Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: ceQV2cnExMlzFDTqTZTDTeSWWQDZjaTthOvP1GjB1Do=
Subject key identifier: E4:BE:B6:EA:BF:63:AC:ED:16:EE:E9:C1:81:21:77:F7:EF:D6:01:55
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 019D3940800EF997B6743A60A8F7D31A7241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 15FE
Signing time: Sun 29 Mar 2026 11:00:21 +0000
Manifest this update: Sun 29 Mar 2026 11:00:21 +0000
Manifest next update: Mon 30 Mar 2026 11:00:21 +0000
Files and hashes: 1: 3DT3B1NHAodibv8HfsiWBpQZkkw.roa (hash: be2IZuet6G8U53Y1IKjxfCGpLOGP/WsLRkFMJumAGEg=)
2: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: 9ZmkgLIU5bzQtm1+6tW1p3+EXALuu73hQxmK6GXlkC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:80:0e:f9:97:b6:74:3a:60:a8:f7:d3:1a:72:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Mar 29 11:00:21 2026 GMT
Not After : Mar 30 11:00:21 2026 GMT
Subject: CN=e4beb6eabf63aced16eee9c1812177f7efd60155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:e1:9a:7e:a4:ed:55:dc:65:6f:17:ac:b3:
51:11:bb:ae:d9:95:c9:63:38:b3:35:b0:84:84:46:
af:e4:cc:36:fc:24:ba:23:3d:a7:c9:2b:c6:88:4b:
ec:f4:79:b8:9b:ce:c5:23:c7:ae:0b:53:d9:71:b4:
bd:b4:b6:a9:00:ac:20:d6:58:6a:1a:88:54:bc:38:
d8:43:bc:4a:be:7e:2b:9e:26:ed:a6:b2:81:cd:ff:
df:92:ec:cf:e9:53:2b:b3:2e:60:c1:db:38:16:55:
95:a0:da:79:b5:87:a9:6b:83:8b:e9:21:28:75:7c:
d3:7e:c4:a4:e9:79:c5:4b:fa:80:3f:36:5e:8d:ca:
bc:11:a3:9b:1e:23:f9:e8:5a:17:e6:a7:b8:a6:bf:
c3:47:91:79:e6:09:85:eb:2f:37:fc:c0:4d:6d:f1:
38:4b:90:14:f8:9c:58:5a:cf:c7:8e:7d:18:52:24:
bb:69:89:5e:de:ca:29:a8:08:6d:2c:a9:34:88:d5:
28:c9:2e:a9:d0:0f:2e:81:a4:08:b6:3f:0c:dc:bf:
55:03:46:77:a4:43:47:5e:3f:ae:2b:e4:4d:97:cf:
5b:5f:27:24:63:7a:38:81:08:6f:42:9b:83:82:4a:
90:6e:83:a9:a0:9e:88:3b:08:0f:d3:f2:b2:94:49:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BE:B6:EA:BF:63:AC:ED:16:EE:E9:C1:81:21:77:F7:EF:D6:01:55
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fd:82:9b:2b:eb:1c:10:80:99:f8:f3:f2:c0:bc:10:4e:04:
e7:c8:af:bb:ad:e6:27:4d:6b:82:04:41:09:a2:e8:26:b1:49:
a4:c2:e1:32:ce:ea:33:4b:89:c4:21:0d:5c:aa:a9:d7:95:44:
5d:72:9d:af:77:97:10:c1:6a:5f:7b:e5:81:5b:f5:3c:47:11:
37:3a:4d:16:e0:7d:d5:01:2c:43:5b:d7:03:c8:7d:ab:cc:2b:
56:90:5b:d7:8f:42:ab:46:e5:7f:c4:7f:13:3b:70:53:e1:65:
ff:51:e0:3e:b3:96:e1:07:bc:7c:fb:47:63:1d:72:79:54:77:
7b:62:5a:13:fc:fc:39:ff:4a:c5:af:b5:63:15:e2:7a:f0:c3:
57:62:e8:0c:39:e2:b6:7e:20:b3:e5:86:ca:b8:87:e0:6f:ba:
0d:e9:5d:50:db:e5:53:11:f1:1f:7f:a5:0d:82:d6:e7:34:ad:
97:da:3c:8f:26:91:fe:b4:32:cd:98:91:f9:f6:28:e0:f6:49:
b8:e3:63:5a:c4:07:8f:49:04:af:59:4c:6c:55:af:5a:93:a8:
61:1b:b4:03:8f:51:5e:d7:06:fe:89:9a:be:c8:90:d0:6e:8e:
ab:ae:60:ef:aa:d0:80:38:fa:c7:65:fc:eb:b2:39:18:71:ab:
e8:c5:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:03 2026 by rpki-client