Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: cc9S/kJ/252maqszj5Glp01g1U60pCdWfaj3vX73YFM=
Subject key identifier: 25:9B:7D:27:31:12:DE:A3:48:A1:03:78:14:4D:D5:FE:F8:31:A5:AA
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 01A11F3F913DCC95D22C79F4B8F5B432BC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 08C3
Signing time: Fri 09 Oct 2026 06:00:21 +0000
Manifest this update: Fri 09 Oct 2026 06:00:21 +0000
Manifest next update: Sat 10 Oct 2026 06:00:21 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: nlrwG3zjgzdDXUBnKQALp0ZgT4YdaKiEXrSF4FA9nD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:3f:91:3d:cc:95:d2:2c:79:f4:b8:f5:b4:32:bc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Oct 9 06:00:21 2026 GMT
Not After : Oct 10 06:00:21 2026 GMT
Subject: CN=259b7d273112dea348a10378144dd5fef831a5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:d8:fd:26:ab:eb:b8:bf:0a:57:c8:fb:94:
a7:07:9a:74:e2:85:c0:27:5f:24:fa:c7:d3:bd:5c:
c2:20:08:b2:b2:e1:cc:b0:22:d9:b0:11:9d:40:1b:
be:10:69:79:b8:f6:f0:f0:14:60:fd:97:87:ab:ed:
66:96:a3:8e:29:80:04:c3:00:de:4b:5b:8d:a7:f4:
37:4a:37:49:d7:29:08:14:95:06:05:80:2a:29:bc:
6b:97:a8:8e:6f:4a:b3:a2:a3:2b:eb:22:13:f4:c7:
27:dd:37:6e:27:69:cf:54:eb:b2:ee:d5:50:74:62:
b1:7b:87:f8:4e:2a:29:32:b2:61:79:fb:ac:ad:d6:
f2:58:dc:2e:5c:9d:17:7b:88:f2:16:39:80:a2:a3:
44:22:67:14:86:37:df:e8:09:1e:7b:c3:e1:1f:c3:
93:ff:70:df:48:af:e0:63:78:83:3d:96:e6:d0:9f:
6d:f9:5a:ab:2b:67:74:54:13:2f:cb:96:3a:51:fd:
64:8a:ee:80:ec:48:d2:84:09:8a:71:0a:c3:6a:88:
2d:73:50:3c:b3:ca:75:96:94:75:4e:44:ab:6b:69:
88:95:cc:52:ae:a4:30:74:a9:ef:2c:80:93:d4:d0:
54:ed:9b:fb:2d:a6:24:a9:1f:f0:00:25:4b:f0:0e:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:7D:27:31:12:DE:A3:48:A1:03:78:14:4D:D5:FE:F8:31:A5:AA
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d5:f5:11:91:76:63:8a:22:33:1c:2c:db:b4:89:37:c6:76:
27:c6:72:37:2a:09:51:5b:38:88:f4:97:39:2c:83:e3:b5:f0:
f3:61:29:65:63:cd:44:90:e8:30:2e:1f:d0:b7:fb:1e:25:56:
2a:80:de:1c:fe:4b:e6:a6:93:a9:33:44:60:62:86:68:5a:9f:
72:2c:c3:23:e1:b9:7e:7c:3a:23:4f:9a:e0:4d:2e:f2:c8:5e:
bf:27:ee:0e:d4:a4:97:2e:2e:37:ad:35:1a:34:1a:2e:e8:47:
a2:cc:8d:39:8e:c2:0b:f4:e4:8f:ae:72:ed:18:8b:20:b9:49:
7d:27:29:e8:ba:2d:65:7e:d9:7a:20:7f:1d:8f:06:bb:78:37:
48:9c:ef:61:6b:83:2a:ba:b0:94:95:75:b5:e7:9f:34:25:0c:
3a:c3:50:71:9e:ba:7b:cf:3d:8f:62:f3:cb:6e:c0:e2:d3:90:
29:22:bb:f3:67:41:eb:d6:5f:7f:fc:a3:5a:4e:57:9f:7a:eb:
20:3d:34:c7:5c:e8:76:30:2a:6a:89:91:cf:ef:6a:2c:69:74:
2d:1c:db:66:99:eb:d9:d9:78:e9:d6:07:48:ec:55:59:97:1e:
20:80:33:18:d8:d6:d4:f9:aa:66:e6:0e:31:d7:0e:91:82:70:
7c:0f:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:11:29 2026 by rpki-client