Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: V1QTdUiU3yhrt4b3r4gPkNBtcsuOgbcR+2E0ncBcIsA=
Subject key identifier: 2B:E2:CE:23:51:FD:5C:9A:A4:D3:9C:CA:75:9E:77:22:27:1C:A2:39
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019ED318DB5466684EC2DB5CDE24F207D225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1550
Signing time: Wed 17 Jun 2026 01:01:21 +0000
Manifest this update: Wed 17 Jun 2026 01:01:21 +0000
Manifest next update: Thu 18 Jun 2026 01:01:21 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: zRGoChbUYcsscSST4crg8084UCsor1fBz25GrYecEYI=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:db:54:66:68:4e:c2:db:5c:de:24:f2:07:d2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jun 17 01:01:21 2026 GMT
Not After : Jun 18 01:01:21 2026 GMT
Subject: CN=2be2ce2351fd5c9aa4d39cca759e7722271ca239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:f1:5d:f8:68:ff:cc:3b:00:55:ef:8e:a6:
2c:3c:e0:6e:81:24:bd:9c:c0:00:c7:83:41:d2:0f:
7f:0c:a1:fa:dc:8a:57:24:d2:35:15:73:0d:fb:52:
1e:87:5d:48:9d:1a:97:0d:79:fa:44:49:9d:25:05:
f3:62:1a:fb:e9:86:12:e6:54:07:58:bf:a6:45:1f:
77:1d:ec:7f:b9:38:32:b3:d3:46:50:76:c8:ad:85:
b6:fd:48:5b:28:ea:f7:87:57:33:6c:b1:80:7f:e4:
05:3b:3d:e4:2c:f4:d2:51:f0:32:e6:a5:2b:29:18:
04:20:58:37:bc:cf:b6:d7:9d:ee:3f:b7:af:d2:51:
33:e6:8d:e5:73:9a:96:7c:91:ef:e8:07:5a:ad:36:
3f:ec:a8:f1:e1:5e:04:4c:25:81:8c:8d:ad:21:6b:
d5:67:4c:a4:33:f4:43:fa:50:17:e9:96:4d:df:c3:
cb:8b:0d:84:f6:75:0e:7a:bb:b6:35:60:d9:de:01:
f9:a3:bb:a8:74:6c:c9:f6:80:5e:dd:71:fc:3d:8e:
c2:67:c9:e6:18:aa:ad:84:e1:df:8f:c5:21:ad:23:
02:84:17:84:87:dd:5d:d8:93:ae:1a:a7:cc:7f:6d:
6b:03:bb:94:60:74:82:73:f2:2a:92:16:7b:cd:39:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E2:CE:23:51:FD:5C:9A:A4:D3:9C:CA:75:9E:77:22:27:1C:A2:39
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:93:24:7f:55:9a:b3:14:7c:0a:9a:5c:be:5c:c3:5a:ca:
6a:c0:48:77:4b:66:d2:89:c6:75:25:c2:05:c1:05:ff:43:3b:
79:e6:ea:78:2d:fa:87:3d:91:bf:c3:9e:38:fa:7e:7f:4b:d2:
da:4c:da:a7:15:a1:f4:ab:b9:63:a1:80:9f:40:79:02:bf:04:
1c:ac:4c:95:d1:ac:30:fa:98:b9:c2:12:d8:15:0e:de:74:75:
85:4e:22:1f:f3:0d:cc:8f:19:93:7b:3f:f3:50:58:82:3d:7e:
73:3b:fb:64:71:b2:f2:40:d8:31:a2:33:d0:11:81:56:a9:18:
d6:29:1e:e1:02:ca:80:7b:3f:f1:9c:f6:5f:0f:06:24:2f:10:
12:b2:85:43:8d:fa:7b:85:b7:1b:a6:c5:62:ab:62:97:09:37:
cf:75:21:da:c7:dd:9d:6e:53:7d:16:83:da:bd:21:ec:8f:28:
58:64:7c:4d:14:dc:a2:dd:c7:98:09:87:0d:b9:9e:a2:22:2b:
04:96:66:bd:d5:87:9a:8e:39:75:14:de:df:81:53:5a:ea:06:
36:aa:6e:b5:f7:c1:90:67:69:0a:7c:75:fb:52:d7:78:87:20:
45:0b:e3:90:af:a2:67:c1:6f:17:11:de:ac:9e:d0:40:a5:d9:
dc:18:5b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:58:01 2026 by rpki-client