Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier: kFvU+WQ34nMt3SYsDwYFzX4Iby7iIb9g0/7j9K/gnuk=
Subject key identifier: D1:66:53:64:1D:09:F7:93:1B:8E:52:6A:94:4C:46:5C:7D:86:DC:CA
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019EBFFF11A2072A39BBC239D18089ABE66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number: FB
Signing time: Sat 13 Jun 2026 08:00:24 +0000
Manifest this update: Sat 13 Jun 2026 08:00:24 +0000
Manifest next update: Sun 14 Jun 2026 08:00:24 +0000
Files and hashes: 1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: he85j9MF3qvDGAfuJjzJwULSkADC/zQ0+9qSJ3DYtlc=)
2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:11:a2:07:2a:39:bb:c2:39:d1:80:89:ab:e6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: Jun 13 08:00:24 2026 GMT
Not After : Jun 14 08:00:24 2026 GMT
Subject: CN=d16653641d09f7931b8e526a944c465c7d86dcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:e7:fe:ad:e0:c4:de:32:b2:54:ce:10:22:
c3:00:0b:9c:80:13:fa:1e:b4:8f:be:ac:21:27:a0:
ef:fb:2b:b0:0a:3f:f6:78:17:ad:91:8e:18:c5:29:
56:4d:5b:b2:ba:c9:93:d0:45:46:03:9b:b0:b8:03:
6c:c3:51:7d:9e:da:3a:75:b8:04:f4:60:98:d8:6d:
91:d5:88:11:4d:16:20:31:0b:16:c5:fc:57:bd:e6:
7d:8a:9b:81:3a:c1:6c:ef:bb:6a:be:ce:c8:3e:9e:
21:e3:29:2c:8b:ec:94:31:64:ee:a0:46:2f:07:10:
04:89:1c:57:3b:d5:56:b7:82:e2:aa:69:b5:b5:1b:
13:c4:84:ce:f3:f2:3e:8a:65:3d:15:a5:00:9e:b6:
df:07:ad:22:e9:8d:53:7f:cd:ac:04:c9:e9:a5:ed:
e2:3c:c5:8b:15:22:36:94:31:17:d1:1a:b4:52:2c:
f6:ce:5d:d2:ab:33:62:76:dd:55:76:3b:0c:33:89:
80:9a:b5:39:28:57:02:6f:6a:28:0a:64:ca:34:50:
3f:7f:c7:e2:26:08:2b:fb:6f:c9:c4:a0:ae:20:a1:
72:ec:3b:7a:81:45:69:4e:9f:98:2f:a3:5c:b8:42:
4d:67:9a:e4:89:20:37:32:09:81:62:57:7e:26:de:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:66:53:64:1D:09:F7:93:1B:8E:52:6A:94:4C:46:5C:7D:86:DC:CA
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6a:82:50:02:96:41:14:11:3f:b3:ea:1a:7c:5e:c4:e1:37:
e2:e7:ab:76:4d:f2:ec:07:ed:cb:a9:8a:1f:ab:fc:ed:ff:17:
31:e6:2c:d5:82:c7:4b:92:11:db:b6:7e:4a:b4:f4:9c:46:bd:
f2:3a:8f:58:13:c9:73:8c:94:ec:f1:f1:71:0e:91:ab:c1:0e:
0b:c4:ad:1b:6b:26:dd:00:a4:9a:4e:fb:d3:2c:dd:3a:8e:a7:
d3:9c:d5:8c:da:94:69:a6:a1:a6:4c:08:82:69:6c:6e:9e:0b:
db:88:28:da:47:e3:36:ac:49:1c:dd:4b:dd:31:52:bd:98:ff:
87:71:fd:13:82:6b:8f:e3:99:32:f1:4c:6a:0d:f9:80:7f:f7:
d0:74:cf:8a:4d:5f:97:99:40:a7:91:3f:0b:52:da:d0:e0:e5:
f9:05:eb:a4:51:ce:14:fd:0c:3a:d1:8d:d7:5f:88:35:cd:97:
56:d1:dc:9f:ff:89:d6:ae:b3:73:35:8f:a0:96:a4:9d:0f:74:
22:32:2c:71:6f:f1:af:89:7b:f6:9e:18:75:5d:fe:3f:4a:2a:
c3:71:40:b0:8a:0c:71:a3:c0:ec:7e:24:a0:f2:77:a8:7d:17:
5e:82:b5:ed:21:bd:ef:09:fd:0b:c4:6b:bb:e8:45:12:3a:1f:
45:2d:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:16 2026 by rpki-client