Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: Mdoh6Zc8aho3C0fM+0w0qe1GMwIWKc5m84iEVxPnBPM=
Subject key identifier: 00:8A:61:8A:C1:28:39:4C:59:16:B9:69:E1:34:CF:C3:8D:22:6A:48
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019EC3A4C2A2D7660B9E99510133B4033497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 01:00:15 +0000
Manifest this update: Sun 14 Jun 2026 01:00:15 +0000
Manifest next update: Mon 15 Jun 2026 01:00:15 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: 7sEm25wffKt8nm8PgzmSIfr/ATS43gVzE/JOpuQa0kQ=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:c2:a2:d7:66:0b:9e:99:51:01:33:b4:03:34:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jun 14 01:00:15 2026 GMT
Not After : Jun 15 01:00:15 2026 GMT
Subject: CN=008a618ac128394c5916b969e134cfc38d226a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:32:4a:40:66:ed:c4:fc:f2:d3:a2:eb:13:
79:86:d9:8c:be:64:ee:21:19:77:e5:28:a4:49:7a:
ae:26:af:7e:8f:a7:b6:2f:e7:d7:4c:c6:40:3c:80:
38:0b:ac:68:3e:4b:19:7e:b9:b2:8f:42:8f:dd:bb:
ae:fa:33:47:6c:fa:57:fe:d1:3c:07:3e:c0:46:35:
a4:5d:7b:7c:5b:0d:be:f8:82:e2:55:3a:d3:27:43:
d9:ff:9d:50:f4:eb:85:c8:91:af:b5:2b:1b:fe:8e:
64:54:0b:21:71:db:30:82:78:c7:a4:39:dc:0b:0e:
77:0b:9d:52:bd:3d:d9:38:35:54:48:e8:0a:52:64:
04:e8:6c:10:11:f7:7b:6e:0d:d9:48:c4:80:cd:a1:
3e:19:94:a0:fe:0b:23:24:cb:83:9b:88:8d:55:2d:
a2:6d:44:3f:9c:8b:01:28:01:b5:88:a0:cb:c9:f6:
05:23:b9:61:6f:dd:b2:c6:8d:d9:b0:8d:be:84:4c:
c8:fb:4d:84:64:6c:10:93:f0:f1:47:20:ad:03:47:
ac:5a:7c:b3:4c:a3:4e:5d:34:f6:2b:26:a8:37:4e:
d9:c1:db:33:23:2a:bb:80:6f:a1:52:7d:5b:91:9b:
bc:af:d8:8f:48:f1:bf:1c:34:04:c2:18:e9:c2:f0:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:61:8A:C1:28:39:4C:59:16:B9:69:E1:34:CF:C3:8D:22:6A:48
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4e:53:3a:a2:63:36:fa:9b:43:3a:b6:f2:96:22:a5:16:89:
74:ef:6b:ab:8c:1e:6d:a3:b5:57:be:67:13:f3:b0:bd:bb:24:
13:6d:1a:33:63:2e:c5:01:de:c1:89:19:1b:e9:cd:56:38:d1:
f9:40:03:0c:99:37:65:60:2b:54:21:ce:37:6e:93:a6:d7:09:
28:d1:c1:a3:88:ca:10:e0:46:6f:46:48:83:50:12:3f:25:d2:
92:45:df:a1:84:b4:8e:29:86:88:b3:17:94:f9:70:00:04:48:
50:e9:2b:e9:ba:84:c8:9e:9d:b1:db:7c:ac:7d:ed:21:54:b5:
4e:cd:db:dd:64:ce:55:a7:73:1e:e5:25:c9:a5:8b:15:08:73:
9e:75:bd:13:ac:7c:fd:a9:b4:f9:5f:44:30:9c:0b:ef:d2:83:
72:f7:c1:33:39:3f:4d:aa:e7:84:08:c6:a8:05:5c:19:8e:38:
1f:0d:38:df:7f:f5:a2:e7:3b:63:ab:b3:1d:34:c0:c5:9d:3f:
af:dd:41:36:44:8d:cc:80:4b:8b:7b:cd:af:8d:6b:84:19:d3:
58:63:37:da:cb:0f:45:9e:40:10:1f:8b:d5:85:7f:63:59:5c:
6d:49:1c:d1:a6:16:26:42:34:58:1a:bf:cf:a1:4b:f9:6a:98:
8e:dc:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:35 2026 by rpki-client