Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: fq+6tykMsWVN4KdxTpAp9wCYaLGelBErfgnQuIhOTmw=
Subject key identifier: AC:9E:EA:82:C9:BB:ED:04:68:C6:71:F8:9F:48:5C:D4:92:FA:84:89
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 019FA974BEBD1B96EAF9975D68710C8FA08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 13E2
Signing time: Tue 28 Jul 2026 16:00:28 +0000
Manifest this update: Tue 28 Jul 2026 16:00:28 +0000
Manifest next update: Wed 29 Jul 2026 16:00:28 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: z+64GCISLdtmZ40q4nEPJZobBpBZ+damrmuqVIWIHjc=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:be:bd:1b:96:ea:f9:97:5d:68:71:0c:8f:a0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Jul 28 16:00:28 2026 GMT
Not After : Jul 29 16:00:28 2026 GMT
Subject: CN=ac9eea82c9bbed0468c671f89f485cd492fa8489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:9d:e7:da:d2:64:9a:fb:e3:35:dd:88:c8:
47:7f:92:1a:19:52:19:e5:4e:d8:79:13:e2:d9:95:
e8:96:76:23:51:a7:28:1c:be:b5:ad:02:75:80:c9:
c0:3a:c1:ad:1f:9d:28:fd:d6:2c:07:8c:73:85:21:
a0:9f:6b:a4:90:22:0f:c3:86:11:61:e8:7b:e0:69:
36:e9:f1:de:f1:78:17:07:cb:a0:78:60:61:a3:91:
5a:b5:23:e2:86:63:b1:dd:59:35:a4:c1:c2:4f:33:
4f:2d:4e:50:ee:4c:2b:3f:c9:5d:71:7d:38:dc:b8:
0d:1d:8e:e4:c3:19:22:64:54:dd:f5:b1:86:5c:6b:
58:fd:5d:04:5e:5f:d2:6a:b2:ab:48:ce:d6:69:14:
1b:0f:d5:a1:ff:15:ef:ad:84:7d:4b:23:e1:99:6b:
8e:1b:70:a8:61:a7:c0:e3:4e:5b:cc:6c:0f:78:39:
46:d7:e4:41:35:ec:3d:f2:db:b4:b8:f5:ea:c4:e9:
fc:52:81:c6:19:5c:24:cf:c3:89:38:7e:63:e7:e4:
58:35:fb:81:ae:4f:1f:18:af:42:a2:08:25:fb:df:
8d:27:35:bc:7f:fd:12:53:ed:17:42:38:5e:54:99:
f6:c1:92:b9:81:d6:ea:92:00:7e:f9:9b:f5:79:f3:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:EA:82:C9:BB:ED:04:68:C6:71:F8:9F:48:5C:D4:92:FA:84:89
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ee:86:60:16:64:33:d5:a9:3a:6a:87:be:5c:56:bd:9a:4d:
cd:b4:20:97:6c:c2:04:43:9f:ad:44:7d:e1:5e:47:56:2f:59:
d9:ad:9c:d0:e8:39:27:66:87:61:bc:1d:31:3c:bc:ee:9f:2b:
2f:61:13:b4:db:02:2f:3d:2e:d5:3b:8d:c9:97:fd:fd:d2:d6:
4d:6b:66:b4:58:57:12:18:ca:2f:6a:2d:24:93:7c:bd:c5:03:
0a:e3:20:50:40:99:b6:3f:46:c0:a4:a2:1c:39:75:af:82:64:
90:5f:65:ad:b2:8c:68:65:d4:5b:7a:49:bb:56:52:be:6f:2f:
c4:aa:34:aa:57:67:a2:b7:e7:31:c8:a5:18:c6:8f:f4:cd:db:
c5:d9:39:f4:3d:ff:ff:20:5a:88:96:62:4c:72:0d:50:89:53:
55:29:44:5d:fb:92:3c:7c:ba:e2:a5:d2:9c:ff:ff:fc:9e:46:
70:b7:b9:35:f9:93:b1:ff:83:f3:48:ef:29:25:10:0f:0a:df:
77:b4:04:6e:b0:e8:99:84:1f:09:a5:29:58:77:4e:33:34:dc:
8e:fe:eb:c2:50:71:f8:44:cf:0d:d4:51:f6:60:b8:07:ca:55:
eb:b8:12:c4:71:b3:94:49:40:75:89:94:94:43:7b:aa:47:8e:
43:70:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:19 2026 by rpki-client