Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: f6NNuUW/VG3pQmNzxJhwVx5TsNWqiVyHsTUfiv8i+80=
Subject key identifier: DE:B3:18:93:02:AB:F1:89:06:67:2C:E8:C6:31:3D:4B:79:8C:65:10
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019E2B1594E92B0587CD5FE46386ACE88511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0C56
Signing time: Fri 15 May 2026 10:01:35 +0000
Manifest this update: Fri 15 May 2026 10:01:35 +0000
Manifest next update: Sat 16 May 2026 10:01:35 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: jGJL1Io4WRWzYVVWi8EqIFDpFMeZ77fHkMJLqOLIa74=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:15:94:e9:2b:05:87:cd:5f:e4:63:86:ac:e8:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: May 15 10:01:35 2026 GMT
Not After : May 16 10:01:35 2026 GMT
Subject: CN=deb3189302abf18906672ce8c6313d4b798c6510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:af:ab:49:b0:dd:a9:30:94:bf:3f:73:e1:
97:9b:34:5f:9c:63:7e:2c:18:f1:22:4d:bf:30:12:
33:d9:3d:a8:0d:2d:fe:b9:aa:6d:a7:e0:20:6e:a6:
06:4f:30:22:78:c8:36:cd:dd:87:24:81:b5:5b:28:
07:42:c0:a5:cd:d7:a3:69:08:32:5b:67:9b:d3:d1:
09:dd:9b:2e:f6:4b:19:79:d6:2f:19:05:6b:24:e4:
62:f1:51:be:b1:d1:54:50:07:13:e3:cc:3b:c7:65:
96:0c:0f:35:4b:6b:bd:43:e8:74:53:79:1b:a8:1b:
f5:df:16:dc:c1:f0:50:72:f1:62:c6:14:bf:5b:c0:
ac:1a:ca:91:84:6b:99:a2:77:f0:ed:c6:b4:f6:a6:
c9:4e:42:70:1e:2a:d2:19:13:58:82:df:5c:bd:5a:
4c:c3:42:4d:65:4a:f2:f2:92:ae:6e:a5:b6:a8:2d:
e3:ff:b9:35:5f:3d:00:d0:1f:43:3e:a6:a4:b5:cc:
dd:ea:47:6f:65:10:86:0e:df:cd:f0:04:c3:be:df:
2e:43:c2:bf:91:c5:af:a1:71:c9:cf:8e:ae:7a:df:
19:d5:f5:e7:bc:2e:f3:66:81:3c:2a:e1:bb:15:25:
b0:5e:f5:7a:90:34:f3:08:3d:2d:ef:5b:df:86:0b:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:18:93:02:AB:F1:89:06:67:2C:E8:C6:31:3D:4B:79:8C:65:10
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a7:e0:82:fb:a3:10:0c:dd:60:c2:bb:4e:9f:88:de:84:24:
b0:00:97:7c:af:35:69:d7:da:c9:e6:81:45:14:ab:4d:4c:dc:
ba:e0:3e:eb:f6:30:db:a3:cc:a7:4e:7c:fb:2d:ff:0b:73:50:
ec:d1:0b:f0:54:c4:64:eb:54:c2:4f:b7:19:3d:9f:08:f3:23:
f1:23:27:95:ed:12:2c:0b:dc:13:9f:3d:e4:b3:e1:48:63:ce:
1c:44:cc:f2:7d:b6:60:ad:7e:52:b6:f1:f4:7a:db:a5:c8:37:
52:69:0e:63:93:42:94:a9:ab:8c:ba:56:b3:62:0e:eb:74:c6:
5d:b6:22:e9:00:ac:f1:3e:cb:2f:7c:bb:6d:40:a9:84:b0:30:
53:4e:f8:fb:84:26:fa:8b:73:93:df:0b:18:e5:ca:3b:71:d7:
ce:8e:b7:6e:68:b3:4f:b7:4b:fe:bb:d1:c3:13:a0:b4:b3:fb:
ce:d7:6e:3c:b5:a9:e6:36:76:66:52:fe:b8:75:b6:d2:cd:8d:
51:ac:2b:25:ed:e4:5b:60:43:bc:6c:4e:26:7c:c6:89:3f:16:
ca:c8:cd:88:3b:f1:93:d5:7c:dd:db:9c:ec:30:69:d5:7f:ac:
91:03:5d:0b:7d:77:c5:55:55:89:8a:28:1d:d8:69:ce:73:52:
ae:5b:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:41:47 2026 by rpki-client