Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: OzEdsxhKHolJRuTD5HyPN9qk9V7HV+MCybt7VSfA/Q8=
Subject key identifier: D6:31:5B:B0:ED:86:82:5F:47:A9:D6:F9:F8:F2:0D:E2:92:07:0D:17
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 01A101A3F0CFCC020AD534B8F7A5FB730783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 12:01:23 +0000
Manifest this update: Sat 03 Oct 2026 12:01:23 +0000
Manifest next update: Sun 04 Oct 2026 12:01:23 +0000
Files and hashes: 1: JOkPA8hTaCex6PevZHvmCNxtsfs.roa (hash: 0uXj8pryRRozEl6lHQb46ndxpU/qwFl9p2os5lcSSok=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: 8Q715Yi2Dhlv3V5yBEEVrxIZosCUkwz+NYrc4GurDv4=)
3: w883UTvE9aAPM26F3jGQ91P2JH0.roa (hash: Zo+XYBLtWLmmmelaOVtJ2aF9Vo4DulRMeStZXPCZZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a3:f0:cf:cc:02:0a:d5:34:b8:f7:a5:fb:73:07:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Oct 3 12:01:23 2026 GMT
Not After : Oct 4 12:01:23 2026 GMT
Subject: CN=d6315bb0ed86825f47a9d6f9f8f20de292070d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:80:e2:0f:94:1d:6e:83:17:85:3a:16:00:0d:
8d:d1:cc:79:95:ba:9e:0c:83:10:4c:22:31:da:36:
04:2d:16:31:d4:0e:a8:53:36:04:47:5a:2d:a0:4c:
d7:1d:36:e1:72:79:05:de:cf:08:e8:2c:ae:5e:38:
f4:17:13:12:60:b0:17:7f:f4:6e:f3:5b:d5:00:0b:
ae:66:99:9d:f9:00:ce:c0:d5:16:19:fa:71:eb:1f:
a8:f7:8b:6d:49:73:d0:1e:ba:f9:62:48:4f:c1:8f:
f7:45:e2:1c:11:0c:29:62:30:25:57:d7:57:7b:d3:
6d:82:97:02:3e:4f:6c:da:1e:2a:d2:73:88:10:21:
77:c4:26:2f:ae:9d:d5:8b:75:0f:bb:c1:b5:86:0a:
f3:b2:27:39:93:96:ea:f0:4b:d1:39:b4:c5:08:0e:
79:70:42:fa:db:90:0c:b0:9f:21:39:4e:44:30:a3:
37:bd:77:a6:7f:be:aa:ba:d7:e9:42:55:68:2f:8b:
e7:ae:dd:51:6d:df:24:b4:18:9b:04:79:f1:09:57:
93:ad:e7:68:8f:ca:a2:b0:a0:55:ad:a8:f1:75:16:
6e:d7:98:b6:c4:91:26:1e:d4:7b:df:55:9d:fb:cf:
b6:de:06:7c:2b:3d:97:ea:4f:92:af:d4:a9:74:ff:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:5B:B0:ED:86:82:5F:47:A9:D6:F9:F8:F2:0D:E2:92:07:0D:17
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1e:b0:1a:74:66:08:b2:f4:c5:90:8c:84:eb:c6:71:9b:c9:
88:a8:0e:8b:4c:c1:e3:02:23:e9:b1:6f:0d:4f:7d:40:37:c9:
e0:85:a7:9f:3e:1c:43:71:e5:c5:a1:3d:cf:6e:7a:12:7c:52:
a2:25:d7:d8:dd:a0:83:c3:53:f7:c4:bd:ad:42:a7:87:30:1d:
57:5d:6c:30:a1:98:01:fb:cf:de:15:d5:3e:1b:d0:19:df:40:
53:bd:5d:71:b2:e7:27:8c:3e:7b:6b:6f:6f:62:45:de:b1:32:
d1:48:05:c8:d8:4d:55:f1:49:ce:25:52:fb:29:3a:ea:b9:42:
96:08:e1:09:ac:8a:c9:0e:31:f1:a9:1c:93:60:7f:1d:85:de:
f6:78:3f:6e:ac:3d:e2:84:fe:93:5e:11:65:3c:ec:3e:64:44:
d6:8c:6a:42:a5:9c:30:b7:9a:41:26:ac:ad:ef:73:93:d7:31:
d2:61:20:70:8d:5e:26:92:62:d7:02:39:3d:a2:67:c2:30:b1:
43:5e:b9:f8:92:35:22:e2:57:e9:02:78:a5:51:34:13:39:b7:
14:8e:e1:73:79:72:4f:cc:fb:ad:93:8a:44:49:01:0c:dd:f2:
ad:85:26:7a:dd:b5:17:14:e4:f0:3d:54:e3:9f:02:53:d0:ef:
5e:54:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:15:18 2026 by rpki-client