Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
File: I6ejqG_MgpkfsH6OSL1SPi54Msk.mft (raw, json)
Hash identifier: DVryZ7EpyzZKOBGeYnQOBLEjCBlEPUpJTpKbudHsRUk=
Subject key identifier: 2A:E7:BF:C4:B5:E9:B3:7D:0C:81:3A:4B:8D:A1:AE:C5:19:03:73:83
Authority key identifier: 23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
Certificate issuer: /CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Certificate serial: 019FABD0F5A87D4B1C42C7563C7CE941E14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
Manifest number: 98
Signing time: Wed 29 Jul 2026 03:00:26 +0000
Manifest this update: Wed 29 Jul 2026 03:00:26 +0000
Manifest next update: Thu 30 Jul 2026 03:00:26 +0000
Files and hashes: 1: I6ejqG_MgpkfsH6OSL1SPi54Msk.crl (hash: IYefgaSeVfyAQYh+AJynxCGCZ+GsSeHw/GoO20gPVDI=)
2: nuL68rkN370bSNSecNKQgUJTlHo.roa (hash: kH4Pg8lfuIFAxarsDTHycaVnd29w3y5IeFqjSwCd934=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:f5:a8:7d:4b:1c:42:c7:56:3c:7c:e9:41:e1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7a3a86fcc82991fb07e8e48bd523e2e7832c9
Validity
Not Before: Jul 29 03:00:26 2026 GMT
Not After : Jul 30 03:00:26 2026 GMT
Subject: CN=2ae7bfc4b5e9b37d0c813a4b8da1aec519037383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:c3:fb:5e:5e:35:56:98:71:03:dc:ba:21:
06:0e:4b:57:3a:04:57:f5:12:c5:53:c9:da:05:6b:
fc:a5:75:53:46:ab:5c:0f:17:db:9e:1b:1f:ea:f0:
4a:31:9d:9c:a9:71:3d:5d:d0:a3:82:07:81:14:61:
74:cb:08:ab:7b:65:4a:d3:b2:a7:8e:de:00:39:a6:
14:1c:57:17:f8:38:85:73:24:2f:3a:0e:25:38:85:
4d:26:9c:55:ad:2f:04:b3:ed:bb:5a:81:6e:7d:9e:
2a:5f:fd:b2:6f:2a:d5:47:29:9e:10:24:e9:ca:e9:
16:55:89:c7:8c:3d:39:dd:50:32:95:4d:28:d3:6a:
24:a9:e5:38:e0:b3:e1:7a:09:fc:71:a4:5e:08:60:
65:84:b5:2f:9e:b6:0f:3d:a2:4b:71:84:26:40:c1:
63:ea:bc:8c:cf:04:00:ea:9e:0a:ba:5e:8e:29:c4:
e7:51:79:6a:47:ab:1a:19:23:8a:fa:45:3f:c2:98:
82:f5:b5:7e:dd:2c:c2:94:95:1e:d9:ee:60:8f:c3:
74:15:2e:22:ba:4d:2e:67:7d:b8:2f:ab:22:0a:a7:
02:cc:2a:b5:51:00:26:11:94:5a:e2:cd:0e:cb:76:
0b:99:e8:92:09:d9:76:98:7c:19:33:3b:87:78:02:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E7:BF:C4:B5:E9:B3:7D:0C:81:3A:4B:8D:A1:AE:C5:19:03:73:83
X509v3 Authority Key Identifier:
keyid:23:A7:A3:A8:6F:CC:82:99:1F:B0:7E:8E:48:BD:52:3E:2E:78:32:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ejqG_MgpkfsH6OSL1SPi54Msk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1d66a2-d3c9-4c29-8539-fee7206e1671/1/I6ejqG_MgpkfsH6OSL1SPi54Msk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:80:95:43:31:4d:a1:e8:8d:cc:67:e3:70:16:2e:eb:ec:3b:
1d:3b:e1:27:2f:57:07:e8:02:20:81:0c:ef:e2:f2:82:2a:ac:
45:7f:1f:f2:c7:30:33:63:03:d1:19:ee:38:bd:a9:21:59:f6:
0e:9b:c8:00:6a:2f:28:d6:2c:c2:83:7e:7f:ac:a5:9e:2d:e5:
80:28:16:54:bd:db:a7:fd:be:d2:5b:d6:c0:65:d1:88:1f:28:
3e:cb:49:df:bd:56:3b:89:77:58:11:7c:70:84:57:d5:98:20:
47:d9:92:d4:4e:c7:43:4f:ba:6b:ae:67:e2:78:2c:f3:d6:77:
77:ce:91:ca:ec:42:5c:b0:79:64:c7:64:ee:65:a1:91:6c:44:
f4:02:35:9c:d7:9e:d7:21:07:34:37:89:47:15:0e:19:b4:ea:
63:8f:ff:7f:fe:1c:c5:43:d5:53:2c:bc:b6:50:d7:52:dd:89:
e4:d6:e2:e2:1a:aa:70:9f:43:36:6f:d7:12:02:c9:46:83:4b:
37:fb:55:0c:13:58:db:14:fc:a8:ec:d9:c3:b2:5a:6f:02:73:
2c:88:63:7e:75:93:a4:62:e0:e8:31:7b:75:4e:9a:bd:8c:84:
ce:07:fb:3e:d5:d5:c6:c8:c3:ba:37:e7:7b:0a:db:bc:c6:e1:
35:d8:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:05 2026 by rpki-client