Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: oVjdll9SD/YT+oLqtUPQq1/0RDYqS31kpJaJGdKK6k8=
Subject key identifier: 8F:4A:30:F1:B0:28:FA:A4:00:69:20:EC:B9:ED:D2:B9:43:29:53:1C
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 019CAA21AD96A7B460B6864D62D759C47FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 06C8
Signing time: Sun 01 Mar 2026 16:00:59 +0000
Manifest this update: Sun 01 Mar 2026 16:00:59 +0000
Manifest next update: Mon 02 Mar 2026 16:00:59 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: URQabmCv8QYKqcHawinlTNPJldI1vtogNQSCgDAwlTE=)
2: oBg9GLd04rSGrEFacgZRWrxKe2o.roa (hash: qgYYBQiy/vwO/EgGIM4ixoYVfm4vaImrqtxG63hASRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ad:96:a7:b4:60:b6:86:4d:62:d7:59:c4:7f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Mar 1 16:00:59 2026 GMT
Not After : Mar 2 16:00:59 2026 GMT
Subject: CN=8f4a30f1b028faa4006920ecb9edd2b94329531c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:ed:00:51:8c:ee:4c:b3:11:0e:83:91:8b:
24:34:5a:78:e1:ac:d0:40:46:7d:07:05:4f:2f:5b:
be:23:57:b3:ee:d4:a0:63:89:b0:41:a5:e3:2a:f9:
27:04:6b:96:f6:7b:aa:97:ab:bd:8d:06:7b:4d:04:
4b:ce:90:cb:c7:be:f0:29:9b:c3:90:f3:14:b3:ad:
a0:11:a3:02:5a:eb:aa:bb:f2:a4:b1:cd:3e:40:95:
3a:f4:fa:22:c9:24:48:58:91:ef:9d:fa:4e:f0:a9:
d9:76:26:0b:d5:73:08:62:c8:57:a8:8d:16:23:7e:
77:fe:85:e8:cd:51:fe:19:80:a7:aa:7a:5c:49:3a:
43:77:58:d4:e8:a9:0c:40:63:a0:5e:90:91:63:e6:
4d:70:7f:9d:6d:50:16:d1:c0:79:4a:ff:c8:3c:a6:
b1:c1:09:82:0f:95:1e:5d:5f:a3:a9:78:56:e3:47:
2a:e8:6a:e6:c0:34:51:be:b9:48:f6:f2:1c:95:ff:
c9:45:91:6a:58:c9:ee:91:02:9c:74:b3:fe:aa:0a:
f9:bb:9a:9f:46:3c:71:7b:9a:c5:fe:e3:7f:e1:75:
28:48:fd:1e:45:83:65:76:7d:2d:be:82:72:58:bf:
2b:da:96:3d:6e:f3:d1:69:b7:b5:5c:4d:02:d0:bd:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:30:F1:B0:28:FA:A4:00:69:20:EC:B9:ED:D2:B9:43:29:53:1C
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:84:81:9c:15:93:3f:91:ea:03:02:38:df:d8:6a:0a:11:77:
ef:30:92:f5:0e:8f:4a:df:02:97:c8:00:db:71:29:88:0f:5a:
43:c0:8e:50:8f:c2:1e:08:28:de:e3:fe:f0:62:22:72:3b:ec:
f1:4a:ee:dc:af:fb:67:f0:99:fb:fe:26:16:d4:b6:9f:d7:6f:
a9:46:68:e5:ae:e3:f6:1e:3c:0a:e3:7c:c2:c5:8e:73:b4:e2:
9d:ef:8b:de:93:3e:2c:57:c6:9d:36:92:1f:9d:4b:e3:ee:50:
9b:63:7b:64:b2:ed:0d:cf:77:79:a0:f6:25:ea:8b:2a:fb:48:
ec:ca:dd:9f:a6:f1:0b:36:24:8e:a8:eb:b4:c5:5f:b3:14:14:
9d:91:56:c6:40:6e:c5:fa:71:cb:f3:72:ae:a5:a6:9b:0c:cd:
86:34:9d:92:20:5b:ff:21:93:27:cd:5b:e8:24:d0:9c:0e:a2:
47:af:64:60:76:e2:f6:30:52:35:ce:06:e0:f7:cd:8b:ed:5b:
6b:b9:de:32:3e:e6:bc:d2:c6:1e:d0:04:91:46:cc:d0:1b:77:
e1:9a:d0:05:1a:06:8c:d7:a1:9f:90:0b:f7:9f:ed:a2:58:32:
f6:2d:f9:05:03:1c:96:6b:21:a0:81:e4:f5:cd:b2:ed:2f:ae:
7a:a8:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:02 2026 by rpki-client