Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: ofkS8zqFF7o/tK55M/0Kfq9wnIW033+dj7p9/7lrXaE=
Subject key identifier: AC:BF:77:7D:21:24:E5:C7:C3:76:67:5B:B7:21:1F:72:7D:F5:DE:EB
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 01A0BEB0CD7B587B81A27404847894068E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1766
Signing time: Sun 20 Sep 2026 12:00:52 +0000
Manifest this update: Sun 20 Sep 2026 12:00:52 +0000
Manifest next update: Mon 21 Sep 2026 12:00:52 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: sjp+rz/k1RTKcgGaGVGEvq94rQfV77ALhrKzYiRsoi0=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:cd:7b:58:7b:81:a2:74:04:84:78:94:06:8e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Sep 20 12:00:52 2026 GMT
Not After : Sep 21 12:00:52 2026 GMT
Subject: CN=acbf777d2124e5c7c376675bb7211f727df5deeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:75:b5:8e:14:fc:45:86:57:cb:63:d9:9a:
dd:5a:04:02:e2:52:3c:71:03:22:67:0d:55:36:fc:
c8:87:e7:28:9a:36:12:e9:15:c5:bc:04:b7:f9:1a:
74:bf:1f:52:4d:98:2e:19:f4:9e:fa:35:72:93:24:
22:22:71:00:58:7f:85:8e:e9:ee:1a:a2:38:d9:12:
98:75:f7:4f:b8:20:48:75:d0:c3:0c:b6:51:ff:24:
cb:e7:75:1f:21:20:59:55:bc:c1:0b:c1:74:46:d6:
c9:c5:07:c8:a7:44:ea:fa:57:d7:05:bf:d6:e4:46:
dd:f1:20:18:34:aa:14:7c:b1:6d:e0:f6:fd:ca:06:
4e:53:54:05:84:61:b0:43:6e:2e:0d:f5:7f:e2:ce:
ea:99:37:98:16:bd:4c:62:c9:68:f8:17:2a:99:ee:
a2:a8:98:31:c1:eb:5e:9c:3d:8c:50:c7:67:ca:25:
c6:b5:87:57:a0:e5:84:52:64:53:96:29:b9:c5:6d:
be:76:fc:1c:0b:7b:25:3f:5b:85:bf:a2:2c:7e:8f:
f0:6f:6b:24:5b:a2:d4:ff:3a:5d:24:6f:b6:ce:65:
b3:d3:24:a5:6e:b1:7d:63:7f:8b:66:6f:6e:a3:4d:
f7:de:74:2c:6d:68:12:a3:47:fd:99:44:c3:59:14:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:77:7D:21:24:E5:C7:C3:76:67:5B:B7:21:1F:72:7D:F5:DE:EB
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:82:dc:35:23:67:e3:35:56:61:f4:51:28:d1:22:b1:c7:14:
8e:af:7c:84:8d:50:eb:82:70:23:60:b9:56:e0:ce:42:78:a1:
67:2d:fb:32:9a:99:6a:99:f9:8c:1b:d7:12:44:ad:10:63:93:
ee:ef:b0:b8:7e:70:99:10:eb:b9:07:f9:57:9f:9d:1b:2d:b7:
54:ea:83:47:c6:b1:23:da:36:61:67:93:25:5a:71:d0:f8:d9:
76:ad:a7:28:87:5c:a2:2e:6c:fc:4d:95:db:72:1b:d9:29:89:
27:9a:48:26:c1:5f:d5:ee:a0:e8:6f:a1:42:0e:3a:04:73:cf:
5e:42:6a:b3:b8:b0:7d:2a:ac:92:87:13:15:1f:d4:aa:05:7a:
3c:37:b7:09:a2:c1:01:3e:66:47:07:1c:54:e9:62:a2:ed:b8:
70:44:4a:94:1e:3c:21:f0:3c:d0:5c:f2:1e:24:1e:92:c5:42:
8b:26:3f:42:5b:e8:38:55:77:31:ac:4a:3e:d8:22:3e:cc:38:
51:ce:8f:34:6e:79:80:f7:d0:cc:ed:12:22:75:8d:8e:38:1b:
09:d2:ec:b3:14:36:1c:87:6a:f4:6a:ff:05:88:1b:34:8b:82:
cf:67:9e:14:2e:ca:1f:d7:40:49:84:0a:84:d5:5b:41:90:37:
53:19:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:10:36 2026 by rpki-client