Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier: /pDQ1wrTUw0HfiaJAtrFVLX4zppcTvygg31MAkSc4VY=
Subject key identifier: CA:75:4D:7C:9E:57:64:71:DF:D8:F0:5C:AA:07:1F:08:3C:84:41:CB
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial: 019EB7A0A1B8ED8D06843BE74AC09441D23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number: 047C
Signing time: Thu 11 Jun 2026 17:00:17 +0000
Manifest this update: Thu 11 Jun 2026 17:00:17 +0000
Manifest next update: Fri 12 Jun 2026 17:00:17 +0000
Files and hashes: 1: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (hash: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4=)
2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: 4MZL1IugEVvpdnmM8ii9nw5xucqG/7TYNIa8AKQEYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:a1:b8:ed:8d:06:84:3b:e7:4a:c0:94:41:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Validity
Not Before: Jun 11 17:00:17 2026 GMT
Not After : Jun 12 17:00:17 2026 GMT
Subject: CN=ca754d7c9e576471dfd8f05caa071f083c8441cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:42:ed:02:ff:cc:a0:a2:0a:59:51:60:71:
11:d1:61:4e:49:af:76:d6:9c:b9:03:51:60:88:54:
99:87:bf:ce:e0:7a:8e:57:b2:2e:16:0d:44:00:be:
fd:55:55:f3:4b:f4:c7:c2:0e:57:f1:94:8e:cf:7c:
01:12:0d:d6:c0:20:77:a8:5e:81:c3:cc:84:c0:7a:
55:10:bf:f7:bd:44:f7:13:db:55:9a:c6:ca:bb:a7:
bc:8f:3d:ac:2a:5a:07:6f:d8:a4:4b:10:88:03:22:
da:6f:1e:ca:4f:99:61:86:32:9b:cd:c3:44:43:7e:
93:41:a3:c3:bc:04:1b:a2:3c:bd:2b:05:1d:bd:df:
0f:67:f7:e9:46:e7:2d:a4:e8:06:b8:9a:84:72:cf:
44:bd:88:e1:26:72:5e:2a:dc:51:0f:07:24:d6:1e:
86:8a:8f:49:e7:31:be:68:cc:12:53:63:d9:68:8d:
6a:9d:56:5b:37:75:ba:f8:db:0f:57:27:1e:a6:68:
f7:e1:aa:90:0e:39:af:68:a1:73:cb:66:01:33:a9:
ee:79:b7:7c:0f:1d:39:f3:1a:7c:b4:45:72:fc:3f:
57:ec:b4:74:90:a0:d5:e0:f1:01:eb:0a:91:93:d4:
a1:8b:84:0f:2e:b6:c9:f0:cb:26:47:9a:54:8e:e9:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:75:4D:7C:9E:57:64:71:DF:D8:F0:5C:AA:07:1F:08:3C:84:41:CB
X509v3 Authority Key Identifier:
keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f5:a3:ba:f1:86:a4:82:78:05:4f:5f:8c:71:b4:de:7c:66:
19:2a:94:3a:dc:84:2b:b4:8a:4b:37:54:99:03:3e:b7:6c:3d:
c9:ad:53:12:00:ab:97:22:91:41:1e:88:26:b1:98:ec:33:f0:
08:21:90:2e:4a:09:92:61:75:99:5e:a3:23:3d:8c:e2:e5:4b:
25:b1:cb:8a:5c:58:92:05:c3:0a:b9:86:72:e2:6a:09:b3:8b:
35:d8:81:da:e5:83:d0:a9:a3:58:67:41:70:bf:c9:ef:bd:8d:
f4:29:d4:09:e7:d2:80:c1:21:71:56:90:be:20:80:55:fb:44:
10:9e:10:c4:dd:fa:67:dd:da:21:05:ea:5b:e9:ad:b9:ee:16:
df:cc:61:a5:74:cc:57:9d:ae:30:3d:43:f8:ad:4e:60:43:e6:
18:8f:d0:75:9a:e1:14:31:6a:2f:a3:42:74:2d:28:5b:c9:bd:
8e:a0:0e:85:0f:11:00:91:fe:c1:aa:39:28:19:86:e1:a5:81:
8f:33:0d:66:28:aa:10:fc:8c:ab:a5:cc:41:72:2f:11:13:72:
98:4e:96:8b:83:a1:ae:ed:0e:0f:af:51:dd:0f:00:b6:bf:35:
81:24:bd:e7:dc:32:c9:c5:a4:94:97:f4:d5:91:dc:33:78:70:
d2:d7:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:54 2026 by rpki-client