Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: hee+ifw54zBYRTvK2yMPL8k5wf1voEqjrE7b9dMRzP8=
Subject key identifier: CB:40:1D:0C:B1:A7:DC:19:50:9A:6C:02:F1:31:78:44:EE:0A:A0:C1
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 01A10324598DB188FCFA47D90DC525037A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0E17
Signing time: Sat 03 Oct 2026 19:01:16 +0000
Manifest this update: Sat 03 Oct 2026 19:01:16 +0000
Manifest next update: Sun 04 Oct 2026 19:01:16 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: PuhXrT7GN1/Gm54mc4cUqIxP2FzH/QIiS69WeQBGdIk=)
2: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (hash: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:59:8d:b1:88:fc:fa:47:d9:0d:c5:25:03:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Oct 3 19:01:16 2026 GMT
Not After : Oct 4 19:01:16 2026 GMT
Subject: CN=cb401d0cb1a7dc19509a6c02f1317844ee0aa0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:3f:97:a1:54:00:a9:00:c9:65:74:5b:1a:
57:cd:34:26:0e:4a:68:86:6d:ec:da:a4:0d:dc:8c:
86:0d:76:2c:14:ab:e1:b0:57:31:72:88:d3:58:43:
ae:03:00:23:c0:0f:79:19:be:83:e5:68:cc:88:69:
b4:35:dd:00:7f:f1:d0:64:b7:a7:4a:f4:3c:b4:53:
f3:93:eb:c3:e9:c3:41:93:c7:45:40:4f:52:03:6b:
af:bc:cf:8c:5d:52:4e:00:4a:28:31:d1:39:0c:dd:
61:48:05:66:de:6c:c4:c1:17:54:92:75:a9:16:61:
d6:68:a8:33:58:dd:4d:f8:e1:e3:ec:30:6d:35:20:
3b:a7:e2:bb:6f:bb:b3:5d:3b:70:d4:69:d2:fa:38:
35:1d:1f:12:d3:ad:54:ca:da:e5:e6:fa:7f:b7:e9:
19:3f:78:b7:10:6d:2c:01:ba:63:a1:2f:75:dc:93:
b7:09:70:87:9e:c9:f1:90:47:6d:24:38:c8:e3:b6:
99:0c:64:f2:f4:00:05:63:98:ef:ab:53:7b:1a:38:
c9:bf:a3:f2:2b:4d:d4:69:46:06:ed:7b:8e:da:3f:
29:9a:73:9e:14:0f:7c:90:50:5d:27:31:b4:ce:d0:
aa:e9:eb:3e:10:1a:57:8f:22:ec:f6:2a:26:71:0b:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:40:1D:0C:B1:A7:DC:19:50:9A:6C:02:F1:31:78:44:EE:0A:A0:C1
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:56:6a:7a:8d:05:35:72:29:fd:c4:66:44:83:4d:37:15:d1:
f0:29:fe:a9:09:56:a8:04:db:13:66:91:c4:06:ed:2b:db:cb:
b1:58:05:ad:e3:5d:f0:b2:77:1c:6b:b7:c1:bf:ee:9c:c1:c1:
19:0d:2a:43:e6:13:c4:4d:2a:e4:65:14:0e:3c:74:82:91:6c:
85:26:e2:70:cc:2c:6a:ac:7d:b1:a0:89:8c:03:42:fe:49:26:
ef:36:6d:cd:76:4e:f3:b5:0c:c6:ac:34:5b:82:55:03:f1:96:
fb:86:ba:25:5b:49:df:b4:ff:6b:ad:2e:2b:75:68:f3:6c:99:
d7:47:e9:3d:e6:6f:f0:6b:19:10:87:9b:16:70:5c:73:89:68:
cc:6b:be:24:46:60:6e:15:27:97:45:d8:9d:ee:a2:e3:24:1b:
02:14:8f:14:cf:11:0b:22:a1:73:c2:21:41:da:a5:a3:d8:b5:
79:cd:3e:e2:cc:f3:00:d6:b3:f4:09:cf:ef:69:f8:be:86:df:
94:af:00:a4:2f:b2:25:01:30:50:c1:f6:dd:0e:44:93:3a:10:
23:77:b3:cd:bf:22:ca:f8:56:03:86:e4:ea:ac:31:ff:c3:7a:
1b:58:2d:01:da:d2:e2:20:8c:f3:7c:ab:82:ea:d0:4d:3f:98:
04:c8:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:14:08 2026 by rpki-client