Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
File: i7nJXujwyzU8HemSB5KjTTAkRhc.mft (raw, json)
Hash identifier: bLI5peYyjDhZHXEhPDB7nCViaoiTF1Q6Ib27c2wbdH4=
Subject key identifier: 2D:F9:61:CE:9A:57:23:5C:C0:D7:E2:92:61:EF:25:71:FA:C6:53:76
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 01A0E663BCACE27494CA6DC6C2AE1ADD71E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
Manifest number: F3
Signing time: Mon 28 Sep 2026 05:01:30 +0000
Manifest this update: Mon 28 Sep 2026 05:01:30 +0000
Manifest next update: Tue 29 Sep 2026 05:01:30 +0000
Files and hashes: 1: i7nJXujwyzU8HemSB5KjTTAkRhc.crl (hash: hiA/wsCemkFzA+Jq5lbJLRVFzAvNzp/vgArM+jdP7Q0=)
2: muClETW590rnAhhdFCIA-PKzx8Q.asa (hash: 36o5H1jwMvZNZc8onjj4S28x1eYQDO0IkGOM8Fu+qqc=)
3: y-4-nqSYc3tqTRazNlGQZP2DnP8.roa (hash: GfYO8yyGaWypKYXSBMap3Z6gCCFnS4WexpcfM9iCxAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:bc:ac:e2:74:94:ca:6d:c6:c2:ae:1a:dd:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Sep 28 05:01:30 2026 GMT
Not After : Sep 29 05:01:30 2026 GMT
Subject: CN=2df961ce9a57235cc0d7e29261ef2571fac65376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:eb:bc:92:76:dd:62:a9:38:9d:3e:ec:cf:
5f:ab:07:0f:55:04:47:88:9b:37:24:d9:5b:b0:60:
5e:64:7c:35:99:41:c8:39:bf:39:35:69:67:9d:68:
4c:a5:ff:6a:ce:73:63:2c:20:30:e8:d0:d3:ab:8a:
32:c5:f2:f3:48:bd:a1:ce:3f:2c:13:12:ab:6b:82:
2c:ee:88:0f:f6:0a:44:af:69:c4:1d:6d:ee:90:76:
43:82:a4:a8:f0:78:2d:4d:48:8f:7b:8d:ab:1a:93:
9f:48:ca:4e:d2:e4:d4:a0:f9:94:53:9d:fe:eb:66:
cb:e2:e1:e8:32:ef:30:6f:67:9e:54:ec:4d:ec:79:
64:df:d2:2a:4b:17:81:52:0c:4a:e3:65:ee:73:87:
0a:77:a4:1e:5a:b3:4d:e6:a2:20:29:2c:b3:a9:af:
ab:91:e2:0e:42:20:2c:9a:74:b6:18:f0:c2:0f:e5:
05:d3:c9:15:80:57:58:47:01:84:fe:4f:ec:95:30:
95:37:e6:8b:db:57:8d:24:b7:2f:db:bb:36:ae:91:
d3:5e:17:6f:49:19:35:4e:f2:9f:30:05:e1:d7:7c:
86:c1:d4:50:13:de:e6:db:c7:65:92:64:f6:79:e7:
0b:a2:81:ce:65:64:ad:35:f7:c7:67:57:b3:0a:56:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F9:61:CE:9A:57:23:5C:C0:D7:E2:92:61:EF:25:71:FA:C6:53:76
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:06:b0:f2:66:7e:18:d6:2f:8e:af:0d:da:73:20:49:b1:cc:
00:00:7f:6e:be:2f:56:89:51:ca:72:44:b8:65:06:a4:c1:00:
d9:de:41:87:de:6f:94:94:63:42:9b:a7:b5:39:20:21:4c:66:
68:03:a1:aa:ec:9c:33:e3:3d:24:6a:7e:15:33:28:c3:1c:37:
07:1b:23:12:36:a6:af:bb:6b:9b:f9:02:00:0b:56:09:47:90:
fd:d7:e1:28:6f:56:fd:3a:b5:b3:46:ea:8c:6b:d9:56:1c:a8:
f4:73:9b:61:75:e5:ea:1c:af:3b:b8:d3:49:cb:f6:f0:9a:8e:
52:82:ac:1d:f5:bb:c0:e7:9b:36:b5:d3:a8:19:70:b3:54:d9:
d8:71:2f:c4:de:3c:a1:33:38:fe:b5:41:ce:2f:15:da:1c:7b:
45:7c:1f:b5:5e:f1:37:e2:c2:5d:06:d7:52:a3:93:35:56:71:
fa:fd:31:55:d4:60:f6:49:59:29:b8:cb:7d:8e:2d:9c:f5:67:
5e:ae:c1:79:5e:17:a0:0a:9c:2e:50:ab:bf:2d:fc:7f:92:5a:
7e:37:93:02:83:51:36:dc:ae:cf:f8:e0:fe:72:74:8b:4c:1f:
84:01:e8:6b:9f:c2:ec:f7:18:4c:30:2a:3b:ee:d0:8b:d4:f5:
21:a2:67:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDmY7ys4nSUym3Gwq4a3XHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjljOTVlZThmMGNiMzUzYzFkZTk5MjA3OTJhMzRkMzAy
NDQ2MTcwHhcNMjYwOTI4MDUwMTMwWhcNMjYwOTI5MDUwMTMwWjAzMTEwLwYDVQQD
EygyZGY5NjFjZTlhNTcyMzVjYzBkN2UyOTI2MWVmMjU3MWZhYzY1Mzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN/rvJJ23WKpOJ0+7M9fqwcPVQRH
iJs3JNlbsGBeZHw1mUHIOb85NWlnnWhMpf9qznNjLCAw6NDTq4oyxfLzSL2hzj8s
ExKra4Is7ogP9gpEr2nEHW3ukHZDgqSo8HgtTUiPe42rGpOfSMpO0uTUoPmUU53+
62bL4uHoMu8wb2eeVOxN7Hlk39IqSxeBUgxK42Xuc4cKd6QeWrNN5qIgKSyzqa+r
keIOQiAsmnS2GPDCD+UF08kVgFdYRwGE/k/slTCVN+aL21eNJLcv27s2rpHTXhdv
SRk1TvKfMAXh13yGwdRQE97m28dlkmT2eecLooHOZWStNffHZ1ezClaRxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC35Yc6aVyNcwNfikmHvJXH6xlN2MB8GA1UdIwQY
MBaAFIu5yV7o8Ms1PB3pkgeSo00wJEYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAt
YTk2MTAyYzgzNjQxLzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAtYTk2MTAyYzgzNjQx
LzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwaw8mZ+
GNYvjq8N2nMgSbHMAAB/br4vVolRynJEuGUGpMEA2d5Bh95vlJRjQpuntTkgIUxm
aAOhquycM+M9JGp+FTMowxw3BxsjEjamr7trm/kCAAtWCUeQ/dfhKG9W/Tq1s0bq
jGvZVhyo9HObYXXl6hyvO7jTScv28JqOUoKsHfW7wOebNrXTqBlws1TZ2HEvxN48
oTM4/rVBzi8V2hx7RXwftV7xN+LCXQbXUqOTNVZx+v0xVdRg9klZKbjLfY4tnPVn
Xq7BeV4XoAqcLlCrvy38f5JafjeTAoNRNtyuz/jg/nJ0i0wfhAHoa5/C7PcYTDAq
O+7Qi9T1IaJnGA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 11:36:15 2026 by rpki-client