Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
File: i60BoLmQw5T9iervn-IbiCjdd2A.mft (raw, json)
Hash identifier: jsJsgqS38My5UqX/u9lcKDo1q91toZMD4+rdrOn7kKI=
Subject key identifier: B8:35:4D:18:A3:00:76:FA:B1:11:0C:38:57:03:F9:CE:DB:CB:D9:11
Authority key identifier: 8B:AD:01:A0:B9:90:C3:94:FD:89:EA:EF:9F:E2:1B:88:28:DD:77:60
Certificate issuer: /CN=8bad01a0b990c394fd89eaef9fe21b8828dd7760
Certificate serial: 01A11B2C01D30294C719D22500254A9EF46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
Manifest number: 91
Signing time: Thu 08 Oct 2026 11:00:31 +0000
Manifest this update: Thu 08 Oct 2026 11:00:31 +0000
Manifest next update: Fri 09 Oct 2026 11:00:31 +0000
Files and hashes: 1: N6vQ7eGFbv_RL9EdI5U6EBK2p18.asa (hash: Fch7QVZ3P8cmumoOPv9qqT9H9WtThkx1Vup3ZvTYhII=)
2: i60BoLmQw5T9iervn-IbiCjdd2A.crl (hash: YVxrbV+xCRDe3ku6X3XsbwkIfePzsiRyW1fmKB6axgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2c:01:d3:02:94:c7:19:d2:25:00:25:4a:9e:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bad01a0b990c394fd89eaef9fe21b8828dd7760
Validity
Not Before: Oct 8 11:00:31 2026 GMT
Not After : Oct 9 11:00:31 2026 GMT
Subject: CN=b8354d18a30076fab1110c385703f9cedbcbd911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:f4:3a:aa:07:c3:91:56:1f:b7:55:1d:7b:
41:ae:11:fb:8f:c5:54:3d:5b:8f:01:76:83:5b:92:
ae:94:34:55:e9:08:2b:2d:03:33:d2:93:13:d7:e7:
8e:b0:a8:7d:31:63:0f:e8:fc:28:37:e2:02:4e:f1:
0d:af:bc:ab:39:10:de:ef:86:ac:87:58:01:2f:f0:
28:30:46:82:67:ee:16:6d:0c:87:8d:d2:e2:68:8e:
8f:2c:3d:44:23:b9:4d:80:a8:f1:f3:ef:7e:81:4c:
49:83:c5:96:a0:48:58:8b:1a:4a:30:75:fe:55:17:
09:a4:ef:43:a9:19:de:33:45:20:8e:11:82:31:54:
fd:25:7d:0b:3e:97:23:85:de:a9:12:53:bd:bd:c2:
92:d5:d4:73:9b:38:f0:d6:37:04:5d:95:fe:ea:ab:
2d:d4:e6:5f:b9:65:d4:63:15:e4:d8:cb:03:c4:92:
93:6b:98:63:a8:11:48:e5:01:35:d5:22:1f:89:a8:
a3:f8:c9:35:bf:f5:14:42:03:3d:7c:28:04:ba:b7:
d7:bc:4f:66:ff:07:70:57:be:ed:a5:4e:49:29:5d:
3a:16:da:11:d6:41:ac:e1:a3:d8:1a:a8:45:20:35:
b5:2c:46:2a:f0:af:43:a8:21:02:03:40:68:5a:69:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:35:4D:18:A3:00:76:FA:B1:11:0C:38:57:03:F9:CE:DB:CB:D9:11
X509v3 Authority Key Identifier:
keyid:8B:AD:01:A0:B9:90:C3:94:FD:89:EA:EF:9F:E2:1B:88:28:DD:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i60BoLmQw5T9iervn-IbiCjdd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8ba7c-3c04-4ef9-989d-dfa864914cce/1/i60BoLmQw5T9iervn-IbiCjdd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:71:4c:50:a6:09:30:37:ef:d5:09:e9:22:94:e7:6d:f3:e3:
33:12:45:90:7b:cc:c8:c7:f6:9d:47:5f:b9:e9:fd:69:60:52:
7d:3f:6b:64:88:d7:a8:39:15:36:6c:ac:e0:cc:ad:76:ef:72:
15:1f:20:6a:b6:6b:1d:9a:74:7d:62:0e:32:d6:97:00:af:1b:
e7:20:23:c5:c8:a8:33:e6:a8:66:74:2e:24:2d:17:f5:93:f7:
50:2d:fc:fc:97:ce:7e:bf:70:14:a1:84:58:a0:29:c4:52:99:
c1:59:90:76:76:3e:d7:14:ac:24:ec:5e:b6:fc:77:77:1e:9a:
35:1d:22:e6:42:78:c9:42:a9:07:82:1f:32:88:c1:31:14:9e:
a6:4b:90:68:5e:b4:d0:ee:bc:9e:98:7c:ff:5f:86:47:89:ed:
99:82:ad:96:2c:f1:ff:98:c6:84:0a:ec:0e:f7:8c:08:b5:b2:
99:d8:8e:41:7e:56:38:a7:88:89:43:61:ee:3a:fc:8a:37:ec:
8f:95:d5:f3:be:aa:1f:18:3f:17:bb:f8:7a:a6:bd:49:de:af:
51:7d:50:91:c0:49:9b:cd:d7:b2:dd:3a:4c:af:83:a6:e1:04:
72:78:88:66:1c:04:ca:a9:7b:28:57:e4:b8:92:5e:d7:00:83:
b9:99:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:21:56 2026 by rpki-client