Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: SfZCSj87amYNywTyhJduKOVTvLSdoiHIir+6PrpLGtk=
Subject key identifier: 7E:99:DF:A6:68:08:90:85:27:D9:46:1F:EC:C6:BC:0D:32:88:5A:06
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019EBF238D71AE39277D5F151DC380D0BBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0D20
Signing time: Sat 13 Jun 2026 04:00:38 +0000
Manifest this update: Sat 13 Jun 2026 04:00:38 +0000
Manifest next update: Sun 14 Jun 2026 04:00:38 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: wlqirMh6r78cyQIE4R2q8xFUxLak1v+IJ4Ay6siuu4I=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:8d:71:ae:39:27:7d:5f:15:1d:c3:80:d0:bb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jun 13 04:00:38 2026 GMT
Not After : Jun 14 04:00:38 2026 GMT
Subject: CN=7e99dfa66808908527d9461fecc6bc0d32885a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:ff:bf:b2:ba:01:67:0f:31:bf:ab:39:58:
ab:63:aa:49:bd:9a:19:91:51:27:09:89:5f:9b:28:
aa:a0:5f:ce:18:59:5a:07:76:df:df:88:42:7d:51:
32:54:a9:c0:07:46:98:8f:8c:50:d3:4c:c4:d5:1d:
f1:fe:cb:be:54:f2:42:5d:eb:16:d2:92:3e:10:30:
23:66:39:a5:e1:4b:f8:36:24:6b:14:44:e6:18:02:
fa:1d:67:5e:e6:a6:e5:cf:22:c5:a3:21:e9:e8:ac:
87:73:9b:9b:97:f7:bd:e9:8d:fd:08:3d:4e:6d:0c:
f2:2f:ff:59:b7:78:32:19:65:56:9f:f8:69:b1:8c:
c2:1e:f0:ae:66:63:94:94:45:3f:6d:8b:a4:4c:d4:
5f:78:96:73:c2:bb:08:c8:4a:4e:5b:62:25:83:4e:
74:38:26:8a:65:e2:04:2f:a1:a5:92:63:29:cf:ba:
34:11:6a:39:4a:cc:b4:99:d5:5f:08:ac:2b:b1:b2:
d9:ec:52:ab:c6:1e:96:32:33:ca:7a:fd:f3:45:5c:
f2:ef:fc:38:9b:c6:10:c8:69:8b:e3:17:d0:4f:31:
a5:cf:ed:44:55:28:fb:02:7a:e5:6f:06:b8:f3:0e:
a6:b9:52:ad:df:a9:00:04:7d:b8:93:df:29:89:b6:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:99:DF:A6:68:08:90:85:27:D9:46:1F:EC:C6:BC:0D:32:88:5A:06
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6a:4f:33:f4:91:46:12:5e:27:f4:e9:00:5e:f9:0d:39:c5:
65:00:1f:91:e8:35:38:35:da:0e:5c:4c:57:90:3f:6a:08:da:
39:70:64:dd:fb:2a:aa:f2:3a:37:01:20:b5:4d:d7:b0:2d:c7:
43:7f:2f:da:82:5b:19:69:5d:56:07:df:83:15:85:de:35:77:
81:10:f2:ff:58:f1:a8:09:1c:2f:30:a2:8a:42:37:a4:11:55:
20:72:5e:ae:46:68:0c:b3:e9:f2:26:e9:4b:8e:53:9a:4b:9b:
cf:7a:23:ba:38:72:a4:5a:4e:07:90:ac:85:61:7d:20:c1:1f:
27:a5:3b:a5:ba:2f:a9:ad:8c:b2:85:08:82:a2:42:f4:8e:63:
21:17:d0:2c:9e:62:ff:17:6e:7e:32:90:42:5c:9e:4b:9d:5d:
5a:95:34:07:4d:41:da:75:ed:66:3f:ea:c8:6c:ff:68:2b:61:
30:30:59:12:64:cf:d8:a4:ef:27:c1:92:30:e9:b8:0a:59:0d:
44:d0:fa:0c:bf:20:92:e6:f4:4d:f7:16:d9:d3:40:7f:8d:a4:
11:b2:e0:96:8e:82:b7:a4:56:15:c0:1d:ba:92:d9:88:16:c5:
78:92:08:18:90:47:ae:a0:4f:1e:19:2c:46:a2:14:4e:c1:35:
85:7a:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:41 2026 by rpki-client