Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
File: I6iatTI5OGO8sTkWPc9BWKV_G68.mft (raw, json)
Hash identifier: gNYyRX8uChrR1hF1E4i11qmtLX5ZiIjz4POKUtW8aqY=
Subject key identifier: 26:CB:B0:33:D0:25:C3:DC:BB:44:95:C2:11:49:88:8A:4C:C1:DB:EC
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Certificate issuer: /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial: 019EBDA33B92A47D5840E0C29F0FA9B25791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
Manifest number: D2
Signing time: Fri 12 Jun 2026 21:00:51 +0000
Manifest this update: Fri 12 Jun 2026 21:00:51 +0000
Manifest next update: Sat 13 Jun 2026 21:00:51 +0000
Files and hashes: 1: I6iatTI5OGO8sTkWPc9BWKV_G68.crl (hash: NBMa6n/uLyj8L7WLBcNFZZGKHXdNDqt90lQ1MtxCPrA=)
2: TeBvR9keyGWF1HddOFbKAa_omvQ.asa (hash: CT9r+WMtWcO8eC0u8ppmte+isZN/hlSgsMu3YMgGTWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:3b:92:a4:7d:58:40:e0:c2:9f:0f:a9:b2:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
Validity
Not Before: Jun 12 21:00:51 2026 GMT
Not After : Jun 13 21:00:51 2026 GMT
Subject: CN=26cbb033d025c3dcbb4495c21149888a4cc1dbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:3d:95:68:2d:21:a7:2f:5c:6f:31:d0:1f:
25:14:32:f0:ef:a5:cc:10:2e:dc:c5:97:03:fc:02:
79:08:82:f3:7e:24:a0:a7:cb:b3:58:78:fe:fe:1e:
5d:0e:5b:2b:c6:94:4a:26:8b:ec:bf:2c:c5:73:1e:
9d:d3:b2:af:19:38:3b:63:2b:cb:f6:ac:4f:2c:02:
73:8d:d0:56:f1:ba:2a:4a:0b:1e:bf:82:7c:f4:17:
a2:0f:07:9b:e2:38:d3:50:c4:d4:0f:f0:60:ed:cd:
db:0b:ac:24:2b:6e:54:4b:77:b2:66:60:01:2a:ce:
d8:2f:4d:f1:47:b6:c7:1f:66:00:b9:fb:ca:47:1d:
33:b9:28:fb:a1:9e:e2:7c:74:7d:c9:89:b3:5a:1f:
3e:3d:b0:95:30:63:a7:b0:71:6b:2e:7d:ac:72:ba:
f1:ea:b5:51:61:4b:0a:85:a2:42:60:3c:1c:bd:96:
26:3c:06:cc:85:5d:5e:f0:79:51:b2:00:18:b0:cd:
c4:e1:a9:74:e7:a7:27:85:d5:1c:c7:d5:64:e9:8c:
ae:be:5e:da:f5:8e:88:74:d3:8d:39:c0:ea:5f:97:
63:13:7a:95:6c:17:c0:10:b9:9e:e4:4f:ca:8e:fe:
a9:50:73:77:74:b5:50:e0:af:c6:5a:05:8f:83:b8:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CB:B0:33:D0:25:C3:DC:BB:44:95:C2:11:49:88:8A:4C:C1:DB:EC
X509v3 Authority Key Identifier:
keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:93:20:ed:12:d4:b7:d9:98:b1:a1:33:15:2b:ff:e7:ca:00:
5a:e7:85:55:8f:2d:7e:28:15:65:d4:4a:6b:0a:25:6c:8a:ff:
9d:c2:6d:49:be:60:c4:a8:f7:d7:2b:5e:d0:87:78:0c:cd:70:
04:f3:f2:ef:b4:1b:a2:6b:4d:e8:7f:3a:2c:c8:a1:c5:0b:41:
1d:df:7b:be:5a:40:fa:52:ae:45:c5:39:ee:04:d6:3a:3a:ac:
cb:ff:58:d1:03:8d:ae:33:75:c0:52:14:08:88:19:3e:ee:35:
8b:6d:14:1e:3b:f0:5e:dd:56:2c:33:b3:52:d1:e0:65:c2:5d:
1e:bb:a4:ee:e3:d4:ac:d1:00:1d:24:04:ab:75:aa:8e:20:79:
3c:62:94:c9:62:e3:0e:2f:b4:4c:70:07:bc:57:4a:12:4d:72:
67:33:db:b4:ff:c2:d5:0b:11:5b:f5:75:1f:88:64:39:e9:76:
f0:78:f3:57:89:75:0d:78:96:57:91:7d:b8:45:73:0a:1e:f2:
2e:d2:59:cc:22:a2:a5:72:55:16:6e:ce:b6:4c:63:c4:b8:fa:
f2:a7:1f:32:c2:18:6d:0f:bd:4b:48:0e:3e:6a:ab:5e:a1:a0:
91:6e:92:d1:7c:80:95:7f:83:6c:e7:a8:da:5c:38:55:87:6a:
db:9c:b7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:41 2026 by rpki-client