Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: 6tnRC2oXR6fqiKrIJ7nBGSQpXoa9C2/p7CTtqcdQrO0=
Subject key identifier: AB:C6:0E:96:BB:9E:C5:B7:F9:41:36:75:11:C8:76:8D:AE:2A:64:49
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019EC1119FB55671AE34F36B4186701CFAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0D12
Signing time: Sat 13 Jun 2026 13:00:18 +0000
Manifest this update: Sat 13 Jun 2026 13:00:18 +0000
Manifest next update: Sun 14 Jun 2026 13:00:18 +0000
Files and hashes: 1: Ha1zzuR5phsP43HrNuYV02K8JmM.roa (hash: OIS0Kv+EMSNX8skAuIawL3We9Kkncv5+iFQyWWdpmbk=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: gw44GKSTz+nGTZvBAUv8AZ3sMOxTYOf36KKEU/Ws5DY=)
3: SqHxe2uwvaoACopO4_oazg_nels.roa (hash: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:9f:b5:56:71:ae:34:f3:6b:41:86:70:1c:fa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jun 13 13:00:18 2026 GMT
Not After : Jun 14 13:00:18 2026 GMT
Subject: CN=abc60e96bb9ec5b7f941367511c8768dae2a6449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:58:64:3a:86:68:93:4d:b0:9c:20:f4:40:
d4:c2:8e:4f:4f:f3:ea:7a:a4:49:5c:e0:d5:b1:a6:
39:61:52:48:72:68:62:cd:f8:ae:74:90:6e:f6:81:
3d:1c:dd:7d:45:e5:75:84:84:2b:87:f0:b1:4f:86:
61:f1:0a:be:52:be:ef:67:91:e4:1f:72:29:4d:ff:
c9:62:d8:22:04:7c:6e:7a:47:ba:bc:c5:62:a7:2c:
71:76:cd:6e:f5:8b:1e:7d:fd:3a:ee:e3:fe:c8:e4:
40:6e:3b:34:66:7a:70:f5:45:b9:27:cf:9b:87:66:
5d:78:1b:b2:82:4c:3c:03:16:46:40:70:3f:ad:9f:
2b:f7:5f:8b:90:05:11:0a:cf:20:52:70:ba:af:38:
c3:31:70:cf:dd:e6:35:9a:85:d2:fd:e0:b5:56:67:
3d:63:92:c5:19:50:26:e0:a9:43:3f:b2:95:67:92:
21:9d:8e:d4:3f:54:24:9f:2a:50:cb:e6:6b:a4:7b:
8a:e9:68:9b:58:b7:8a:9e:3b:91:0d:99:92:63:eb:
75:13:d2:7f:ab:48:c8:ae:a5:ae:e6:24:5a:db:10:
92:49:7d:46:a7:e9:01:48:55:8b:fd:43:a0:0c:43:
d1:44:e0:be:64:62:7b:fa:cc:f5:34:06:21:24:27:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:0E:96:BB:9E:C5:B7:F9:41:36:75:11:C8:76:8D:AE:2A:64:49
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3a:44:3d:23:06:0f:54:15:34:bc:aa:22:24:5d:1a:c8:ba:
45:9e:25:72:d4:1b:32:9f:52:1f:be:ea:66:df:a4:cc:9e:02:
ed:8d:ad:95:f3:34:d2:3c:9f:3a:6c:fd:8d:da:df:fd:d4:df:
d9:09:ee:73:7e:85:fd:67:90:32:70:7e:e0:77:68:31:25:8e:
4a:7d:5a:b8:28:1f:f2:c3:7e:a4:2d:65:4d:d7:8b:f3:57:38:
ce:24:36:1d:34:e7:08:90:e3:69:be:81:d9:18:d0:95:7f:58:
ec:9d:f5:00:87:f8:02:78:65:77:63:10:02:69:c6:fa:e8:40:
35:1d:50:52:56:8b:da:e3:c5:1d:a6:09:e6:6a:98:e4:8a:c2:
24:ff:aa:5d:c4:22:26:8d:e8:ed:ac:0d:5c:ac:a2:0a:0f:dc:
91:b1:f7:30:8d:25:48:48:70:14:d1:45:25:37:30:0c:eb:8f:
54:42:5b:d7:4f:5c:29:d6:45:40:a6:27:e2:bf:ce:2a:31:83:
a4:8a:b2:36:08:51:af:ac:3e:84:0e:f0:e2:90:72:bf:05:ee:
7d:0b:5a:fd:71:79:37:05:e1:c4:e3:a1:e3:87:03:df:2a:39:
b8:4d:9d:cb:77:da:50:9a:90:7e:50:9b:12:09:c2:f2:cb:38:
2a:89:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:27 2026 by rpki-client