Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
File: I6iatTI5OGO8sTkWPc9BWKV_G68.mft (raw, json)
Hash identifier: dX8RUd0tEDDB+68k6HviMt81y+giVWkBCcWug+HWwS4=
Subject key identifier: 76:DE:28:99:51:4B:3D:3B:16:2E:CC:38:5B:9C:C7:FE:EC:41:87:3E
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Certificate issuer: /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial: 019FAA195C78DDF46988344D4F7DF389AFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
Manifest number: 014E
Signing time: Tue 28 Jul 2026 19:00:16 +0000
Manifest this update: Tue 28 Jul 2026 19:00:16 +0000
Manifest next update: Wed 29 Jul 2026 19:00:16 +0000
Files and hashes: 1: I6iatTI5OGO8sTkWPc9BWKV_G68.crl (hash: Own3sNraBAvec8O8nqXVq0tQBH/ays/QSJFOE+sVKvg=)
2: _I5a0P8T4VJzebOuAIGr0Xf9lEc.asa (hash: 4TGEq37+do+qienVBiWKqzcP2qwax/q6NuHIkhYbhW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:5c:78:dd:f4:69:88:34:4d:4f:7d:f3:89:af:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
Validity
Not Before: Jul 28 19:00:16 2026 GMT
Not After : Jul 29 19:00:16 2026 GMT
Subject: CN=76de2899514b3d3b162ecc385b9cc7feec41873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:cd:ef:e0:c9:2b:cd:56:8f:3b:67:b1:27:
10:a0:3a:b7:06:96:8c:41:b6:0a:6c:3f:f9:a9:3d:
d1:2f:31:46:5d:73:76:c0:35:07:8f:22:4d:50:04:
07:bd:8f:d5:94:d5:1d:97:93:70:ec:c3:8f:43:36:
41:5c:95:1d:13:d8:9b:ef:42:2c:1e:a8:bd:cb:38:
55:a2:2e:a0:a5:6a:a8:0f:53:af:1c:31:da:78:35:
f7:2d:1d:c9:9b:bd:e9:66:38:14:72:5d:d4:17:8f:
10:ea:7f:10:0c:26:83:3e:7f:b5:b2:4a:b2:c7:a4:
ac:cf:71:41:ad:2d:bd:9a:30:3c:b3:5e:4d:12:64:
1d:d8:ab:58:04:e8:ca:9b:44:4c:c3:a6:b3:59:aa:
83:e8:00:0b:8e:c7:14:2a:fb:c3:60:4f:35:aa:88:
fb:a9:9c:72:8a:46:c2:ee:ed:38:56:e1:95:9e:13:
0c:62:d7:c7:7a:ef:74:53:d4:d8:e6:0e:66:1e:0f:
bb:8b:56:78:6f:77:3e:04:6a:5d:2e:e8:cd:77:fe:
7c:18:ff:0e:d5:07:00:75:3a:5f:44:14:7f:90:7d:
8e:b7:05:79:7c:7d:62:ce:f4:52:af:82:92:b1:f9:
0b:1a:47:8e:67:c8:bc:5f:91:4d:3a:76:14:32:16:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:28:99:51:4B:3D:3B:16:2E:CC:38:5B:9C:C7:FE:EC:41:87:3E
X509v3 Authority Key Identifier:
keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:37:9a:21:41:dd:27:00:08:5a:6b:1d:18:3d:0f:62:cf:37:
52:c0:e5:fb:bb:ca:61:b7:f2:a5:68:a9:2e:0f:7c:f8:5d:9d:
d3:ce:db:ab:d6:fa:e2:3d:70:bc:89:b7:f0:88:00:23:5f:c2:
b5:1c:d4:d6:65:13:ca:02:54:06:4f:93:83:2c:cc:13:e2:14:
f5:46:e6:55:d1:d5:f5:c4:8d:6e:94:72:56:77:f5:af:89:ee:
09:19:7a:60:d1:22:49:f8:a3:71:67:9f:8a:70:52:a6:d5:f1:
11:62:43:09:85:eb:51:6c:3a:4d:39:64:3c:36:10:3f:0e:f7:
aa:c4:92:06:19:bf:72:ec:30:80:75:c1:01:24:7e:00:d4:96:
c2:3d:d5:ad:94:3b:7e:a0:4d:6f:9a:98:09:34:0f:36:ed:fc:
2c:bd:62:b8:f4:a8:17:2b:bc:61:34:2a:4a:14:01:3b:93:6c:
11:06:60:56:11:2b:3b:3b:a5:36:67:d4:54:47:94:df:e3:e7:
ee:c0:7b:92:29:36:7a:66:68:6d:d5:7b:15:ae:ad:0f:42:b1:
b5:22:23:5a:cd:80:e0:ed:39:2d:d3:40:56:9c:f5:7e:86:2a:
fa:f6:ad:7d:45:95:43:02:5b:a9:57:05:54:d0:19:3b:0c:04:
98:94:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:01 2026 by rpki-client