Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: YW9ib0Xr5ZaEvQ57UFHZQPGyq+FfS1+iPbo5V5dPat4=
Subject key identifier: FA:46:6C:42:7A:B1:B6:08:29:50:3D:8E:94:42:AE:74:E1:41:09:95
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019EBF5AC248C2E6EE481B8879B57B53A43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 05:00:56 +0000
Manifest this update: Sat 13 Jun 2026 05:00:56 +0000
Manifest next update: Sun 14 Jun 2026 05:00:56 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: 0fKL7NjNsev8A1G0kE1FE4fJdt7rR9KckkPr//9h1hs=)
2: OnKBtwyvSQXenD2TFYRv7-EZThE.asa (hash: BYl5J46d6e9LW3J6fkLa75ROxvNZoL/fmWrmEBx/+H8=)
3: eQagxd9y-zyf15AwiGOUqcIDYX8.roa (hash: 4Aq8ZIMpmBNLem9RkyeMnEc3h/5SZq5EDRDofy2Q8qw=)
4: t-vXa-FgBTExEw8Y2W6I04Ekx28.roa (hash: 1+raPg9CaPP7aRjV7XG3ZL5fmpSDQMaNl0GRs/xqZ3k=)
5: upnWlRa5n55UGIS-uedbjFxnuTc.asa (hash: VoYN03JzVjSDUqUBzQyjBuxdD0CesiCZ5FDXvsUuaMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:c2:48:c2:e6:ee:48:1b:88:79:b5:7b:53:a4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Jun 13 05:00:56 2026 GMT
Not After : Jun 14 05:00:56 2026 GMT
Subject: CN=fa466c427ab1b60829503d8e9442ae74e1410995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:90:95:a1:cc:6c:c0:6b:21:e7:a4:ed:c9:
e7:76:5c:22:8f:70:e8:21:89:54:13:08:8a:d6:4f:
db:b3:81:d8:f3:48:83:0d:c1:a1:fb:4a:a2:e6:47:
d3:70:de:86:88:cb:e4:a1:94:e2:7e:c7:45:57:e8:
0a:48:a1:fc:9c:85:40:b2:7b:85:88:45:15:15:8e:
f6:61:1f:b6:ed:38:00:d5:05:ee:2d:4f:36:1c:14:
80:04:d1:77:e2:9c:0b:3e:99:ac:7e:79:48:f2:c5:
ad:34:97:ec:78:50:93:9e:57:98:74:6a:84:c1:16:
54:5b:a1:7f:69:f5:26:c6:51:97:27:2f:04:9c:63:
d1:0c:d8:99:a0:cf:3a:de:75:f6:58:86:e3:da:10:
c7:57:57:b2:2e:6a:f8:69:71:d6:d5:61:88:15:f1:
9c:d3:8e:f3:60:ee:df:18:6c:05:b0:3d:a2:cd:ed:
bf:61:44:96:3f:7f:e7:6f:b0:ec:1b:b4:d1:41:43:
c2:23:43:41:5d:ae:07:56:03:d0:1d:45:0f:00:f9:
57:a1:8c:47:91:18:95:4a:53:23:9b:af:ee:ab:46:
8c:5c:8d:af:95:40:7e:17:d0:7b:7d:f4:d9:01:91:
db:61:70:71:40:aa:52:34:c8:09:af:ff:41:30:c6:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:6C:42:7A:B1:B6:08:29:50:3D:8E:94:42:AE:74:E1:41:09:95
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fa:f3:d8:12:28:95:71:bb:fc:a5:cb:3d:fc:da:1f:b0:e8:
37:48:c7:d0:45:51:40:37:d3:39:a0:5b:b5:ca:70:5d:e5:e5:
ce:8b:8a:b5:40:47:60:7d:3f:63:18:9b:73:89:b2:be:55:06:
08:9c:31:67:d7:69:09:5a:2c:c3:cc:a3:df:01:50:ae:8f:8d:
96:3b:a7:81:4e:09:31:15:07:a1:b8:9d:54:ad:61:10:fd:51:
55:43:ae:d3:b2:d8:8a:dd:9c:96:4d:f8:a6:2f:17:00:ab:ba:
3f:99:20:fb:99:81:1c:0a:64:68:f5:98:fe:9d:dc:dd:dd:b9:
c7:78:1f:56:4a:0d:64:6d:10:23:1a:e1:59:19:e4:fa:69:e7:
cf:54:1e:ca:6b:7d:d7:73:27:16:38:d9:48:b3:9e:71:01:c3:
a0:5c:6a:a1:bb:fb:92:94:e7:ef:f1:c5:fd:96:bd:a3:3a:e1:
6f:a5:e7:6e:3e:1e:12:30:e6:49:b9:ff:0d:37:75:4c:ff:c0:
72:71:b0:c0:c9:99:37:23:38:3e:cf:98:b7:69:b3:d2:5c:b9:
56:f7:27:05:aa:2e:ef:2f:63:ec:d0:f0:01:3a:ef:7c:3c:ac:
a3:34:59:6f:b8:7a:64:4d:0b:5a:c5:66:4d:83:ce:be:0b:db:
d9:52:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:57 2026 by rpki-client