Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
File: I6ejqG_MgpkfsH6OSL1SPi54Msk.mft (raw, json)
Hash identifier: N1VgOddOL+37O5SUpGUHnLk0YaElw2pGMf3YEW30pl8=
Subject key identifier: 2F:37:08:CA:DA:A5:44:D1:3B:5B:A0:B5:A8:49:31:84:32:B5:B3:27
Authority key identifier: 23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
Certificate issuer: /CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Certificate serial: 019EBF914B7B88AC5C898D2706A8BDD7A0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
Manifest number: 1D
Signing time: Sat 13 Jun 2026 06:00:30 +0000
Manifest this update: Sat 13 Jun 2026 06:00:30 +0000
Manifest next update: Sun 14 Jun 2026 06:00:30 +0000
Files and hashes: 1: I6ejqG_MgpkfsH6OSL1SPi54Msk.crl (hash: H3cE4DI7ZK2dOBHAUi2bjrrKLrl5bKjJcg5SanUFzn0=)
2: K_Rx1HTsMsKx4XSEFCWNMtmQzPo.roa (hash: 7n2J+fuoN6/SEGxvIM5HDvCu6NPZKIF/c2FabCDSRV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:4b:7b:88:ac:5c:89:8d:27:06:a8:bd:d7:a0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Validity
Not Before: Jun 13 06:00:30 2026 GMT
Not After : Jun 14 06:00:30 2026 GMT
Subject: CN=2f3708cadaa544d13b5ba0b5a849318432b5b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:57:17:cd:24:3a:5e:2a:8c:97:cc:5c:26:
d4:ce:b8:3e:63:c3:0d:d4:fd:2a:2e:89:50:7a:e1:
40:f3:9d:f4:16:c8:f8:74:37:ed:84:60:3e:4c:25:
84:68:ce:6b:c6:d1:44:50:bd:6d:cf:aa:23:61:27:
09:f4:33:4d:2c:67:46:02:2f:c2:88:4a:06:99:cb:
a3:b2:11:eb:b0:bc:7d:35:ac:1c:44:75:b2:8d:b7:
7d:c4:bd:66:67:42:71:9c:37:4e:0e:e2:34:c3:dd:
59:19:b0:69:e0:fb:26:46:9f:8e:fa:97:23:a2:37:
be:bb:f9:dd:ae:55:1b:15:1c:c4:66:04:ad:16:6b:
75:90:c6:35:d8:10:66:fb:9c:4f:b9:e1:8c:eb:7a:
a9:5f:a1:9a:58:df:4d:67:88:4f:34:89:0a:fd:ee:
57:1d:7e:33:2c:5e:ea:f0:f1:ac:8f:02:77:04:1b:
17:71:fc:d3:25:82:db:03:a7:95:96:b2:c6:27:a4:
8a:5a:15:c4:f3:ca:c2:a0:24:17:fb:d3:2d:26:26:
36:ab:a4:06:a8:e8:19:5a:48:ea:c0:e3:4d:8e:80:
7f:53:52:32:f6:4a:5f:f8:74:32:aa:b6:57:b9:65:
05:a1:00:4c:53:8a:c7:e3:88:e5:02:31:fe:d9:13:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:08:CA:DA:A5:44:D1:3B:5B:A0:B5:A8:49:31:84:32:B5:B3:27
X509v3 Authority Key Identifier:
keyid:23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:20:f1:fe:9d:34:8a:1e:01:90:29:0a:15:66:dd:0b:52:
b3:f7:8c:f0:e6:39:01:af:60:06:4b:2d:e2:39:d9:cd:a8:91:
eb:2a:ed:ca:e5:0b:0f:d3:63:98:a4:c6:ec:4f:44:3c:62:2d:
05:a3:e9:9e:3c:d8:31:2e:a7:53:5d:0a:82:d1:42:bb:76:cb:
a8:e7:da:f6:74:4c:49:46:8a:87:89:1a:78:3f:23:ba:f1:3d:
51:b4:76:c8:27:4c:39:cc:c9:08:f4:39:15:a6:85:87:9e:3a:
cf:d2:bd:92:9c:e4:cf:ed:1f:8a:92:7c:91:df:79:a1:c3:09:
14:7b:5a:ad:35:ca:77:f0:c8:dd:f0:42:07:66:1d:5e:36:d1:
d3:49:72:c3:23:b3:3c:bc:18:55:4c:cf:86:46:91:2b:33:db:
c7:50:9a:9a:43:3a:50:da:4c:a6:ed:ca:a7:e3:cc:5b:ad:5c:
6b:c2:b9:8c:93:5e:57:34:31:e2:c8:61:27:ad:86:37:89:81:
e5:82:61:9c:d7:c6:35:23:b8:21:a5:d7:c0:db:41:cd:12:92:
ca:83:4f:95:96:63:a1:91:8a:41:ec:85:54:6e:2a:3f:cc:7a:
d9:68:89:bf:54:d9:02:df:0e:82:c3:de:99:e9:97:33:ae:91:
3a:dc:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:48 2026 by rpki-client