Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: QcBx90fduEG2aZM9WwbE0ZtgMza/S0u0mdhzSHDLvVU=
Subject key identifier: 8F:DD:0E:16:12:C4:8E:BE:E5:B2:4C:73:F2:8B:14:27:86:63:0D:D4
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019FAC767B6DFF52B94FBB3E3BAA401C36ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 0803
Signing time: Wed 29 Jul 2026 06:01:13 +0000
Manifest this update: Wed 29 Jul 2026 06:01:13 +0000
Manifest next update: Thu 30 Jul 2026 06:01:13 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: ahpeZSpabkNV2BL0fKEi1D1fkmw6obN899S84bRD/pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:7b:6d:ff:52:b9:4f:bb:3e:3b:aa:40:1c:36:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Jul 29 06:01:13 2026 GMT
Not After : Jul 30 06:01:13 2026 GMT
Subject: CN=8fdd0e1612c48ebee5b24c73f28b142786630dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:82:ea:77:ed:2b:03:5e:fd:65:55:04:99:
2d:91:01:24:4e:31:cb:5b:96:be:9a:76:ef:02:b7:
64:f0:d0:00:de:48:2e:45:68:09:41:80:dd:06:cd:
85:59:d3:26:d3:0f:e7:3a:08:e4:2c:72:10:b9:d6:
a6:7a:8f:e3:7a:a8:8e:fd:0d:a1:28:8d:2e:a4:a4:
dc:bb:69:34:07:08:49:e6:a2:86:0d:8a:b9:84:a5:
d5:5e:bc:f8:cc:e8:84:38:5a:30:ed:47:50:a5:59:
34:ba:bd:5d:da:0b:04:84:0b:90:46:2b:d1:14:c3:
a8:50:84:65:36:b5:de:7b:f0:0d:25:84:1d:76:e4:
21:a3:4d:94:a5:2a:60:8d:ac:2d:c5:6b:a7:8a:75:
00:ac:39:1a:43:d8:ef:f5:de:5f:67:2e:75:c4:5b:
e9:46:e1:ca:96:97:e3:f6:b3:79:32:9d:cc:e9:3b:
00:86:14:8c:e3:10:18:d6:1a:d6:b3:5d:e6:34:8c:
ca:84:99:7e:74:a6:07:08:3c:26:b5:03:cf:d0:bf:
32:ef:ef:c8:d9:15:40:3b:d5:c5:e4:56:cb:66:b2:
eb:b2:5b:b8:a6:45:0c:1e:4b:0d:05:af:b9:93:db:
06:ad:f9:3a:7f:10:0c:40:12:d0:d3:7e:03:66:a2:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DD:0E:16:12:C4:8E:BE:E5:B2:4C:73:F2:8B:14:27:86:63:0D:D4
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:57:5c:16:5a:49:06:20:02:b2:c0:3f:97:f5:c9:91:40:2f:
9b:be:81:ed:2e:80:cf:ca:4e:0e:9f:d2:dd:f5:eb:c2:c8:11:
2b:a4:35:c6:9e:9b:df:66:73:3e:af:46:b4:0d:c6:dc:cf:f4:
a5:a3:d1:d9:9f:79:59:b6:5e:c9:55:6b:99:23:23:f9:67:a4:
5d:37:ac:f6:ae:eb:2f:a9:c4:c0:0d:8b:10:97:bb:3e:ef:f3:
f0:93:ed:6b:fc:43:8d:1b:53:b2:05:f6:7e:07:24:b9:fa:4a:
c1:6b:58:84:99:c8:b3:64:cf:cb:63:3b:30:dd:99:59:8b:d9:
ed:5e:ef:ea:5d:38:b8:60:eb:5d:9a:a1:42:04:d7:98:22:01:
4d:e3:5b:9b:02:73:74:7a:94:fe:96:d5:46:9c:a3:15:00:c1:
a2:85:03:a1:db:08:3a:89:32:c3:9d:3c:aa:98:0d:6a:7c:f6:
89:8c:2a:9d:4f:6b:e8:4a:99:49:b7:b6:bd:72:a8:5c:81:58:
27:7e:6d:21:96:ea:2f:fc:03:ad:c8:8d:fd:13:4e:8a:a2:c1:
64:35:77:3d:10:d4:5a:70:3b:75:5d:30:f9:ce:8a:29:fb:9e:
87:d8:de:7e:2f:5f:50:49:c1:e1:07:31:b8:fb:a8:f3:93:19:
dd:de:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:22 2026 by rpki-client