Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: IrZJ/FXp1IMAO60FhxmM6+LV68Jd9slKRdwlrSG04Q8=
Subject key identifier: B5:FE:0C:53:C7:0B:5D:28:75:BD:F8:07:EB:64:C4:8E:B3:3F:E1:1D
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019F2812A15E3A6369C1BE952D68005F37A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0CD9
Signing time: Fri 03 Jul 2026 13:02:17 +0000
Manifest this update: Fri 03 Jul 2026 13:02:17 +0000
Manifest next update: Sat 04 Jul 2026 13:02:17 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: BHC8BTUszB5dsP0+m5TVO6gH3f76EAbZv4Qa+Qaezu4=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:12:a1:5e:3a:63:69:c1:be:95:2d:68:00:5f:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Jul 3 13:02:17 2026 GMT
Not After : Jul 4 13:02:17 2026 GMT
Subject: CN=b5fe0c53c70b5d2875bdf807eb64c48eb33fe11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:bc:19:0f:b9:4a:52:e2:72:10:55:6d:08:
d1:c9:cd:73:59:f2:a3:b4:14:10:44:43:d3:df:ff:
6d:dd:92:fe:28:6a:c8:20:a1:ac:02:8b:66:a0:b9:
f2:78:af:73:31:96:10:04:3f:04:0a:4b:ee:48:b3:
88:17:5c:c1:70:e4:92:02:47:da:f4:2c:9c:3f:bb:
37:9e:b6:63:a9:a9:5e:0b:a4:e9:85:c8:5f:a0:9a:
e0:1c:cc:f5:6a:66:f4:b1:00:4c:60:ab:07:f3:91:
48:e2:db:98:fb:e9:d9:26:c9:5a:56:1b:4f:7e:7f:
15:44:20:a8:ac:01:90:0b:7e:53:d0:85:97:f8:40:
a0:67:d0:3e:12:49:6a:a7:dc:46:00:cf:4a:88:0e:
cc:af:32:1b:9a:e6:19:5f:1e:4f:3b:f5:2d:59:8a:
a3:2c:11:0d:1f:93:87:cc:ac:14:df:98:ca:ca:c3:
06:21:21:34:52:7e:f3:71:f2:73:fb:a2:bd:c2:99:
16:08:ad:35:3d:a7:43:b9:69:ff:02:cf:70:c1:8a:
9e:c7:b2:94:b8:d6:60:a0:5c:fb:e6:e9:ce:2f:c3:
5a:8f:24:ab:d3:4d:bd:3c:a1:32:45:f7:33:55:17:
01:ed:13:d1:ef:73:58:39:b2:4e:ff:d0:8f:9b:91:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:0C:53:C7:0B:5D:28:75:BD:F8:07:EB:64:C4:8E:B3:3F:E1:1D
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:01:ee:2f:31:0e:73:55:d2:d7:12:b0:62:b4:0b:f4:01:f2:
58:cd:44:41:e0:87:03:53:46:81:d7:4f:d0:dd:43:32:f8:7f:
5b:58:44:e1:eb:4f:46:dd:60:36:56:7b:4a:8b:08:10:47:9e:
25:f6:1a:fe:af:b5:b5:a4:55:54:7b:19:15:19:3f:bc:20:a4:
8a:e5:3e:9a:7a:3b:29:7c:56:af:d2:a8:52:34:28:20:e9:93:
0b:f5:fa:c6:78:e9:00:8f:2e:f4:5c:76:16:77:e1:b5:5d:82:
d6:9c:51:8a:01:ad:a2:04:08:c2:ed:1d:df:4f:c1:43:c8:8f:
14:da:67:c0:e3:4a:23:20:c0:22:89:1f:51:e6:6e:16:c4:c0:
76:5c:77:66:1d:65:32:38:22:bc:bd:b0:00:6b:75:4a:61:be:
5d:94:ef:83:71:f2:3f:c2:02:11:d2:a4:d9:62:42:99:7a:02:
d9:49:1c:bb:e4:07:9d:6a:d5:f1:2c:e9:ad:45:a5:78:d6:c9:
27:91:36:a8:10:0a:ea:c7:af:00:21:31:11:68:37:a1:54:8f:
e1:85:28:40:da:69:85:29:e4:2d:92:d8:2c:86:e3:5e:0f:37:
4e:bc:af:94:e1:a7:2a:e2:df:02:b8:2d:cd:e0:cd:98:2b:40:
3a:12:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:25 2026 by rpki-client