Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
File: I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft (raw, json)
Hash identifier: Nh5u6rHT/ofmwoQUnU3L8ZUWyAG+mvE+tcK6m7isvAA=
Subject key identifier: C0:60:10:FF:6D:F8:4B:C7:7A:89:25:A1:E7:CE:5E:4A:D7:F1:98:6B
Authority key identifier: 23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
Certificate issuer: /CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Certificate serial: 019EFCB9DE495639157027E77981B7C84720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
Manifest number: AA
Signing time: Thu 25 Jun 2026 03:01:39 +0000
Manifest this update: Thu 25 Jun 2026 03:01:39 +0000
Manifest next update: Fri 26 Jun 2026 03:01:39 +0000
Files and hashes: 1: I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl (hash: 4bRrxvv+fQ/oRU7dOQlF81tOSb4ilMPZL6f3qDvIuTE=)
2: Z1FAr4NSj_9E4vgngoY4iZIbd6w.roa (hash: TNaTsbZBUY9cnfgT4Gqq06IHw66GAFg4ule0/lO0mw0=)
3: b89OtE1WAM5mSDz-HnqsCyirLw8.asa (hash: WwQIyDPTpparBL/aU3tgaOWtU26s+wxcO28wS+CM+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b9:de:49:56:39:15:70:27:e7:79:81:b7:c8:47:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Validity
Not Before: Jun 25 03:01:39 2026 GMT
Not After : Jun 26 03:01:39 2026 GMT
Subject: CN=c06010ff6df84bc77a8925a1e7ce5e4ad7f1986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:af:62:20:9d:87:47:38:e8:21:b0:b4:e4:
49:7b:ff:69:4e:b2:4e:2d:f6:18:fe:55:36:1d:5e:
c4:28:f3:ad:4d:55:ca:c9:83:e5:90:28:18:8a:8a:
e9:59:e7:df:03:3a:cc:c0:77:4e:6a:1c:96:71:54:
89:fd:f8:db:a9:16:25:9a:6f:50:90:9a:45:aa:30:
ca:9f:22:26:17:87:9d:84:d5:45:ee:ef:f2:2d:23:
c2:71:1a:4f:83:61:89:8e:aa:31:19:97:18:1c:42:
d4:e0:e4:cd:65:61:a5:2d:47:47:41:75:95:6f:05:
04:d4:63:69:dd:f7:11:cc:64:be:86:a1:34:b3:1d:
06:19:56:3e:60:79:74:0b:30:8a:75:ee:0a:3c:a3:
e6:d8:f6:a1:d6:de:69:5f:8b:c3:19:d8:01:f5:9d:
f5:55:80:35:2f:22:5c:60:1c:74:5d:df:68:5f:17:
8c:48:4d:ac:9b:48:e7:c8:d8:11:c2:59:b4:4c:59:
4e:c2:3c:c6:a8:d4:5a:f3:4e:43:cd:25:9d:e4:75:
7b:ae:e5:af:fb:01:dd:8e:4c:0b:a5:42:81:c7:75:
3f:3f:5a:40:70:a2:4c:13:23:33:a5:26:c4:6a:b0:
99:05:7b:20:2d:a2:7b:ae:18:f6:24:4f:e5:cb:c3:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:60:10:FF:6D:F8:4B:C7:7A:89:25:A1:E7:CE:5E:4A:D7:F1:98:6B
X509v3 Authority Key Identifier:
keyid:23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7e:df:1a:64:65:38:11:14:a4:8d:74:63:e8:98:cb:e1:fc:
5d:b4:ea:b0:47:a0:b9:da:11:fc:f6:51:77:49:d0:b0:7b:d5:
3c:ae:a4:e9:8e:9c:f1:9e:b8:b1:ff:21:88:64:12:ea:2e:9a:
83:bd:31:9a:6d:de:a2:0e:e7:d4:1e:5e:97:07:dd:a2:58:91:
2c:06:02:ea:21:6b:c0:91:52:20:0f:a9:17:92:7c:b0:04:93:
bd:15:5d:72:2b:3f:67:49:8e:73:e1:8c:eb:7d:17:7a:be:16:
af:16:64:44:b3:99:30:23:95:9d:7c:fa:3d:8d:d0:c3:ef:c8:
6f:9f:b5:92:ee:0c:46:55:3a:7a:69:44:39:96:ac:fb:c5:68:
b3:e2:d3:db:a1:f0:c0:39:d5:f8:9c:df:e2:4d:ae:c5:c5:b3:
62:1c:2e:87:c7:07:ca:e5:b0:cd:6c:24:09:6d:bd:56:62:fe:
f7:32:90:29:1f:43:b3:e5:1c:4c:82:0f:66:19:9f:92:b6:b1:
b4:66:09:f4:94:96:f5:c8:05:70:a1:db:21:a9:94:fd:b1:26:
f2:85:c9:07:01:43:1b:8b:2a:2f:35:a0:5f:e8:68:b0:a0:63:
b5:f4:17:8b:f3:ff:88:5b:9c:6e:06:24:bf:ac:c0:56:fe:7f:
70:ee:1e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:09 2026 by rpki-client