Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: S+lSoGD8yUYj09vvUE7nSLtPtNzj3MRs5HvYvDKu9Ko=
Subject key identifier: 49:94:83:36:5B:40:EC:6D:7D:98:E0:BD:DD:7B:F0:CF:40:48:25:C1
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019EC1B689973EE90881D993D245E5F5F9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 16CC
Signing time: Sat 13 Jun 2026 16:00:25 +0000
Manifest this update: Sat 13 Jun 2026 16:00:25 +0000
Manifest next update: Sun 14 Jun 2026 16:00:25 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: m2uLCN50l1dV159HOhSASqknFTTQQI6hpzTLvqTagCM=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:89:97:3e:e9:08:81:d9:93:d2:45:e5:f5:f9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Jun 13 16:00:25 2026 GMT
Not After : Jun 14 16:00:25 2026 GMT
Subject: CN=499483365b40ec6d7d98e0bddd7bf0cf404825c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:09:be:b8:41:d9:6e:8f:3e:4f:2e:47:0b:
37:9c:09:9b:ee:6a:1a:e7:62:30:55:1a:a0:45:05:
66:67:7f:66:11:bf:2a:5d:c3:c8:cf:25:ce:a4:9b:
31:13:ad:a6:b2:3d:08:c8:ae:32:54:e9:d2:78:63:
7a:23:6c:a1:10:0b:1d:f8:74:b7:87:27:9f:3c:ba:
1b:55:68:f1:da:97:83:8a:ae:b2:fe:b2:77:c3:06:
33:d7:f6:b1:b3:6b:f8:1f:13:d4:47:b9:be:69:7c:
24:2d:b6:13:5f:5a:02:2e:44:99:2e:e4:ec:2e:a0:
30:69:1e:a3:1c:a2:f9:3f:a4:49:09:8d:67:1c:03:
db:b7:31:85:04:ce:4d:17:db:15:03:0f:f3:36:6c:
62:e6:91:d0:11:4e:c0:f8:32:8a:0a:22:ae:4a:ff:
2d:b2:78:38:7c:9d:a2:98:07:51:69:60:a7:52:2b:
30:e1:09:ae:65:d3:0b:f7:ce:4d:90:77:5c:66:91:
4e:93:7d:9c:4b:07:f0:b3:2c:c5:ab:e5:90:3b:bd:
0e:a0:f4:5f:1f:b5:5c:c2:b6:fb:54:5d:28:3e:ac:
fb:b0:6a:54:83:ed:96:f1:54:70:6b:be:d7:4f:be:
6e:5e:22:25:89:04:18:e6:68:18:23:8f:ed:70:6c:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:83:36:5B:40:EC:6D:7D:98:E0:BD:DD:7B:F0:CF:40:48:25:C1
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c2:eb:85:36:ae:4a:14:21:75:b5:56:de:c2:c9:54:fb:8f:
4d:82:f0:5b:64:a7:11:fa:3d:3a:27:90:dd:3b:60:9e:6a:29:
e6:ca:94:33:1e:a9:c9:e4:2a:b5:ed:4c:47:d3:c8:e7:9f:7b:
a2:c2:ef:be:3f:fd:17:ff:a9:dd:87:42:de:1c:82:9e:ab:9a:
61:99:2c:4e:fc:f3:d3:3d:55:09:99:6f:1e:a7:63:24:80:14:
ac:35:16:0c:0a:05:e7:33:bf:31:90:db:3e:a5:a9:94:5d:a6:
a9:d1:17:6c:fb:cf:e7:72:ff:04:dd:d3:6b:c7:57:b9:12:a8:
c0:54:16:40:02:a7:b1:16:3e:44:09:40:59:4d:64:78:c6:3a:
08:66:47:46:ad:32:45:46:4f:5c:7d:1b:c0:4a:ee:cd:f3:3d:
11:8d:36:76:1e:f3:ce:b4:e1:aa:0a:1a:4b:99:71:f6:17:58:
d1:f5:c3:64:df:f2:e4:db:a6:1c:a0:aa:c2:85:f0:98:bc:15:
43:35:c0:76:5d:64:70:4c:0a:e3:17:52:10:9e:3c:27:d0:0c:
50:0b:bf:61:dc:0d:bc:5a:99:be:69:6f:0e:4b:30:8d:30:54:
a3:5d:11:fe:e4:af:78:88:3f:5b:3b:39:d3:42:c6:8d:02:f9:
d4:0d:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:21 2026 by rpki-client