Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: MfkAV5Q9Iboqh5hpOXhgbSnhUmNgqbhEWprB0dqDfSk=
Subject key identifier: E1:14:54:83:FA:58:22:73:BB:96:4F:EF:36:FD:84:D7:EB:E4:18:B1
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 01A0C746B4AFF5F8B3F07065C260E8DA4141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 1476
Signing time: Tue 22 Sep 2026 04:01:34 +0000
Manifest this update: Tue 22 Sep 2026 04:01:34 +0000
Manifest next update: Wed 23 Sep 2026 04:01:34 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: sSiU/pT2bj1tlAwWptz2IZM4KRprvvLvcu73uwZz6WY=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:b4:af:f5:f8:b3:f0:70:65:c2:60:e8:da:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Sep 22 04:01:34 2026 GMT
Not After : Sep 23 04:01:34 2026 GMT
Subject: CN=e1145483fa582273bb964fef36fd84d7ebe418b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:0c:b7:96:48:3f:dc:d9:55:a9:9d:33:b1:
12:76:75:a6:e1:e3:c9:e9:8b:d0:9d:a2:be:9d:56:
56:1b:94:97:ee:e2:ba:cc:4b:da:15:bc:c8:80:15:
7b:99:22:3e:59:d0:d7:74:0f:bd:3f:21:0c:6e:8d:
17:d1:f7:67:a6:ac:e1:a7:9e:26:1f:12:32:6f:1b:
12:fa:3d:9a:41:02:1b:93:21:a5:30:4b:4b:1f:e2:
81:7d:94:0f:4d:51:1e:04:2a:25:8f:68:70:8c:aa:
00:d5:90:81:08:07:91:4a:9b:71:cd:94:5b:51:d4:
87:66:c3:f7:c0:c5:ee:ee:ce:26:5b:91:7e:5a:67:
fd:36:b9:6b:70:73:1d:c7:b6:9e:86:97:66:0a:de:
3f:dc:ea:63:d3:65:8e:5a:98:7b:6b:66:c7:98:6a:
e5:a7:25:9e:ea:e4:31:06:8f:1e:e4:76:3c:42:1d:
73:c9:ee:96:d6:e6:02:19:12:80:de:b9:a0:02:04:
d7:19:8b:3d:c9:d5:45:22:7d:d5:90:d8:e1:3a:6c:
63:17:d0:7d:39:e9:7f:78:24:e5:a0:75:42:c8:4e:
22:ae:01:c2:cf:76:c1:6d:35:c5:a4:67:b4:4e:7b:
25:f0:2f:24:87:c3:21:19:64:4b:61:fb:6b:a6:02:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:54:83:FA:58:22:73:BB:96:4F:EF:36:FD:84:D7:EB:E4:18:B1
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b9:37:55:1f:44:e7:40:31:c6:75:e3:65:80:fc:f1:d0:0f:
11:25:47:76:c4:ab:0f:64:4f:de:88:a5:b1:46:b1:7b:81:e8:
9b:8f:c2:2b:9b:8c:75:c9:d2:f1:64:5b:de:29:34:ee:1d:76:
c4:b1:25:de:dd:87:95:31:28:a4:0c:5a:de:cd:97:56:8d:d3:
d1:ce:88:15:68:1d:9e:a6:15:fe:90:11:76:a1:22:fe:62:a5:
44:52:c5:52:77:2c:d9:ce:85:b3:23:92:8b:0d:5a:29:9f:da:
b2:50:c4:51:47:4f:fc:5c:ce:39:40:1a:b0:72:44:e3:ea:f2:
ae:b2:13:aa:86:98:9a:00:6a:cc:4f:50:cb:30:3e:ca:89:3d:
30:d9:f1:24:b1:e5:bc:c4:af:0e:75:38:7a:9d:c0:44:b7:a7:
1b:89:13:09:1c:e6:90:12:3e:aa:a5:ae:40:28:ef:42:19:08:
22:a8:7b:7d:fe:1b:20:6c:61:99:bd:4b:2c:90:90:6d:62:4a:
ab:9f:c5:1f:f2:77:45:83:2d:1e:31:94:56:18:d4:e2:be:58:
58:a0:c7:8c:64:0e:2d:8f:ca:10:13:3e:77:7c:ac:2e:4e:cb:
25:17:03:12:8d:78:2b:ff:cc:22:2f:f6:b0:7d:0c:71:d2:ba:
89:62:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:50:28 2026 by rpki-client