Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: qy++qv40Vfnvx+Gw41frX1IpJiAsR6Sv6a/QC+GOHVc=
Subject key identifier: 97:4C:4D:EA:09:00:79:00:E8:AD:3C:A6:E7:86:F3:63:AF:DE:D1:22
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 019CAA590CBF92865277290A3E15E0B05E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 15B4
Signing time: Sun 01 Mar 2026 17:01:28 +0000
Manifest this update: Sun 01 Mar 2026 17:01:28 +0000
Manifest next update: Mon 02 Mar 2026 17:01:28 +0000
Files and hashes: 1: 3DT3B1NHAodibv8HfsiWBpQZkkw.roa (hash: be2IZuet6G8U53Y1IKjxfCGpLOGP/WsLRkFMJumAGEg=)
2: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: Uc0wLtNy3+XZOwDF/nSZSzLlj+MkaT2ZAPFngKPOiCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0c:bf:92:86:52:77:29:0a:3e:15:e0:b0:5e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Mar 1 17:01:28 2026 GMT
Not After : Mar 2 17:01:28 2026 GMT
Subject: CN=974c4dea09007900e8ad3ca6e786f363afded122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:6a:a3:3f:4c:97:e4:78:5a:cc:23:e2:48:
66:86:87:07:cd:75:64:4b:ba:3f:f1:f0:d5:23:59:
f5:51:b6:4e:97:be:c4:91:d4:dc:01:64:c0:cf:c2:
f3:4b:1d:c5:27:fe:fc:25:02:98:8d:1d:e5:49:24:
d6:b6:79:00:34:eb:4f:2d:fd:94:13:80:88:72:a4:
ae:9e:da:d1:97:a4:40:4e:7f:84:8d:19:9b:99:be:
c1:9d:3d:bb:1d:90:ba:16:ca:69:df:bc:4a:c4:4f:
3c:62:19:a5:be:bc:5c:3f:86:e2:25:79:26:c9:6f:
39:11:c8:fe:da:cc:6c:c5:ed:01:f6:6a:95:1a:96:
7b:88:34:c1:cd:0c:fe:93:93:f0:90:95:0f:55:04:
18:03:d9:94:73:a0:ea:44:82:4c:fa:cf:19:b4:95:
30:c0:e7:07:a8:23:92:e9:03:56:70:f6:07:5b:bb:
43:9d:9f:11:0b:b6:76:53:7f:8e:57:04:a4:49:34:
b4:c1:80:27:c8:47:08:73:bf:e0:fb:9b:30:52:2e:
3c:4d:40:0b:c7:a3:f7:9c:2c:2d:ec:17:f3:e2:24:
89:ac:40:b1:f0:e4:46:84:12:3c:b0:c1:ae:fb:4b:
15:10:17:00:59:07:59:0d:1e:cc:3f:85:28:d9:8b:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4C:4D:EA:09:00:79:00:E8:AD:3C:A6:E7:86:F3:63:AF:DE:D1:22
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:35:0d:f6:e9:13:5c:d1:7c:1e:98:63:97:fa:d6:0d:7a:45:
ea:a1:29:8d:21:18:99:45:48:09:ba:93:cc:54:a5:c9:90:99:
fb:7f:00:a0:2a:ba:ef:01:3a:c5:a1:2e:16:2f:04:66:f3:38:
27:cb:30:ef:47:f4:52:7e:b6:a5:20:4a:ce:ad:f3:42:a9:d4:
f3:30:a9:3b:1a:5b:3d:63:c0:3a:c3:02:4f:76:10:04:f9:5e:
77:cf:26:ce:3c:07:64:88:6d:7c:f9:2a:a0:63:e0:ad:df:95:
08:5f:2e:8e:11:88:a8:26:86:d3:7c:78:11:8e:35:c6:57:82:
8a:42:2d:a6:df:57:09:1c:0c:dd:52:cd:cc:9b:ec:e0:71:43:
e2:e2:d3:10:6b:6b:ce:a1:85:f1:f0:a7:fc:8e:ba:d4:70:01:
f1:eb:1d:2b:5a:83:e6:35:00:b5:7c:88:b1:42:25:d0:43:a6:
d4:cd:37:60:b1:68:78:e1:ac:23:8a:44:04:03:a0:99:44:79:
69:73:8f:b9:72:36:b0:44:b7:ba:1d:c3:b3:9a:c4:fd:38:52:
58:61:1a:2b:e0:7b:94:d8:f2:c2:f6:9d:01:74:db:6c:ee:ce:
47:be:bf:b2:4b:9a:91:37:20:e8:c6:58:8b:db:80:15:60:60:
a1:4e:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:18 2026 by rpki-client