Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: q5RXDNFGaSf+BRoR6TMEEC8uwHWKxZfqoYigmKrWkXk=
Subject key identifier: CB:AE:B1:AA:B9:C6:28:A9:C6:B5:14:CD:31:07:3A:B5:10:DC:20:02
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019FAA87EB0A9F0EE188CC8FCC3A6C11CA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 16D7
Signing time: Tue 28 Jul 2026 21:01:01 +0000
Manifest this update: Tue 28 Jul 2026 21:01:01 +0000
Manifest next update: Wed 29 Jul 2026 21:01:01 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: RQk5t4bvGXFzcAEoKjZbb7gVXiuKd+r9Y+EtpT3UwIU=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:eb:0a:9f:0e:e1:88:cc:8f:cc:3a:6c:11:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Jul 28 21:01:01 2026 GMT
Not After : Jul 29 21:01:01 2026 GMT
Subject: CN=cbaeb1aab9c628a9c6b514cd31073ab510dc2002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:37:29:1e:5c:6f:c9:94:13:50:30:bb:36:0c:
86:6b:c8:62:39:01:fd:60:5e:97:33:83:d5:fa:c5:
5e:5f:40:43:45:12:04:67:42:63:15:92:e2:8e:bb:
53:67:ab:1a:85:a7:2d:55:94:b4:15:e8:02:1c:43:
00:bc:1d:15:11:10:f1:34:0d:df:d9:1e:46:ef:c7:
72:5c:d5:5f:59:ac:09:75:62:31:09:09:cb:30:16:
fc:86:10:39:41:a7:e3:14:be:98:01:af:c2:22:1d:
db:46:5c:27:cb:a4:f1:3e:85:5e:dc:a8:65:11:a1:
18:60:38:85:5e:56:0f:b6:4c:c6:ec:6e:b8:38:1c:
92:81:94:db:8c:9a:35:39:3b:bd:05:c0:c6:95:4c:
a3:d7:37:ef:57:2e:60:55:5e:36:8e:67:8c:a2:d6:
f9:88:15:24:33:4e:f2:4e:fa:61:50:3c:27:eb:46:
2b:ae:53:69:b0:4c:20:fc:83:95:98:8d:a4:a3:af:
18:bd:2b:ab:15:e1:25:48:b8:26:94:6c:98:0c:d6:
36:67:8e:23:b8:c7:63:19:78:60:46:62:44:fc:be:
94:28:d3:c9:8e:b7:a1:dd:fc:cd:a2:dd:a0:f3:1b:
ae:eb:af:f3:78:93:8d:ca:7c:07:6a:ac:02:60:39:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:B1:AA:B9:C6:28:A9:C6:B5:14:CD:31:07:3A:B5:10:DC:20:02
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:22:6a:37:09:70:b9:fa:b9:97:d3:3b:36:6a:f4:3b:3b:
25:39:e0:65:10:d0:6d:c9:49:e3:c7:f0:3b:e9:08:54:87:3a:
d0:88:6b:f4:8e:c2:17:e6:10:e7:de:e4:96:08:7b:be:fd:03:
ea:93:05:7e:e1:1e:8e:3d:a1:cf:06:52:5c:36:56:b1:d4:9c:
52:56:c6:97:62:4a:a7:5e:a3:54:9e:d7:12:aa:bb:05:2a:7e:
06:d7:ac:a1:5d:ff:f2:b4:0d:07:7f:99:7e:f2:0f:8e:29:ff:
47:aa:af:50:e2:6a:86:1d:dc:86:de:81:59:59:0b:7a:bd:ee:
ff:0f:ae:f4:ca:98:4c:0b:fd:2a:4c:46:de:3c:78:0b:3a:5f:
fd:30:15:3c:be:60:e6:63:01:69:d9:98:1f:5d:04:cc:ab:03:
33:54:cc:56:0a:b4:22:2c:44:1f:db:35:3c:cd:40:0d:e3:e8:
9c:fb:43:1b:0a:9a:a4:00:ce:03:b1:69:a9:a6:db:08:8d:89:
6f:db:28:f0:45:d1:26:41:2b:76:06:77:6c:95:b0:de:d0:18:
fe:7c:47:5c:68:58:4e:26:90:ce:ce:f2:b4:c8:6d:fc:ed:b0:
4a:bc:d5:37:d6:d9:97:98:35:d1:1a:36:1e:07:a4:13:fd:2a:
b2:d9:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:06:55 2026 by rpki-client