Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File: i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier: /tqJnrSA1PwaipcPfuoqowghwEyjoT08kqV+1DEKs1s=
Subject key identifier: 77:2B:45:04:A3:6F:44:D0:18:51:12:01:EC:B3:98:1A:C7:17:4D:2C
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 01A12C20847B30490A92F182C3ED4AD959B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number: 1AA5
Signing time: Sun 11 Oct 2026 18:01:30 +0000
Manifest this update: Sun 11 Oct 2026 18:01:30 +0000
Manifest next update: Mon 12 Oct 2026 18:01:30 +0000
Files and hashes: 1: AtDFD7_qKk4jrpKjelR8svE01P0.roa (hash: gTykOYo+tU9/XQ+/e23jrH05kkPYVNgaKARt/D3c+C8=)
2: Ppo8zp5LmchB33jNrvk9bBT1gBY.roa (hash: p3Wx4W4uCna+Td0Px+Vvc7pZpjBuiRji7FFkTSU5prU=)
3: RIo6TmDM-kPBAwheQ0rKUxsT-NI.roa (hash: cvnx0wc+dqhJgruKYJRcSO3o27xhgwokA6yOQ2qW1EU=)
4: SGD5GcL8l9REwij1xB0V3ArZ6IM.roa (hash: CbbI/yFIt3p0EMou0tP1jzrb/qN0JlHcNbbxYjLJqoA=)
5: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: v7vrNberpN/JHVrseQPzDOWI8voEUtNQPvMK60Euwak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:84:7b:30:49:0a:92:f1:82:c3:ed:4a:d9:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Oct 11 18:01:30 2026 GMT
Not After : Oct 12 18:01:30 2026 GMT
Subject: CN=772b4504a36f44d018511201ecb3981ac7174d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:e0:d8:e1:a5:1e:7f:00:d2:3a:36:6b:99:
00:ae:25:20:9d:f4:c0:fc:05:cd:ba:d1:8f:0b:f3:
90:21:6f:bf:04:89:e2:36:75:8c:eb:df:6b:bb:08:
c6:9a:fa:aa:05:da:da:93:77:76:9c:85:c3:95:4e:
85:ae:6d:72:84:c3:cc:2f:88:04:0a:39:0c:a5:53:
10:d1:95:2f:84:37:49:f0:6e:40:9a:3c:9c:b3:b7:
42:5e:39:f8:19:6f:dc:47:c1:f8:02:e9:c5:d9:28:
3e:d8:e9:f2:8d:2c:70:d6:51:5a:cc:42:9b:4b:03:
82:fb:18:3c:99:ca:9f:cd:8e:78:5e:f4:a4:f4:8d:
c3:bc:0f:3a:2a:d1:a7:4f:7f:3f:92:ec:d1:28:04:
e4:5e:6b:ab:53:92:9e:7c:6b:5b:d9:a2:60:b6:bc:
a6:b1:ab:77:ae:0a:b3:68:8f:8b:ec:e1:00:ef:12:
4b:77:d5:59:ed:e0:d2:a1:d2:b3:4a:4d:05:c0:1f:
f9:38:e5:97:36:90:8a:80:36:ad:ad:ab:89:09:cd:
d9:78:ed:c8:31:a7:9b:d0:fb:32:be:ca:52:67:f3:
c2:d5:a1:eb:42:73:a7:74:09:6a:1a:5f:0f:52:9b:
7a:4e:04:cb:1e:34:31:07:7e:b3:bc:88:d9:65:8f:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:45:04:A3:6F:44:D0:18:51:12:01:EC:B3:98:1A:C7:17:4D:2C
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:38:48:58:0a:08:d6:c5:fc:a2:04:58:9a:53:98:55:a9:
56:d1:55:93:0e:08:8c:39:b0:98:12:e1:a7:2a:e4:59:21:87:
84:4b:17:9b:27:da:48:bd:a4:3d:7b:3d:c1:1c:62:50:cb:bd:
2b:20:e9:1b:4e:2e:fb:87:e8:7f:a0:4c:58:17:af:14:b9:fc:
6c:ce:00:ef:f8:a0:3a:8d:71:90:b1:8d:2f:ba:14:0c:43:b4:
3d:7d:e2:89:2b:e7:06:e9:26:47:d5:c7:9f:ad:d6:6f:39:30:
ae:d4:dc:2a:5f:99:f9:58:34:31:71:8a:bc:b4:12:da:d8:1d:
4c:5c:94:e0:19:75:10:d8:d0:a1:52:17:06:c4:1e:a1:ad:24:
ac:d7:91:77:c1:e8:c1:3f:37:65:1f:3f:54:64:76:42:1e:c6:
6b:9f:eb:66:02:42:7f:4a:af:62:a3:8f:ab:52:b9:52:da:51:
78:96:87:df:b9:21:38:67:f3:2a:dc:46:03:28:c7:ea:40:cc:
87:db:32:6e:f3:09:52:f1:78:93:ed:24:5c:75:0c:f4:76:c5:
d2:d0:67:5e:2f:d0:2b:d8:3a:59:75:73:1f:5b:ea:8e:4d:1e:
51:8a:18:7b:10:2f:dc:13:d4:5f:79:49:74:3e:fd:97:90:33:
78:d6:c0:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsIIR7MEkKkvGCw+1K2Vm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3
NWY0YTYwHhcNMjYxMDExMTgwMTMwWhcNMjYxMDEyMTgwMTMwWjAzMTEwLwYDVQQD
Eyg3NzJiNDUwNGEzNmY0NGQwMTg1MTEyMDFlY2IzOTgxYWM3MTc0ZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrng2OGlHn8A0jo2a5kAriUgnfTA
/AXNutGPC/OQIW+/BIniNnWM699ruwjGmvqqBdrak3d2nIXDlU6Frm1yhMPML4gE
CjkMpVMQ0ZUvhDdJ8G5Amjycs7dCXjn4GW/cR8H4AunF2Sg+2OnyjSxw1lFazEKb
SwOC+xg8mcqfzY54XvSk9I3DvA86KtGnT38/kuzRKATkXmurU5KefGtb2aJgtrym
sat3rgqzaI+L7OEA7xJLd9VZ7eDSodKzSk0FwB/5OOWXNpCKgDatrauJCc3ZeO3I
Maeb0PsyvspSZ/PC1aHrQnOndAlqGl8PUpt6TgTLHjQxB36zvIjZZY8dHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcrRQSjb0TQGFESAeyzmBrHF00sMB8GA1UdIwQY
MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt
ZjJmNDI2ZWZlMDM5LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5
LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN04SFgK
CNbF/KIEWJpTmFWpVtFVkw4IjDmwmBLhpyrkWSGHhEsXmyfaSL2kPXs9wRxiUMu9
KyDpG04u+4fof6BMWBevFLn8bM4A7/igOo1xkLGNL7oUDEO0PX3iiSvnBukmR9XH
n63WbzkwrtTcKl+Z+Vg0MXGKvLQS2tgdTFyU4Bl1ENjQoVIXBsQeoa0krNeRd8Ho
wT83ZR8/VGR2Qh7Ga5/rZgJCf0qvYqOPq1K5UtpReJaH37khOGfzKtxGAyjH6kDM
h9sybvMJUvF4k+0kXHUM9HbF0tBnXi/QK9g6WXVzH1vqjk0eUYoYexAv3BPUX3lJ
dD79l5AzeNbAmg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 01:04:52 2026 by rpki-client