
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: EZbFPJRbnDRyyiXo3baXoBwtuOdKi4l44sgIx5Bi3Jo=
Subject key identifier: 61:BB:33:CB:A2:6B:52:6A:92:4D:9A:68:8F:7D:B7:5D:38:0A:AC:BA
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019EB80E81F6763043ACB4D8DEA63F3C8014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 16C7
Signing time: Thu 11 Jun 2026 19:00:18 +0000
Manifest this update: Thu 11 Jun 2026 19:00:18 +0000
Manifest next update: Fri 12 Jun 2026 19:00:18 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: H5jsRniQkgZ7WHt/5q2XCVIAE4Zs8EXnKVtz+eXAros=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:81:f6:76:30:43:ac:b4:d8:de:a6:3f:3c:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Jun 11 19:00:18 2026 GMT
Not After : Jun 12 19:00:18 2026 GMT
Subject: CN=61bb33cba26b526a924d9a688f7db75d380aacba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:3d:45:c5:02:e2:f8:11:62:46:96:01:75:
d3:48:80:35:f3:7f:0e:75:fe:73:c5:95:3a:dd:25:
fc:30:52:1f:c3:28:e5:8d:0d:3b:41:50:a9:e1:f5:
fb:e7:6b:10:b4:49:6a:90:00:b2:3b:c3:b0:56:16:
45:4a:e7:19:8b:98:a7:b0:29:b5:d1:b5:59:65:27:
54:97:53:9b:57:47:8f:f7:d1:16:d6:90:05:57:63:
2f:62:43:c0:0d:e1:5d:b6:ea:a3:78:d8:dc:e0:12:
83:76:8a:05:4e:a3:50:d7:aa:5f:b4:3f:0a:84:f1:
de:a6:ab:ff:b0:7f:c6:dc:67:bf:ea:2e:7a:ff:14:
b4:a3:40:8c:07:13:54:4f:43:b4:9d:63:47:9a:75:
e4:e1:a5:8f:c2:a9:24:ce:29:ef:63:d3:93:60:4a:
b8:2e:77:53:a7:be:43:96:55:39:81:d0:39:1b:8c:
f0:3b:83:5d:7c:36:2d:8b:9a:bc:f6:cd:4b:46:df:
d9:b6:b2:16:cf:5b:4e:9f:20:3b:23:fa:6e:a4:7d:
f7:d2:83:4e:c4:c3:a4:72:43:37:aa:7b:c8:28:63:
e3:04:44:db:26:98:94:90:49:bb:64:1e:16:eb:c0:
d7:49:34:dd:64:e4:d8:52:53:49:f4:ae:7b:a6:ee:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:33:CB:A2:6B:52:6A:92:4D:9A:68:8F:7D:B7:5D:38:0A:AC:BA
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7b:4a:10:0e:14:fa:ed:2d:8d:ba:9a:4e:7f:ac:a4:ee:a9:
65:54:41:f0:af:48:e8:ee:d4:06:b1:39:47:78:8d:e1:a3:56:
f4:e7:5a:8f:5f:9d:92:3b:b9:40:08:e2:27:da:18:3e:1f:f1:
b9:5d:56:9a:76:07:21:b5:fd:ea:bf:2a:fd:f5:68:61:99:29:
d1:9d:a4:a1:48:9a:d4:07:59:2b:3d:08:16:c2:62:6f:5c:45:
2c:6e:f6:83:cd:1f:78:40:e1:cd:9b:ee:25:8b:bd:b2:ad:a7:
12:7a:4c:ce:20:21:8a:4f:a6:71:57:e9:4c:12:f7:b5:47:d3:
fe:5e:0d:83:38:04:e0:15:4c:97:fd:2e:b0:9f:02:e6:67:a0:
20:06:3e:91:2e:d5:e4:a1:c3:6c:27:55:54:25:d2:1c:50:09:
0b:c1:e5:75:7d:d3:08:67:45:a4:b6:4e:f1:f9:2c:24:ea:d1:
23:ec:7f:9a:49:1b:29:b3:04:29:f2:2b:1b:8c:a3:cc:bf:53:
6a:9e:f3:e0:82:57:03:09:0d:04:58:58:b0:c7:de:10:67:cf:
b5:04:36:d7:7a:d1:2c:e9:47:59:43:1f:67:76:8a:06:ec:4e:
53:af:cc:43:f5:13:48:28:f7:6f:ec:43:ee:ac:39:b8:4f:04:
f0:2f:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:20:35 2026 by rpki-client