Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: 9trI7++8JW2XLPmQ0O48HOvUZwP9jxNvcwQUYmXj6RE=
Subject key identifier: 4D:F6:74:A1:8E:5F:EE:A3:1C:42:63:5D:88:E6:E8:70:C3:32:59:AB
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 01A1212F6E028A5C8C048586B96753BB936B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 08C4
Signing time: Fri 09 Oct 2026 15:01:58 +0000
Manifest this update: Fri 09 Oct 2026 15:01:58 +0000
Manifest next update: Sat 10 Oct 2026 15:01:58 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: FGSyTDQi/9GAsDtqRUawgGJhqAOVHeH/EB8wtSFYylA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:6e:02:8a:5c:8c:04:85:86:b9:67:53:bb:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Oct 9 15:01:58 2026 GMT
Not After : Oct 10 15:01:58 2026 GMT
Subject: CN=4df674a18e5feea31c42635d88e6e870c33259ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:41:d7:f4:32:2f:9e:83:a1:20:dd:4f:8a:
d5:2b:47:f9:9d:15:2b:c3:b3:bc:3d:c2:f3:86:83:
9f:b7:40:5a:ac:fd:1f:a6:c2:a6:24:61:da:d8:f1:
1a:97:04:0a:58:44:1a:cc:7e:0d:9d:92:3e:25:bb:
26:17:3a:f4:4d:5a:da:27:0b:54:27:68:37:80:a0:
92:17:59:50:65:af:88:ed:3c:16:6a:4d:1d:ec:84:
95:8f:41:7f:04:9f:df:18:f7:9d:c6:db:c4:f9:73:
7a:76:81:0a:91:ed:4b:6e:57:f0:4f:3b:2c:8a:05:
20:e8:6a:7b:3f:c0:3b:9e:bc:bd:5b:9a:d7:29:67:
d2:82:e3:ac:5d:50:12:0d:35:7f:9a:40:6c:8e:ae:
57:08:99:3a:db:c6:60:f1:60:3d:2e:91:85:7e:eb:
30:86:24:3a:41:e4:f1:62:3f:49:54:c6:9b:ca:67:
2c:d4:e2:57:14:bd:eb:39:4f:11:6d:a5:d8:3c:4d:
d2:84:46:1a:d7:c0:97:bc:3c:95:e4:92:a7:0a:f6:
23:19:2a:d4:cb:23:d0:e5:2f:9e:1e:19:a7:25:2e:
94:e9:80:38:ad:21:b8:63:cf:34:2d:9e:82:fc:22:
0f:84:91:e4:d8:bc:74:f0:38:6f:f2:ec:54:0f:d6:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F6:74:A1:8E:5F:EE:A3:1C:42:63:5D:88:E6:E8:70:C3:32:59:AB
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:56:17:56:98:cb:1a:ac:02:14:40:f3:be:91:20:8f:b3:1a:
d1:c2:37:1d:23:5f:d2:ad:2e:8f:a7:3d:2b:ab:93:1b:b7:0c:
36:30:17:b4:7a:1e:90:da:30:cd:2a:89:46:68:22:55:f4:28:
3a:cc:55:8c:91:2b:b0:8f:59:da:19:16:2d:a5:90:32:28:e8:
34:ac:37:7a:e8:59:ce:cc:37:db:2c:6b:f5:12:e9:81:13:d5:
a9:ac:4a:f3:45:0a:16:74:19:c6:b4:c5:66:e0:bf:cc:ec:99:
3e:c3:54:09:e3:89:d2:2a:a3:fa:aa:89:81:71:7d:4f:c7:1b:
ab:c2:0d:a6:47:98:6a:6b:4e:fb:20:fd:9d:3b:7f:75:81:8e:
3e:ff:86:e3:66:ad:c8:27:69:d5:46:5d:e5:d4:2a:09:c4:e2:
3e:d5:2f:a6:57:83:0c:f1:aa:75:c4:0c:4a:7f:76:ef:a6:24:
6c:21:f8:65:ad:54:79:c5:03:cc:1b:38:7c:90:09:3c:53:e5:
71:f1:1a:d7:72:55:a6:24:d1:ed:9c:45:4f:9c:2c:41:13:bc:
44:ec:06:2e:a0:ed:a8:97:a8:54:53:52:6d:c8:94:c7:bf:8b:
98:7b:61:07:2f:cf:cc:0f:87:63:e3:ed:39:a3:0d:7b:71:d5:
60:48:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:04:29 2026 by rpki-client