2RmOC00ZWJmLWIxZDMtNDc3NmM3MDkzYTI5
LzEvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcYNQxfo
CkD0bPN3qZ/bRXEIcpSiTKzOM2aCijKtnsHvaCAq+MsGKKE9aBmyJmi31R+aA3H+
IvTw7KFCsjd/2kKxrV690b/TxEtA5CASfb6rpH1Hgchzf7IKhAGuxhztd5X1y8HG
hxf8dxwCJk0KPPakjiXqIVZZ51goYlV59HBkByMCjxEQWUMaV42DtQzYR6JUoOIL
PZmciAja+xxf4nhMyUENGoOxOvnmb2o0Lcvypq9/T/qcswjs4f4uiGsw5xvOxEmR
XkmFqil2LnejcMxewgqgNc8oXPm023leE4xy3xmXMzssIlcaMAR/S4Zhi9TLUrhm
hkiZsaEy0HhIxw==
-----END CERTIFICATE-----
Generated at Fri Mar 20 16:49:05 2026 by rpki-client