Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: fXZEmL2W9j6PGRVIQNchxUwCJu1hMCU0m0Seh3oaHwg=
Subject key identifier: 8E:05:7B:FD:27:FD:30:79:6B:53:09:C0:EB:C4:CF:44:CD:DD:3D:5B
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019EC036077238573B65C45A5CDBE9A5DE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 0308
Signing time: Sat 13 Jun 2026 09:00:26 +0000
Manifest this update: Sat 13 Jun 2026 09:00:26 +0000
Manifest next update: Sun 14 Jun 2026 09:00:26 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: bTfhleXeTUxOcf1qGQfAqSHX2UP8uQUspHWAZ3Q8g4k=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:07:72:38:57:3b:65:c4:5a:5c:db:e9:a5:de:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Jun 13 09:00:26 2026 GMT
Not After : Jun 14 09:00:26 2026 GMT
Subject: CN=8e057bfd27fd30796b5309c0ebc4cf44cddd3d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:f5:7a:a3:45:77:21:56:42:b2:4c:83:35:
22:c3:de:f4:55:3c:7c:7c:f6:bd:fe:75:01:08:e7:
19:7a:4f:e2:75:e6:b3:80:65:59:51:73:47:42:af:
e8:86:88:86:8d:3c:0a:1f:d7:86:83:44:99:eb:36:
df:59:81:4c:da:c1:3f:b3:b3:75:d9:79:d4:9f:a5:
82:06:b9:1e:3b:d8:fc:c2:34:80:30:51:70:cf:b5:
c2:67:08:6a:94:31:cd:29:56:fb:da:b5:24:b4:fc:
4d:ad:29:01:11:6d:11:8e:36:6a:7d:12:d2:be:04:
ef:49:bb:d6:a6:19:b1:d8:17:c8:be:49:81:67:d6:
5a:2c:48:cd:ee:86:b3:70:c9:1f:94:f6:7f:f3:f1:
cf:71:38:25:a3:4e:42:1e:77:cf:7c:2a:c3:97:e6:
38:b7:81:f4:ad:8d:b4:36:a0:f2:c2:6b:f3:e9:a9:
be:56:23:b7:84:1a:cf:6e:b9:e0:df:b1:7f:07:35:
e4:0f:39:ac:03:a7:43:4c:23:13:c5:3e:e2:aa:18:
f6:1c:27:87:1f:43:e4:06:e5:54:ec:9e:41:74:4b:
2c:34:16:e6:b2:3a:dd:df:64:fe:74:a0:23:ce:81:
0e:87:cb:54:1b:65:bb:8a:a4:77:c6:fa:83:f9:09:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:7B:FD:27:FD:30:79:6B:53:09:C0:EB:C4:CF:44:CD:DD:3D:5B
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9f:ea:ad:0e:14:b2:df:c2:0e:8c:f8:74:6f:7c:dd:8d:fc:
dc:8d:39:d7:ad:a4:df:e3:ed:74:e3:6c:f1:c9:15:9c:da:d8:
48:f8:1a:b4:3f:e2:53:ba:91:d7:37:44:9b:2d:fe:48:69:94:
47:37:8e:9c:03:a8:14:ab:ee:9b:77:16:0f:dc:12:69:0e:60:
92:fc:5b:aa:58:5d:c0:8b:d5:09:04:c5:35:fa:8b:ac:00:ce:
a5:0e:2f:a0:40:6e:26:1e:a4:e6:d7:68:15:b0:96:f7:7c:dd:
86:26:85:50:f8:44:88:a3:49:65:80:10:07:73:62:40:33:ae:
ff:ca:36:a9:68:ca:45:09:6d:3b:20:85:a6:d7:b7:df:8c:91:
84:80:50:75:47:e8:4c:78:4b:bb:cf:74:ec:75:65:36:27:cc:
e2:82:15:6d:9b:9e:71:5a:22:57:37:82:06:db:f9:63:b4:6c:
29:e8:6a:f1:95:d0:68:98:70:42:b6:ff:ad:bf:c5:22:b9:16:
96:73:3b:de:53:b4:06:94:c6:fb:5f:da:6a:88:43:1a:3d:ef:
ef:b9:af:5f:68:19:3e:bb:d0:00:43:7f:e3:f6:37:37:6b:24:
d6:3b:69:d7:0c:50:ba:53:c2:2c:31:00:50:44:fe:49:13:eb:
bc:bf:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:26:54 2026 by rpki-client