Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: ueiwxwRsaWXaD31qv7C3owlKminuSpUG5GMNa3kD9Dw=
Subject key identifier: EF:4E:4D:83:21:09:51:FF:C7:D5:5D:A0:AC:66:F2:90:60:24:78:BA
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 01A0BE43527F40896E50C38E20798A753354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 18AF
Signing time: Sun 20 Sep 2026 10:01:18 +0000
Manifest this update: Sun 20 Sep 2026 10:01:18 +0000
Manifest next update: Mon 21 Sep 2026 10:01:18 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: ilhTHQGkWsrILsVRn/s0YgfR6rwcO9ZpqA21DdpV5Bo=)
2: ipfb7jTkqeKWay0qgHKHUAx3jmw.asa (hash: UmvmQ7iGCJYn7cchGi/a9KZNxylWxsrVk5XDMzEAidM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:43:52:7f:40:89:6e:50:c3:8e:20:79:8a:75:33:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: Sep 20 10:01:18 2026 GMT
Not After : Sep 21 10:01:18 2026 GMT
Subject: CN=ef4e4d83210951ffc7d55da0ac66f290602478ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:cc:64:57:09:2c:5e:c0:be:88:cc:26:a9:
e7:6f:0b:2a:88:e7:89:b2:e6:b2:2b:27:0d:50:61:
f3:e6:99:c8:17:0f:9b:c4:b9:69:3b:5c:f9:8c:9c:
e7:ca:5a:47:40:cb:3d:25:8e:4d:5f:a6:2b:ea:0c:
90:d9:70:ed:ee:d6:17:97:8a:49:7e:52:8d:fd:fe:
2e:71:de:9d:90:3c:94:07:70:24:8e:38:a8:18:d3:
d6:5e:9d:8f:ec:df:57:48:fe:8a:6d:26:70:12:c1:
ce:a8:0b:1b:8c:79:0c:58:4a:40:81:ab:2c:e4:46:
4b:6d:81:6e:80:84:e3:d0:b1:92:f2:fe:f8:66:e0:
99:48:63:ac:96:25:b7:6a:64:ee:99:03:91:18:eb:
4d:b5:fb:9f:49:3b:45:e7:00:06:c5:ef:7b:ce:ea:
ba:da:8f:6f:a2:ff:45:2e:f6:d2:40:1c:d0:f2:dd:
72:10:d1:32:c1:3f:93:92:9b:11:35:c3:ab:10:f3:
1e:7a:f6:f7:7e:45:be:66:b3:a1:83:7e:e2:90:d6:
2e:e0:00:77:c4:09:d7:af:2a:b6:5b:de:62:6f:ea:
c9:23:4c:fe:63:0f:35:5f:40:2a:40:e7:5f:df:e2:
fd:af:62:6c:1d:11:12:dc:fd:48:ef:a7:ec:22:99:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4E:4D:83:21:09:51:FF:C7:D5:5D:A0:AC:66:F2:90:60:24:78:BA
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:77:cb:d8:64:00:f8:19:7b:9b:92:da:c8:2c:b4:86:07:
7c:6f:0a:c3:10:39:98:87:e8:07:52:af:a6:f5:d8:a9:30:46:
07:a9:7f:42:cb:99:f3:bc:3b:06:3a:61:1a:86:82:7d:bc:09:
b5:61:a3:86:ce:78:e9:40:04:ef:f0:15:34:b7:78:63:2c:24:
6e:bb:96:b7:e7:07:26:44:ed:21:3b:1c:8a:5e:f1:f2:3e:04:
eb:06:1c:b5:94:19:8f:a0:32:44:74:7d:0c:d0:c5:13:e8:1c:
8d:da:a3:df:1d:ca:91:e1:df:f0:d1:23:a4:06:0c:d4:9b:60:
92:e2:17:96:05:30:62:4c:b8:7e:44:07:52:44:b9:48:cf:7d:
b9:92:4d:58:19:9a:d2:93:9f:34:1f:bf:90:0b:75:17:6b:d8:
1b:4b:43:83:85:e1:5d:26:1b:ae:28:e8:af:ed:91:fc:b5:48:
7c:cc:82:e0:ae:00:45:a0:0e:f1:a3:43:27:72:e5:39:bf:4c:
1a:f4:2c:78:01:07:9f:99:ef:89:0a:c6:4b:ff:f2:5d:68:c2:
71:72:24:e6:80:7d:01:48:33:52:8f:b2:a7:7b:b9:99:47:cd:
88:3f:08:74:d6:e4:26:e6:a1:25:8d:d4:e8:1a:0a:40:12:00:
a4:f9:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:49:25 2026 by rpki-client