Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
File: I3_mTWhI-AEgq-aV4x-sScpdB_M.mft (raw, json)
Hash identifier: 5ZVfpP1pbHywomVnB9D3MjkNwxo+W/QNHv8FrEbyWmE=
Subject key identifier: EF:06:E2:9B:3C:9E:5D:3E:31:68:14:6A:5B:84:82:AA:07:F1:B4:4A
Authority key identifier: 23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
Certificate issuer: /CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Certificate serial: 019FAABE6EEC4BE93CF482A8F809F933F135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
Manifest number: 06D3
Signing time: Tue 28 Jul 2026 22:00:34 +0000
Manifest this update: Tue 28 Jul 2026 22:00:34 +0000
Manifest next update: Wed 29 Jul 2026 22:00:34 +0000
Files and hashes: 1: H8UNN8H7VPAPeU8HfY2pZ9baom8.roa (hash: aa3mwH6a5yy6jaHkG9FnSEuRMRDZi+0YDMCMC7O4/3M=)
2: I3_mTWhI-AEgq-aV4x-sScpdB_M.crl (hash: HtTcjTqyicWNdV+8T0AcQkncz5Lje286M2vW+0YpK7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:6e:ec:4b:e9:3c:f4:82:a8:f8:09:f9:33:f1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Validity
Not Before: Jul 28 22:00:34 2026 GMT
Not After : Jul 29 22:00:34 2026 GMT
Subject: CN=ef06e29b3c9e5d3e3168146a5b8482aa07f1b44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:33:36:c8:cd:07:6f:2b:07:e6:45:1d:94:
2b:ff:27:cb:79:1c:95:26:11:2f:33:02:43:bf:70:
c1:02:36:0c:48:f7:d9:df:c2:be:9c:1c:ff:30:7f:
0e:f3:b6:fe:04:a8:72:ea:f4:52:f1:2b:db:5e:82:
c1:13:f4:f2:90:e5:59:df:ce:bd:e1:ea:f3:39:1e:
4d:1c:b8:85:76:b0:d9:b2:4f:a5:8d:bf:9b:50:e6:
72:1f:91:72:a0:58:f5:1b:3a:d0:75:d4:23:b9:35:
ba:fd:e4:4c:79:5c:e9:ef:06:fd:c4:de:e9:a8:33:
d4:e3:db:be:ed:c7:0d:9f:be:b0:f0:2d:a6:0d:b8:
6c:b5:ca:80:44:b4:90:a8:44:56:18:6b:91:bd:dc:
d8:93:dc:a2:1b:f1:2b:04:1c:51:a4:b1:fc:a8:af:
bf:90:f5:99:6b:38:8d:b5:fd:50:10:fd:f4:46:15:
0e:54:5a:2f:97:2f:85:dd:4c:b9:2b:b4:fa:9d:04:
60:c8:6d:dc:0a:c7:2a:14:d8:36:30:5d:1c:3b:10:
b4:56:b4:e9:64:02:62:1c:38:5f:20:49:14:16:6d:
c3:b3:5c:91:24:36:28:d3:fb:11:29:d3:be:16:3d:
dc:e8:e5:fc:bc:13:be:d5:eb:4f:52:83:ba:e3:fa:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:06:E2:9B:3C:9E:5D:3E:31:68:14:6A:5B:84:82:AA:07:F1:B4:4A
X509v3 Authority Key Identifier:
keyid:23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:51:9a:66:e4:c5:12:14:db:63:d2:93:be:b5:ad:01:d5:e1:
45:87:55:6b:4e:40:d4:9a:68:16:af:ba:b9:cc:fd:f4:94:8c:
f9:0e:81:21:19:2d:b3:a9:d1:2f:65:9e:98:ad:f0:7f:9c:d1:
50:a8:ce:fe:94:7e:4a:c8:17:48:96:54:7f:b7:bc:8b:7d:5d:
0d:75:f4:d8:b4:75:28:02:b2:15:a6:fd:6c:98:4c:42:3d:b1:
48:8b:1c:4d:8f:0b:d4:64:66:4a:c1:6a:be:d3:c9:f3:18:48:
1a:1d:ba:b0:e4:c0:1a:9d:21:0f:48:0f:d8:52:78:e1:c3:b1:
b9:c9:27:38:a3:19:f1:73:62:63:65:e1:b8:82:90:c8:5a:b8:
4f:49:35:34:f5:4b:4b:34:c3:8d:fb:19:cc:08:58:a6:9d:75:
87:c0:aa:87:e5:be:56:79:37:0a:56:cd:66:5a:85:b3:8f:81:
0d:c4:f5:f3:10:43:8f:4e:45:ce:07:48:79:83:8f:fd:20:88:
08:45:a5:56:f5:f8:a3:2d:a9:11:30:93:87:53:63:6a:e9:a2:
27:4a:8a:97:54:c6:dc:e4:46:86:38:62:26:2d:8e:5c:ee:3c:
30:26:00:7f:0a:5d:ae:8a:33:af:c5:3a:aa:83:90:9b:67:8a:
1a:b7:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:19 2026 by rpki-client