
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
File: I8-ih96iNF6mFxqkd9aO4tu0leE.mft (raw, json)
Hash identifier: RaoZo4iTduS/VTM68C43bA+ds+iGl+mZz2wu/qGXowM=
Subject key identifier: 0A:DB:70:57:9D:EF:49:CF:EB:A1:71:77:7C:1D:88:E8:2E:88:74:A2
Authority key identifier: 23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
Certificate issuer: /CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Certificate serial: 019FAB9A7AD875B49398FE58CA295E244C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
Manifest number: 24
Signing time: Wed 29 Jul 2026 02:00:55 +0000
Manifest this update: Wed 29 Jul 2026 02:00:55 +0000
Manifest next update: Thu 30 Jul 2026 02:00:55 +0000
Files and hashes: 1: I8-ih96iNF6mFxqkd9aO4tu0leE.crl (hash: /sgpKUZJr6nQ+ZzElwpYnIueqHe5e7QV0kolZpDBcUU=)
2: nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa (hash: 2xC+OBt7tpzzZYodQEHxjgbtCV8j6Hf0yChdWEZU97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:7a:d8:75:b4:93:98:fe:58:ca:29:5e:24:4c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Validity
Not Before: Jul 29 02:00:55 2026 GMT
Not After : Jul 30 02:00:55 2026 GMT
Subject: CN=0adb70579def49cfeba171777c1d88e82e8874a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:60:a5:e3:32:af:9d:2b:05:23:88:df:7b:
76:39:e6:91:90:fb:3b:67:3d:df:0d:8c:bf:e6:57:
5e:e2:67:54:79:40:ae:20:d7:3d:de:5c:fb:08:13:
b4:62:82:9a:4e:87:77:c6:e0:0e:ac:1a:de:d7:11:
77:f6:5f:0a:9b:72:ef:e6:3e:60:26:f2:d6:f5:7e:
c3:28:f2:4a:1b:0f:93:c6:5e:83:c1:c1:5b:67:c0:
2f:40:03:60:f6:a4:fb:35:c1:72:b6:57:15:04:4e:
9a:d5:11:66:6c:cd:43:85:62:68:d3:e9:9a:70:5c:
23:1c:35:c0:09:0f:1e:87:6f:9f:98:5f:fe:7b:7e:
3d:92:8e:8c:2a:2c:12:4d:c8:2b:01:86:56:6b:44:
c9:eb:d5:47:f4:d2:12:ce:7f:89:57:13:89:af:cd:
7d:ca:8f:96:67:30:7e:5b:8e:a4:53:ad:f4:e3:fb:
1d:a9:e8:fd:f6:d3:69:2e:86:6b:2e:ea:06:77:28:
86:a4:f5:51:d7:76:da:3c:8b:08:c7:b7:5a:cd:9b:
85:3b:e3:c2:7b:eb:20:ef:6e:2b:67:2d:c8:54:45:
b8:d1:97:14:57:eb:72:76:af:c4:16:ba:04:61:09:
31:c5:4f:c3:40:cd:9c:d6:b7:a7:0e:9c:9d:51:95:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DB:70:57:9D:EF:49:CF:EB:A1:71:77:7C:1D:88:E8:2E:88:74:A2
X509v3 Authority Key Identifier:
keyid:23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:50:7f:4a:7e:9e:b8:f3:4f:78:d0:05:77:3e:56:61:4d:d6:
98:66:19:f0:08:02:91:9d:0a:4a:1d:85:b6:f7:92:12:75:53:
d3:58:93:4b:6e:05:fc:55:00:3b:d2:35:ae:7a:83:cc:4c:72:
8e:bd:81:d9:d3:63:2f:08:38:2c:58:ac:68:5f:6c:74:f0:21:
e2:d2:6f:88:0a:71:f7:6b:f1:ef:74:0e:8a:c7:bb:c2:af:66:
9c:c7:29:47:7a:e7:78:b0:75:0d:fe:a6:d5:58:3a:82:e0:18:
28:22:f1:71:15:e4:4b:30:97:e3:b2:7d:09:78:47:80:9c:ca:
a9:dd:44:b4:26:87:79:bc:ec:dd:c0:bb:bc:8d:88:3f:14:9a:
32:14:23:ab:1f:1c:21:1f:98:42:fa:18:0e:d6:f7:db:fb:3f:
b0:56:3e:a6:fa:b6:37:ee:bc:04:d9:72:ad:65:c1:29:dc:71:
e4:a1:eb:be:c4:25:d7:71:22:64:67:b9:9c:52:67:69:c4:ff:
7f:de:98:91:06:69:4f:23:6c:12:2d:48:ff:31:1d:ac:7e:38:
62:df:bf:f1:4e:ec:80:d3:07:bf:49:e6:a7:4c:ec:e3:3a:79:
68:98:cd:38:31:3c:7b:4e:59:0a:12:73:8a:52:a8:99:c4:f8:
9f:d3:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:24:14 2026 by rpki-client