Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
File: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft (raw, json)
Hash identifier: ApL2a2pN4tdKSxapuFaMyDSUfX5KoU+bqVx4FmCyyMQ=
Subject key identifier: 28:39:59:01:DE:D0:45:03:C2:02:1B:A7:C8:4A:EA:8C:2B:AB:9C:C0
Authority key identifier: 8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
Certificate issuer: /CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Certificate serial: 01A0C88FA465730E916E583CCCF9C0CBBCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
Manifest number: 97
Signing time: Tue 22 Sep 2026 10:00:51 +0000
Manifest this update: Tue 22 Sep 2026 10:00:51 +0000
Manifest next update: Wed 23 Sep 2026 10:00:51 +0000
Files and hashes: 1: IOGuoiGHLJAwbi5pEcAAvhgCSXA.roa (hash: QEfBl0X5W4QlD56u3JPPsSJ9EOc7Fk9l1CYCpj33Vcg=)
2: ZNjBbJJhYFUjEtTGh7JC0wy2zdE.asa (hash: Dy1YZG8ZdOicfaxVr2xJvKZTph/YTekn7sgLkepqLbY=)
3: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl (hash: 1gEzGHxwCj47lh+QuUjV5UNAkY8JnKFL8iwYonPIxFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:a4:65:73:0e:91:6e:58:3c:cc:f9:c0:cb:bc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Validity
Not Before: Sep 22 10:00:51 2026 GMT
Not After : Sep 23 10:00:51 2026 GMT
Subject: CN=28395901ded04503c2021ba7c84aea8c2bab9cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:91:d6:85:f4:42:45:fa:b1:4e:4b:09:e3:
0c:cf:b1:34:d1:4d:15:3e:53:6f:10:d6:61:35:97:
1e:41:75:cd:2d:60:00:47:76:de:06:ea:10:44:45:
a7:26:4a:1a:d6:28:55:0f:95:2a:7e:c4:a5:18:4e:
36:b2:b1:b2:f5:ca:29:28:35:12:d0:99:18:8a:37:
5f:25:17:b2:9f:97:de:d6:aa:4a:10:e2:d4:e3:fc:
98:6d:00:f0:b6:d6:a7:bd:b0:ea:8c:28:5b:9e:fb:
a5:93:9d:63:6d:19:cc:60:8f:a3:f4:76:4f:c9:ba:
e8:9f:43:bd:20:de:5b:59:c1:40:1c:0b:c0:b1:0d:
e2:31:80:7b:d2:fe:42:45:df:9b:59:e7:e9:fb:79:
18:8e:96:22:9a:d8:cb:76:22:ea:66:74:aa:f8:1e:
71:4e:a0:28:4a:7d:b5:cf:b7:9c:44:7b:be:10:a3:
86:e1:07:2a:46:5b:d7:66:86:8b:ad:75:7f:42:d7:
1b:ff:8a:e5:db:1c:f0:a2:6e:27:ed:de:a4:be:8f:
c3:7f:1c:af:d3:ac:49:00:21:7e:bf:3e:a4:04:3e:
3a:0a:a5:db:1a:8a:2a:57:a0:e6:1a:6b:4f:6c:e1:
08:11:40:ea:17:bc:41:ef:7f:ec:ff:42:74:4d:b3:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:59:01:DE:D0:45:03:C2:02:1B:A7:C8:4A:EA:8C:2B:AB:9C:C0
X509v3 Authority Key Identifier:
keyid:8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9a:4a:2a:e6:88:f8:d2:4d:6b:3c:b2:c5:43:41:e6:62:50:
c6:3d:6d:a3:a9:38:5d:59:6f:57:f2:df:b5:20:86:97:dc:5f:
bf:a9:86:03:f1:43:70:e6:94:a7:bc:bf:d8:96:b5:c5:d0:06:
d5:fe:bb:b8:af:a1:a8:1a:2b:4f:05:63:86:ea:37:07:52:b3:
c6:b1:50:42:95:02:40:69:fd:8b:65:a9:32:98:e7:bd:b7:a2:
8e:60:59:eb:93:b0:ba:40:82:76:6d:3c:9e:b0:ce:5e:a5:85:
d1:5a:ca:52:11:65:fe:ef:2d:51:35:35:f0:1e:dc:b0:ea:0c:
3b:76:a6:33:a4:45:44:98:1e:f6:89:17:50:66:ac:ff:f7:4b:
bc:b1:f2:5c:3d:69:fd:f5:e9:c4:c1:9e:3a:6c:a4:79:43:6c:
7a:c7:90:39:54:94:73:a2:cb:c5:de:1b:84:8c:35:26:48:c4:
7e:41:4e:94:00:cf:78:99:18:7a:a5:27:59:2a:77:8b:ac:b5:
9c:02:7d:49:07:c4:c3:32:9c:62:fe:d3:08:f4:07:1c:f1:47:
52:b7:01:9a:cf:df:f4:3b:97:7e:33:e2:f0:88:3a:57:b9:f0:
2b:af:5e:bd:fe:2d:b5:35:26:c1:a2:dd:61:c2:ec:9e:0a:62:
b9:59:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:20 2026 by rpki-client