Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier: zrLJvNDsWvxVgXqfB4j0Q8Nh951y2K9NUmFNXvcpO8o=
Subject key identifier: 95:1D:EA:A2:AC:88:AD:49:13:CB:A5:02:76:6F:07:2C:2F:58:9E:C2
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 01A0C4B23354FAE5D943BC35BC0A023CDB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number: 1A7F
Signing time: Mon 21 Sep 2026 16:00:07 +0000
Manifest this update: Mon 21 Sep 2026 16:00:07 +0000
Manifest next update: Tue 22 Sep 2026 16:00:07 +0000
Files and hashes: 1: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
2: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
3: a2QkPtyL0SmdjP5zau-ugnaW-EU.roa (hash: gM4VfQdg6WpZhQD+HowobTuTX+TLbbelKQeacFg1zmA=)
4: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
5: fFvKoiV0VFBu4-OsBK2GYOwQH4U.asa (hash: 6DUFJoRDSzQ5uZ9J7qiuNTODxM1mTEYJM2iS/0tUeFU=)
6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: 7+BC9Mo9U28e/xuiQHnYIScS6s4h0OluKaueEdpTW3Y=)
7: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
8: kZguNbKDxcwx7TTRhlYgy4TEeQ8.roa (hash: gALJSh2LcRXQqCp+dXvtYhynkz9C6FiHkuFaiMFg4sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:33:54:fa:e5:d9:43:bc:35:bc:0a:02:3c:db:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Sep 21 16:00:07 2026 GMT
Not After : Sep 22 16:00:07 2026 GMT
Subject: CN=951deaa2ac88ad4913cba502766f072c2f589ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:35:20:97:3a:9d:38:dc:89:6f:98:62:04:
ec:cd:d3:2c:84:4f:9b:38:2c:8a:42:70:85:9a:ec:
93:ff:e3:75:c7:81:5a:9e:2e:8c:03:b9:38:07:df:
81:35:73:92:24:24:51:24:dd:67:ad:3c:dd:c7:92:
fc:97:0b:d5:14:a8:45:92:bd:84:93:4c:08:74:37:
ef:80:fb:11:77:24:97:a7:1e:5a:56:6b:9b:36:b0:
ec:4a:1f:a0:3a:81:9d:a3:73:3e:6d:db:5e:b0:47:
bf:31:2f:70:86:41:40:f5:79:92:9e:50:e6:1a:36:
6d:48:8d:90:a3:f4:7c:fa:f0:9f:1e:aa:e7:0b:e6:
ea:3e:f1:43:f2:4e:e8:44:73:67:85:f4:d5:30:c1:
a6:f9:5a:39:31:fc:81:df:84:40:9e:54:89:9d:8c:
31:0f:4b:3f:5d:8c:7b:3b:12:19:98:1f:e4:98:2a:
1a:10:be:95:54:4b:f6:38:d9:2a:b2:41:f1:36:a9:
23:a8:15:aa:59:c0:24:9f:9b:39:46:0a:fc:fc:76:
fa:0f:0c:75:75:5e:db:0b:5f:7f:af:b5:7b:a2:a6:
2e:7a:40:40:19:8c:03:f5:13:1f:1d:fe:82:ca:64:
99:7a:06:28:75:8a:c3:3a:3f:b0:76:1c:fb:37:0a:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:EA:A2:AC:88:AD:49:13:CB:A5:02:76:6F:07:2C:2F:58:9E:C2
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:de:3f:5b:0c:91:74:1c:77:e3:7e:51:3a:ec:da:ad:4e:f7:
0a:ab:37:28:e4:e2:8a:9f:81:02:19:c4:93:1d:c8:47:39:b2:
50:21:61:4e:0d:a5:6d:2b:e9:6c:fd:1e:2f:59:7b:d8:52:28:
24:f5:63:85:0d:12:24:d0:a3:4b:8b:b4:73:a7:ed:c3:b0:e8:
10:3e:2b:b6:21:c8:7a:da:e1:cf:53:ce:30:bf:29:fd:bc:30:
4e:41:4e:c3:47:b4:5e:35:69:9d:db:38:2c:2e:73:62:da:d4:
b7:fe:96:a9:50:c6:56:21:a6:7e:01:0d:8b:62:7c:f5:5f:ec:
bc:12:06:3c:bc:20:ea:94:12:bd:2d:3a:c4:a8:9a:e6:bd:38:
76:55:c4:55:cd:7a:b5:bf:4f:52:d6:62:63:d4:c1:e8:7b:59:
66:66:70:ea:a2:0e:3d:a7:71:f6:fa:50:2c:da:3e:a0:2d:86:
52:76:2c:f1:0e:12:65:25:36:7e:0e:7c:d7:9f:2c:08:e3:96:
5f:fc:c0:38:42:5e:4e:12:04:9b:b2:c0:3f:81:52:9e:5e:b1:
ef:c3:ac:82:8e:45:8f:6f:68:1a:75:f1:72:ed:88:af:9b:c1:
f9:d0:5b:b9:d2:55:87:15:f8:50:bf:c8:d9:55:77:98:2b:ac:
d5:ac:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:59:57 2026 by rpki-client