Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: 60dosXt+/3EbfCCl3pjbFYWZkj/WzHNxd79foaIH/1Y=
Subject key identifier: 14:CB:37:69:34:08:C6:77:00:63:60:22:19:5A:49:73:AC:CB:CF:7C
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 01A1AA4CAE5341851B1A1BD2027C3E64F02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 17E0
Signing time: Thu 05 Nov 2026 06:01:54 +0000
Manifest this update: Thu 05 Nov 2026 06:01:54 +0000
Manifest next update: Fri 06 Nov 2026 06:01:54 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: kEoEM2IzmSFIYwkhDa+lcO2EFWXYLpfF9iTSd7JIVqo=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4c:ae:53:41:85:1b:1a:1b:d2:02:7c:3e:64:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Nov 5 06:01:54 2026 GMT
Not After : Nov 6 06:01:54 2026 GMT
Subject: CN=14cb37693408c67700636022195a4973accbcf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:b7:e6:05:5d:14:d1:82:62:04:1e:32:b4:
d7:a0:9b:ae:12:78:45:32:ad:70:56:d6:ef:01:77:
f6:9c:e9:64:f5:0f:ef:4b:c9:05:54:be:27:10:d8:
cc:6e:75:c6:57:8c:f4:8a:80:f6:2b:ed:0c:4f:77:
a3:c7:fb:36:a5:9c:ab:7f:80:d2:08:56:83:5c:c3:
b7:1d:51:48:6b:18:d0:c4:c8:25:fe:93:46:89:b9:
3c:e2:5b:2f:66:77:c2:7a:95:3b:b2:61:03:d2:fa:
e5:a9:3c:cf:8d:d1:b4:9b:d8:11:5d:73:45:41:dd:
a9:9a:0b:ff:f7:6d:97:6b:91:ee:2a:28:9d:a9:ee:
ff:1e:2e:a3:84:9b:19:29:49:a7:87:cd:14:8f:6c:
07:52:4c:4e:41:52:39:a1:ab:e8:17:53:ec:1d:45:
76:e7:2c:55:67:25:60:81:b0:a8:22:73:1f:ad:aa:
b3:5c:ac:d2:88:ee:33:e5:d1:12:28:2d:b6:ab:bc:
a3:26:2f:95:30:c4:10:a1:04:cf:88:4b:28:93:70:
18:d9:9c:42:11:19:5d:80:70:49:4d:0c:fc:5d:86:
79:00:b9:77:af:45:3f:57:07:8f:7a:3b:ad:bb:23:
39:0f:b5:b1:aa:a2:47:e3:3f:0d:e6:b2:15:18:8a:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:37:69:34:08:C6:77:00:63:60:22:19:5A:49:73:AC:CB:CF:7C
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:54:0b:ec:01:73:4e:12:d9:f6:52:a6:f9:94:16:34:96:
fa:d0:1c:71:b3:e9:ad:ca:5d:81:d7:c5:17:47:e2:27:02:6e:
2b:3f:d9:c4:45:65:05:15:c3:6a:47:5d:84:a2:28:23:ec:62:
65:f2:e9:93:86:0e:06:98:1a:92:cb:34:87:97:48:d9:55:4e:
8f:0d:d6:3c:b8:ac:4b:ce:ac:b1:ed:48:d1:8f:08:ca:a5:bc:
00:fe:8e:31:1d:a3:ab:3f:2c:ed:7b:69:98:95:8d:19:d1:57:
4c:30:3d:fd:9f:4c:d6:62:44:97:75:d5:b0:6e:4b:b3:19:df:
43:36:f7:cb:de:0f:fa:1e:21:64:ac:f2:82:33:bc:0a:94:49:
44:9a:99:dd:cf:c0:d6:a2:55:7e:05:3b:ce:08:4d:25:4c:47:
65:6a:ab:9a:2c:b6:98:89:f3:97:1c:ab:49:65:a7:c8:6e:33:
81:ff:c5:e3:ca:ec:59:36:78:0f:75:a9:12:bf:21:ff:19:26:
81:67:23:2c:a1:1c:2d:fc:94:3b:a2:69:73:07:67:fe:83:87:
a1:f6:ea:d9:cd:ca:99:5f:b5:53:d1:31:4f:3a:fe:86:95:64:
02:be:9d:92:b2:cb:f0:79:7a:1d:25:b2:23:a5:b1:4a:92:2d:
2d:d8:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:48:10 2026 by rpki-client