Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: EgZ/58x6DgoexgnsEuXS5djx3Q6HAT5LpKvshPsToJ8=
Subject key identifier: 67:AD:D7:4A:5E:95:BD:BB:E1:32:68:7B:90:27:D1:F5:C8:E8:A1:A2
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 019FA93DAB84E11A127B3FEEF7C15F56C37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 16F2
Signing time: Tue 28 Jul 2026 15:00:18 +0000
Manifest this update: Tue 28 Jul 2026 15:00:18 +0000
Manifest next update: Wed 29 Jul 2026 15:00:18 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: VOQuLWT1SsMOAqL2DTHXPJ8L7x6YunYzTzohnpgXu3Y=)
2: gJIL-yyLSZQ86WF72F2-y7lREqA.asa (hash: 1TPh56ssE+BAjyg4JEIEBgYU8LSU5sYtrun0tWfhLP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ab:84:e1:1a:12:7b:3f:ee:f7:c1:5f:56:c3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Jul 28 15:00:18 2026 GMT
Not After : Jul 29 15:00:18 2026 GMT
Subject: CN=67add74a5e95bdbbe132687b9027d1f5c8e8a1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:91:a0:38:dd:8f:18:14:9a:a6:97:a6:c0:
ba:c6:7a:22:58:43:f2:02:f8:64:fe:94:74:e8:d5:
4d:64:ae:91:ee:d3:0e:42:52:fa:90:0f:92:36:07:
ec:67:64:84:89:f5:16:d6:bb:70:68:6e:2e:c3:fb:
fe:f8:87:47:17:b5:e1:12:93:f4:1f:5b:1b:6a:0a:
10:df:79:2d:12:bd:8e:66:98:ed:6d:ae:6e:64:8a:
4c:ba:3e:66:8e:11:77:6a:e2:fd:bd:a6:9f:66:3b:
a1:c8:09:0d:e1:dc:ae:50:1a:b5:d2:c5:f7:fd:86:
1b:9e:1e:e8:d2:a4:c4:2c:6d:94:db:9d:7f:22:5e:
bc:e6:73:f7:b6:48:fb:a7:c4:35:1d:e2:57:74:ef:
04:71:bc:15:7a:f3:0a:ba:ab:a0:f7:5c:f0:a3:95:
48:8d:48:51:df:bf:ce:f5:8d:9b:3d:f5:f3:49:ed:
2b:9a:99:38:23:56:5e:bf:57:c3:88:a4:55:8f:46:
4d:95:18:f1:cf:82:04:f3:12:80:7e:d3:dd:63:3d:
61:5f:f7:59:d1:2b:0b:7e:11:2e:05:7c:06:80:c4:
38:24:4d:d8:3e:f5:a8:93:a5:a8:fd:eb:3c:dd:88:
ba:a7:20:10:b5:31:a1:75:f2:7b:d1:6f:07:eb:30:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:D7:4A:5E:95:BD:BB:E1:32:68:7B:90:27:D1:F5:C8:E8:A1:A2
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cd:a2:40:ba:10:60:fd:ca:d8:0c:d9:99:f5:5a:3a:b4:eb:
c5:46:87:e4:da:52:10:a3:f0:08:ab:5a:78:1a:ca:54:28:02:
d3:19:1c:a3:b7:4e:98:a3:bf:80:1f:21:4f:2c:d1:a4:6c:bc:
3e:e2:c6:f4:a7:1a:b3:c6:f4:3c:87:54:2b:6b:e7:8c:ff:db:
38:ea:d9:86:45:a3:81:0a:84:de:09:70:0e:80:0a:98:a4:fe:
30:4f:4b:41:66:b3:1e:19:9c:7b:81:5c:b0:52:a6:42:30:d0:
5f:a7:6f:f3:92:b2:5a:bc:82:2d:b1:af:95:89:5e:1c:90:35:
74:50:5d:9f:d1:29:9a:e7:2b:3d:08:e7:ca:2c:a1:1b:9e:98:
58:2e:34:64:b4:2c:1d:a5:f4:f9:25:e6:89:2c:e4:83:46:ff:
02:cc:62:3e:e9:a1:ef:5a:04:5c:3e:68:08:21:1c:88:d0:8e:
fd:a9:46:79:aa:66:3e:24:46:00:c3:3d:b2:82:67:7d:c1:0e:
c2:51:91:a0:32:8f:53:40:d4:97:49:f9:c7:d2:d7:9c:84:6a:
f5:e7:80:cc:08:46:85:b2:56:2e:c3:d0:e1:bd:52:b6:e5:a5:
06:db:1f:ae:e5:1b:09:55:74:e5:8d:a4:b6:b3:60:1b:68:7b:
08:80:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:39 2026 by rpki-client