Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: O6scuh8KqxWG7py9bum+kp4P9WLirFCsjR5VbYqnrWc=
Subject key identifier: C6:F0:43:7E:6E:90:58:6F:72:92:EB:56:1B:1B:5A:83:FD:50:FD:97
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 019E4EB40A523F2BB5A69DB4CE351A8B65C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 0839
Signing time: Fri 22 May 2026 08:01:22 +0000
Manifest this update: Fri 22 May 2026 08:01:22 +0000
Manifest next update: Sat 23 May 2026 08:01:22 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: qAHGa4GOhts1bcsa0JWObjL5cuZz38dqV7R0sl7N5/0=)
2: TGA4vVujs0yD_obPFPyktqNpDgc.roa (hash: 5S5Kx8RY4RfrsLwFClyqoZagN1DyIRqE+8qw4ESGtGA=)
3: vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa (hash: cUJ90bZFPukFANzteUEP/DKwx2ymm3AfgIUKRxH9Byw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:b4:0a:52:3f:2b:b5:a6:9d:b4:ce:35:1a:8b:65:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: May 22 08:01:22 2026 GMT
Not After : May 23 08:01:22 2026 GMT
Subject: CN=c6f0437e6e90586f7292eb561b1b5a83fd50fd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:e8:c5:93:99:f5:4b:13:ba:91:d0:d4:90:
2c:92:b9:a8:50:34:b0:4e:29:c2:66:2b:5d:b1:7f:
9f:50:f8:5a:af:ef:9a:97:dd:95:54:a6:40:a3:17:
18:f3:88:66:19:f9:c9:e4:f8:fd:22:e3:fe:a0:cf:
dd:4f:77:b0:bf:6e:71:95:4f:eb:31:7f:b8:fb:40:
3b:5f:d0:b8:ca:ab:55:29:cc:e9:5c:ea:dc:dd:dc:
34:19:c4:af:ad:84:35:27:cd:cc:f2:dc:a2:48:43:
32:e6:09:56:d7:8f:8f:d9:ab:2a:6b:49:21:3f:3f:
2f:0b:9b:e9:12:40:61:28:0c:aa:61:35:20:cb:6a:
7b:e1:23:b9:aa:92:c7:aa:48:e1:17:6d:55:61:a0:
80:96:06:a4:33:a0:fd:3e:22:df:11:bb:55:01:bb:
21:40:53:34:68:92:f3:4d:e6:ee:ea:4b:93:2f:5c:
9d:4d:9f:26:53:73:49:6d:b1:d4:e6:ca:ae:a9:c6:
22:18:3b:c6:b8:4a:14:a4:34:0c:44:95:ce:fb:24:
62:5b:1d:99:08:35:17:52:74:e4:88:16:0f:f1:4f:
1d:d7:69:4d:d7:17:19:b6:3c:b3:4f:0d:ad:57:27:
cd:71:5f:91:bd:01:19:17:3d:d6:4a:89:85:83:dc:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:43:7E:6E:90:58:6F:72:92:EB:56:1B:1B:5A:83:FD:50:FD:97
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b2:1d:70:65:11:d2:b6:7f:bc:fb:5c:a0:70:b6:ca:0d:5e:
31:76:d0:58:c8:91:30:8a:42:fa:bb:d3:df:4e:57:76:75:35:
c6:69:21:eb:6e:59:90:3a:69:ee:fe:0c:f0:0f:1d:c7:9c:28:
76:7c:27:e5:3f:2d:09:f9:f8:e5:94:64:ac:32:d2:f0:e4:08:
a5:b8:2e:33:23:01:3a:f9:7a:3b:ed:b1:96:d7:67:4e:fe:9c:
b2:24:92:68:82:11:13:e1:95:9e:43:31:92:5a:b8:c6:1b:54:
49:ec:07:12:c8:83:60:58:c6:60:67:a7:2f:c6:f4:27:89:3f:
7c:ca:82:5d:07:76:cc:06:ff:87:16:04:11:f2:9a:68:73:4c:
ce:29:6a:73:5b:08:93:59:db:1b:7c:a9:69:bf:e5:96:9d:b4:
01:03:03:e6:a1:c6:32:47:c2:53:a6:78:87:68:e4:39:ca:60:
6a:ed:8c:da:fa:94:9f:e6:aa:c6:a1:89:fa:63:f9:11:90:bb:
59:e0:5d:6f:d0:23:93:84:5d:33:b8:a8:03:9d:03:97:5f:28:
95:b0:d9:75:99:2c:b1:2d:6f:c1:97:0e:8f:7e:6b:2a:3d:16:
45:1b:50:83:7e:ee:26:85:e5:67:83:14:41:55:06:ff:c2:87:
44:1a:5b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:24 2026 by rpki-client