Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: xgCYZ3YeqD3XMYn1UHq0cjuU3zDmsPrgvcGEH2gp+ZM=
Subject key identifier: 68:B8:07:9E:32:8C:55:F0:8F:A4:77:E9:D6:D3:08:8E:9A:85:F7:34
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019D9962302868AA11A0EFA0BCFCD3F29EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 06F0
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: +04NHiZKwzMaP2kPz1WKq+ZND9cXcDlHRxctjNebDq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:30:28:68:aa:11:a0:ef:a0:bc:fc:d3:f2:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=68b8079e328c55f08fa477e9d6d3088e9a85f734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:fe:13:ec:ae:06:14:95:26:b4:1a:98:45:
ab:8a:de:d1:45:a7:3d:f7:e7:4e:e4:1d:f0:df:e1:
1b:d1:db:b2:4c:a3:26:17:c5:cc:e0:fb:fa:45:76:
d7:02:48:f2:21:98:18:7b:c0:45:22:20:7d:20:7f:
d8:62:51:02:48:bb:69:3d:86:d8:ab:fc:72:5b:e8:
ba:04:2c:87:65:bf:1e:e7:74:75:6c:c6:1a:13:cc:
84:6e:2c:e7:e5:22:ed:44:4b:7e:ac:54:48:2b:14:
e8:55:ef:cd:9f:b6:54:8e:c7:76:cd:5a:0b:9d:58:
d5:65:94:df:64:b6:20:23:aa:17:6d:71:36:ff:01:
9e:4e:36:4f:37:36:83:46:8d:ee:11:7e:f0:52:a7:
61:29:bb:c3:37:c6:be:17:26:05:d4:44:1e:d5:13:
2a:da:e0:b9:f1:e2:9c:f7:8b:98:ec:c9:4e:45:b3:
4c:62:54:af:7b:86:b0:de:4b:7a:a7:28:0b:69:5e:
32:26:31:f9:35:37:5f:9e:92:a6:a4:75:d3:4d:ad:
65:0b:72:13:f4:bc:56:55:1d:fb:00:67:ab:7f:49:
4d:cb:1a:42:05:60:39:71:40:c4:78:8f:5c:10:0b:
4a:96:fa:d9:a2:a8:a4:c6:58:77:74:5b:f6:6c:41:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:07:9E:32:8C:55:F0:8F:A4:77:E9:D6:D3:08:8E:9A:85:F7:34
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ee:fb:8e:56:89:b4:d5:49:60:29:a2:ea:5b:5a:02:0a:93:
c7:0d:1b:dd:3e:2f:78:84:23:ad:65:68:00:b4:1d:d2:df:eb:
02:3e:8d:bb:1a:47:d7:f0:b8:cf:76:80:8d:cf:47:07:f4:a0:
b2:cf:db:22:ae:2e:0d:bf:28:42:52:b7:5a:d2:ef:2a:e7:cb:
3a:49:ff:f9:c7:04:45:7c:ad:6e:72:84:12:ef:d0:58:ce:a6:
dc:18:45:a3:71:a6:cb:6e:67:46:2b:af:af:fe:c8:37:44:a1:
8a:38:c4:98:f9:e6:fa:bb:c2:d4:91:55:3f:cd:97:f5:4a:53:
6c:85:c3:79:be:6b:8e:ba:26:a1:fd:ec:d8:a6:39:fb:c9:b5:
f8:ca:72:0e:c7:b2:7d:0f:b1:d6:42:69:eb:80:eb:64:96:41:
1c:f4:18:0e:e5:4f:c7:75:d6:74:56:73:10:a7:9c:18:5d:15:
36:fc:59:ec:9c:0d:01:f5:d4:87:7d:1e:34:6e:5c:f3:42:0c:
37:8c:e0:b5:71:1b:a4:5c:52:f6:42:c6:8f:1b:46:da:18:81:
7e:b4:da:d9:d2:af:0d:de:2f:20:ee:8a:a9:12:fc:69:26:52:
7e:41:4c:54:60:c4:25:ad:e1:d8:f8:0e:4b:a7:64:d2:79:4e:
46:b8:f2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:21 2026 by rpki-client