Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: HLtlDFLs25PdC3qMF3gWI5AmQWow+2zmTiZi0IFcM/c=
Subject key identifier: 85:F9:B9:39:3F:9C:A8:12:FA:B3:58:58:6E:74:87:E8:6E:E0:FB:1E
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 019EC337597548988653D8C735104F69FE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 10FB
Signing time: Sat 13 Jun 2026 23:00:44 +0000
Manifest this update: Sat 13 Jun 2026 23:00:44 +0000
Manifest next update: Sun 14 Jun 2026 23:00:44 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: mFnxstiWwWlRPpOpZd89yY8M22zpZp3E4q7udVjSvEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:59:75:48:98:86:53:d8:c7:35:10:4f:69:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Jun 13 23:00:44 2026 GMT
Not After : Jun 14 23:00:44 2026 GMT
Subject: CN=85f9b9393f9ca812fab358586e7487e86ee0fb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:e5:99:8b:09:f3:af:b0:01:33:07:38:32:
e0:23:4f:69:d3:50:3e:e6:32:70:d8:a9:69:c0:1b:
31:2b:21:7f:ea:57:35:2e:37:20:2c:ff:4b:31:bc:
48:56:90:87:8b:5d:6d:89:2e:ec:7a:45:59:21:8d:
6d:b1:fe:44:23:d9:6a:0a:a5:bf:27:dd:e6:c2:a0:
7e:23:ae:a1:68:fe:ca:11:36:21:b0:90:de:db:ff:
d7:3b:6e:19:ab:a2:86:0b:25:6a:bf:55:b9:e9:64:
27:bf:9a:36:80:81:8a:a6:ef:e2:ef:dc:0e:fc:c6:
24:98:6b:69:06:2d:3d:b6:fc:9a:88:be:73:56:c7:
e5:59:c9:f2:18:a3:b2:fe:15:7c:84:38:5b:1e:d0:
91:b1:6d:b5:2f:9f:1c:e3:bd:aa:27:3f:74:25:02:
62:0f:19:e1:a2:1c:6d:f7:12:f0:ca:b0:22:ee:e2:
7c:1f:91:e8:a9:dc:1b:0b:3b:2c:25:7d:2d:4c:c3:
b2:f9:0f:dc:19:cd:a3:42:ec:28:23:db:86:04:d5:
f0:63:06:3d:6c:c3:f8:42:db:88:5a:05:23:c0:1c:
ac:c5:66:22:2e:90:f2:f5:a4:93:fa:cf:b0:8f:81:
c2:47:dd:e2:69:7f:e9:d6:ea:2a:2f:51:cb:61:0b:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F9:B9:39:3F:9C:A8:12:FA:B3:58:58:6E:74:87:E8:6E:E0:FB:1E
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b7:2d:f9:4f:0e:90:f5:57:1a:72:e7:58:83:02:d1:2f:e3:
1e:bb:73:79:79:af:7f:fb:a3:23:e8:66:52:23:f1:ad:1b:c1:
08:b2:35:71:45:77:7e:19:64:c9:a0:d3:46:44:96:74:85:97:
af:67:06:be:ae:fb:a9:ba:44:e7:07:e7:2f:54:f2:94:8a:6c:
fa:5d:fa:8d:5e:e4:06:58:51:fa:21:98:96:46:5e:8d:e4:4c:
c4:d5:e5:7e:fa:c7:70:73:73:ad:09:82:c0:9e:e1:f8:7d:76:
c6:a7:da:50:33:ff:03:b4:c3:21:d5:0d:71:b7:d0:8d:9d:be:
34:4d:f8:f0:9d:7e:7d:47:22:a7:60:1c:f9:47:11:eb:c8:70:
4e:03:96:6d:9d:99:c6:6a:15:b7:be:0d:8d:73:e4:d0:ca:d7:
0b:cc:19:44:ae:ee:99:2d:55:40:b5:17:08:86:02:ee:67:ed:
bc:98:07:23:4d:04:05:87:ac:59:a9:74:a1:4b:96:ba:74:27:
e7:f1:b4:69:15:f8:8d:f7:ff:a4:e7:d1:87:c5:52:88:67:e2:
c5:f9:32:98:38:65:ef:ad:38:f5:dd:48:35:92:55:bb:cc:a8:
e2:3f:7e:7a:a6:dd:32:9d:53:38:f9:12:3c:03:4f:cd:9d:c0:
13:a3:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:15 2026 by rpki-client