Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: Yp3v952p+ChvgeJxAzRvu8+D1mRo2MPuDMsC+jmh8uo=
Subject key identifier: EC:3A:11:89:C1:80:FA:7C:D3:CE:6C:B7:81:51:58:EF:D0:E0:57:12
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019FF610C8A9357599E3D1E90CE602A6AC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0DB2
Signing time: Wed 12 Aug 2026 13:02:02 +0000
Manifest this update: Wed 12 Aug 2026 13:02:02 +0000
Manifest next update: Thu 13 Aug 2026 13:02:02 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: 3Ok/ZpK+2cs95xNfGy0tBVBP5uu+hNdo9kcciJks2LY=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:10:c8:a9:35:75:99:e3:d1:e9:0c:e6:02:a6:ac:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Aug 12 13:02:02 2026 GMT
Not After : Aug 13 13:02:02 2026 GMT
Subject: CN=ec3a1189c180fa7cd3ce6cb7815158efd0e05712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:e0:33:3a:e4:ad:7d:07:08:57:cc:c3:95:
34:1f:61:3d:46:0a:31:aa:eb:fc:c0:e2:0f:16:c2:
b2:89:a5:ea:80:85:f4:f2:25:2d:3d:61:52:c0:cd:
4e:c7:6e:c2:20:f2:1f:e2:ca:86:45:07:e0:bb:06:
85:49:48:2f:28:8d:7b:67:8b:65:6a:8f:f3:fa:7b:
03:24:14:e5:c4:e3:5c:2c:51:bf:60:7c:03:c6:44:
d4:30:69:46:20:97:95:50:2b:3a:57:99:9e:5c:04:
e2:6f:7f:f1:c7:2b:49:4e:d9:ea:b6:8d:75:94:12:
d6:db:11:28:a8:b1:ea:c3:50:9d:62:8a:9c:8a:ee:
c3:3a:1d:61:4b:63:38:36:7c:63:88:d7:bb:cf:a7:
38:d5:54:27:21:b3:10:d9:ad:25:ad:87:c4:6e:53:
b2:e7:f8:53:4c:a8:fa:b7:89:09:ac:01:9f:9c:bc:
2a:20:ae:f2:f0:97:bc:44:af:c3:4d:58:69:18:e6:
12:8f:b1:73:1d:cd:e3:7f:2a:16:48:39:73:7e:5c:
a0:72:46:dc:d3:3b:86:0b:52:3c:e9:27:45:c5:03:
bf:bf:32:bb:b8:a1:c1:85:b4:8d:98:7b:c4:49:b9:
4b:77:75:b9:d3:6d:c7:85:7d:fa:86:63:90:ed:1f:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:11:89:C1:80:FA:7C:D3:CE:6C:B7:81:51:58:EF:D0:E0:57:12
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7c:35:6c:e1:24:63:98:b6:a6:f7:65:65:98:e3:99:c4:63:
0e:99:c3:34:0c:b4:b3:91:f4:43:69:a2:1c:bc:99:13:39:f1:
7c:54:ef:9b:0e:6b:d2:b0:58:de:4e:aa:06:27:20:fc:ed:05:
7b:ed:b8:bb:b8:bb:e8:d3:52:b6:f4:e3:38:45:98:de:3e:89:
c2:ee:4d:58:fa:57:66:78:68:2d:57:b3:b0:d1:6f:1f:62:6d:
99:fa:1c:8e:91:30:c1:1f:66:26:9e:61:c3:54:d4:3e:65:55:
f5:d4:2a:81:f4:d5:eb:f2:cb:55:f2:15:c4:55:a4:ce:ce:dc:
33:9f:a0:62:90:93:0d:91:f3:73:d9:8d:47:94:dd:8d:76:45:
1b:a0:28:da:5e:ef:7c:4c:39:f6:53:6a:63:64:19:69:45:39:
7f:06:12:7d:fc:f2:42:4f:38:d7:1e:7f:79:b7:29:3c:ed:2a:
2e:e9:01:58:9a:f8:e9:c8:93:76:a9:56:01:c7:49:ad:d7:aa:
85:fb:63:6a:9f:1f:93:89:67:67:82:af:6c:30:32:63:6b:05:
56:d2:7d:ab:7e:3d:51:38:0a:0d:73:73:ef:59:00:4a:e1:46:
09:54:32:a9:fd:15:cd:41:d4:b5:a7:9b:6b:3d:9c:8a:40:8f:
db:f9:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 18:15:01 2026 by rpki-client