Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: 4amvcldCxDuVsH8Oh9KA0noErHsgH6jxedgOQUJTffM=
Subject key identifier: 08:EF:89:EC:03:6C:F5:71:A3:59:BA:56:56:EF:57:F9:75:7D:8E:41
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019F122E5E5B4C280D6C90127C2B166E4971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 140F
Signing time: Mon 29 Jun 2026 07:00:56 +0000
Manifest this update: Mon 29 Jun 2026 07:00:56 +0000
Manifest next update: Tue 30 Jun 2026 07:00:56 +0000
Files and hashes: 1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: PIIAlnPj1FNZhuHBvWEEBA+8Z4w14WbpKai/JThqDLQ=)
3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:5e:5b:4c:28:0d:6c:90:12:7c:2b:16:6e:49:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jun 29 07:00:56 2026 GMT
Not After : Jun 30 07:00:56 2026 GMT
Subject: CN=08ef89ec036cf571a359ba5656ef57f9757d8e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1c:3e:fe:b7:6a:7c:d8:79:09:e3:7b:e4:93:
21:2e:49:c8:68:14:fa:f9:36:f5:ed:2e:d5:ff:ea:
88:d9:8d:ec:8d:f9:c7:47:55:77:82:0c:b8:d2:4d:
b7:5f:61:5e:b4:b3:f0:97:b2:b1:25:f2:44:d5:91:
b2:59:c7:90:5b:9b:b4:db:c8:93:b6:ad:e2:52:00:
bc:f5:0f:e3:8d:e5:bd:d6:7f:0a:57:54:1f:2c:2e:
5e:69:80:7d:8c:ed:2a:43:d1:75:75:95:98:6f:8d:
20:69:79:22:c3:1d:a7:ce:02:6e:7a:ab:79:98:18:
35:e5:8f:5d:ed:6c:f9:f4:28:43:fb:70:f6:42:74:
dc:dc:73:43:09:98:80:8f:a9:d0:1a:62:d8:ce:a0:
57:0d:a6:87:00:8a:d0:e0:11:8a:50:13:67:d3:e2:
57:7e:00:67:8c:bb:9c:f0:41:7f:ff:45:32:43:43:
30:bb:b0:72:8a:f5:03:57:85:6d:64:1e:98:b1:13:
a9:f1:73:5c:bc:c6:a0:2a:8f:2f:6a:9f:10:60:92:
07:98:de:1e:3f:f9:10:76:8c:b6:80:05:fc:2b:b2:
8b:ce:9c:2f:c5:b2:4c:06:6d:2d:3a:51:c2:61:9e:
6b:55:c8:e0:65:65:92:63:fa:25:48:01:43:fc:ff:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:89:EC:03:6C:F5:71:A3:59:BA:56:56:EF:57:F9:75:7D:8E:41
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:02:2a:39:59:d2:bc:f6:b8:8c:c2:88:f2:20:3d:90:f0:3e:
15:81:e8:73:ee:23:21:fb:90:da:c5:d6:ea:a6:a2:c4:82:ca:
05:e1:6b:bc:25:52:e6:22:b3:6e:fc:7d:13:13:4c:ce:34:4d:
dc:1d:8b:52:d7:be:55:36:be:fb:07:7e:a7:87:c6:7c:27:49:
01:26:79:7d:0a:48:3c:fb:34:eb:cc:00:83:bc:72:23:6e:67:
69:30:d6:89:8a:c6:e0:70:c3:2b:76:a6:68:48:fd:8e:0f:79:
78:6c:5a:33:ff:4f:d4:57:a2:fe:a6:85:9d:ff:cd:79:bf:8f:
b6:9c:5c:62:16:ac:0b:bf:00:2d:50:a2:13:02:8d:c1:c9:bf:
0f:d6:30:14:12:98:e2:c1:73:37:86:2c:84:8e:be:0b:0f:ab:
92:77:e2:c7:87:b1:a6:0d:86:6e:3c:40:ee:e7:4c:a9:30:d2:
a5:e0:e3:17:3b:86:5f:a7:5e:d3:0f:54:c9:98:39:55:84:05:
da:47:81:2d:0c:83:9e:2e:1e:22:15:c5:d5:71:d6:20:d2:e3:
b6:db:20:36:ff:40:ac:e1:2a:c9:b3:f8:f0:21:c1:9d:69:93:
4f:8e:b1:c0:35:1f:a6:64:31:1f:97:6b:fb:73:b4:db:78:c4:
6d:2d:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:07:12 2026 by rpki-client