Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
File: I8-ih96iNF6mFxqkd9aO4tu0leE.mft (raw, json)
Hash identifier: cETH1fDIURdvUsOHPeDOYL28ByQdugrenGO06sqbWb8=
Subject key identifier: 9E:41:32:73:35:D8:94:06:36:C6:8A:03:D1:D1:7B:75:C1:44:75:53
Authority key identifier: 23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
Certificate issuer: /CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Certificate serial: 01A0FF7EFB58A3895F0BEFF7C37E206341B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
Manifest number: D4
Signing time: Sat 03 Oct 2026 02:01:47 +0000
Manifest this update: Sat 03 Oct 2026 02:01:47 +0000
Manifest next update: Sun 04 Oct 2026 02:01:47 +0000
Files and hashes: 1: I8-ih96iNF6mFxqkd9aO4tu0leE.crl (hash: wceaRaOGAPzthTIIizjW1CStSsMWtnvh7/xiigKLKQ0=)
2: nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa (hash: 2xC+OBt7tpzzZYodQEHxjgbtCV8j6Hf0yChdWEZU97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:7e:fb:58:a3:89:5f:0b:ef:f7:c3:7e:20:63:41:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Validity
Not Before: Oct 3 02:01:47 2026 GMT
Not After : Oct 4 02:01:47 2026 GMT
Subject: CN=9e41327335d8940636c68a03d1d17b75c1447553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:ce:6b:de:8c:46:93:9d:48:3e:13:cd:9e:
a1:4e:20:33:42:31:46:d5:75:cf:17:90:de:84:01:
d9:9b:93:4d:e5:82:f6:91:ae:81:6e:00:ec:a4:06:
9b:9a:f4:5f:62:8a:5e:04:66:25:29:50:bd:04:67:
e9:74:f7:7b:77:47:77:55:a0:93:a0:63:46:d1:fb:
aa:7f:38:fd:11:ab:39:f0:74:d2:ee:fd:1a:03:77:
c5:e9:66:75:46:8e:a2:90:37:1b:c8:ca:25:71:23:
49:7a:24:51:b2:d2:69:c3:88:28:83:e2:a0:1b:ee:
dd:6c:46:7e:bf:89:3c:37:cf:c3:43:40:92:2e:e0:
d8:96:05:85:aa:60:26:55:ad:f5:85:cf:1d:62:7d:
e5:2e:8c:62:d6:8a:76:48:70:af:be:83:5a:61:b4:
5c:1d:a4:70:2f:bd:2e:63:4c:b0:9f:ec:50:c2:bb:
3e:d4:fe:fa:0e:a9:9f:bc:05:3c:91:9a:79:72:ee:
1b:0f:e9:bd:73:b5:d9:e8:68:8d:21:37:18:b0:c0:
e6:1c:03:bf:df:f5:e4:e0:3d:dc:1c:9f:83:d4:4c:
03:20:09:ce:40:71:5e:88:bc:f8:53:66:e0:7a:fc:
07:7d:1d:56:52:1a:ed:f3:29:9e:7a:43:1c:dc:de:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:41:32:73:35:D8:94:06:36:C6:8A:03:D1:D1:7B:75:C1:44:75:53
X509v3 Authority Key Identifier:
keyid:23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:ba:ba:a0:22:c3:9f:4f:8a:84:5e:ce:2f:9e:c5:31:14:
67:fb:ff:d3:c0:34:52:e3:3a:b9:b5:64:03:fb:14:c4:80:63:
87:1c:7f:f3:0a:93:93:5f:53:af:63:0a:90:07:74:56:6e:d2:
af:21:f2:6a:26:aa:d5:be:d9:e6:2b:3d:a3:f2:17:40:67:08:
c8:35:8d:64:36:65:f7:2f:8c:61:3f:2f:f5:9f:8d:ae:5e:af:
00:37:21:d8:51:13:03:7d:87:4b:c0:fb:64:22:8f:c8:76:c8:
6a:71:15:fb:23:f2:d3:15:37:8c:2e:01:c8:95:13:a3:b4:6b:
7b:82:a3:f3:bd:58:e8:62:55:1c:cb:d0:53:51:34:95:22:45:
19:94:dd:33:fa:fe:c1:d1:0d:65:39:0b:78:0f:e3:1e:cc:3c:
07:32:ae:b2:e6:27:7b:23:ab:a1:92:ba:3e:8b:31:22:bb:37:
c9:9a:e7:50:ad:27:84:80:89:29:42:10:e7:84:4c:8b:84:bd:
49:32:ca:1e:e2:05:05:ae:4d:ae:14:50:69:1e:87:ad:f6:11:
a3:60:5a:5a:ae:83:d6:c8:b3:ed:b5:69:e3:88:10:47:bb:5a:
c3:4a:d1:60:b8:56:80:de:a8:b0:65:f3:e1:f9:d6:17:5a:69:
c4:bc:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 09:23:04 2026 by rpki-client