Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
File: i2H8DxZbRki3X9-jgNI3iblv61I.mft (raw, json)
Hash identifier: kd60aRz/L/uqYBhJSokXStKGnrQzei97CqSOScWFVtU=
Subject key identifier: 3C:C8:06:F9:69:60:11:F6:2E:4A:B9:F4:82:43:8D:C3:53:6E:46:82
Authority key identifier: 8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
Certificate issuer: /CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Certificate serial: 01A0DA9649A027788AF7DE5188F49BBAD1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
Manifest number: 0114
Signing time: Fri 25 Sep 2026 22:01:17 +0000
Manifest this update: Fri 25 Sep 2026 22:01:17 +0000
Manifest next update: Sat 26 Sep 2026 22:01:17 +0000
Files and hashes: 1: ffpcvugPIwnXkSiO1M4dNL_Qguc.asa (hash: qLiAEYMfUER4ToU97ut1DBJqLMRcUXL+g8tguEsdh7w=)
2: i2H8DxZbRki3X9-jgNI3iblv61I.crl (hash: mZvNZq5KT8YEUHWfSp6Ngv8oP7utp+NVNf1tnfKZIsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:49:a0:27:78:8a:f7:de:51:88:f4:9b:ba:d1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Validity
Not Before: Sep 25 22:01:17 2026 GMT
Not After : Sep 26 22:01:17 2026 GMT
Subject: CN=3cc806f9696011f62e4ab9f482438dc3536e4682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:3b:09:07:93:c0:91:74:1e:da:5a:67:c3:
2d:54:e5:33:de:80:4b:b4:03:32:eb:b6:10:3b:ff:
5c:08:d2:23:e1:19:a7:80:4e:69:84:ea:62:3e:fd:
ba:db:23:cc:b5:4f:0b:96:44:3e:09:64:5f:7c:04:
94:e7:c9:0a:d4:68:1a:f3:53:99:2e:55:42:a1:7d:
a7:5d:9a:47:70:cf:55:3e:12:86:b0:bd:3a:70:17:
9c:5e:fc:15:0c:51:7b:88:e6:99:01:95:20:b6:c0:
61:48:44:7c:54:f4:2b:cc:ab:c6:0e:a0:90:e3:51:
aa:e0:8c:9a:9c:6a:66:9d:5c:79:c2:6a:19:8d:12:
26:b0:30:8f:73:60:8d:bb:e5:1a:29:b2:09:d1:f3:
72:70:60:43:c0:55:9b:3e:04:c7:fe:81:5e:5b:3a:
5b:cf:4f:db:60:9e:93:d3:75:76:fa:a4:e7:45:ad:
37:c9:27:6a:94:54:32:76:90:d6:20:89:a0:7d:38:
98:4a:a7:fe:42:86:b5:8e:a0:90:fb:ab:55:7a:a5:
b4:c6:e9:de:52:a9:7f:3f:cf:d7:33:58:db:f8:0a:
86:69:0e:0f:c3:32:1c:77:0e:40:8f:b6:e2:8c:de:
1d:6a:81:4e:ac:91:44:2f:02:3a:9f:b4:25:88:1f:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:06:F9:69:60:11:F6:2E:4A:B9:F4:82:43:8D:C3:53:6E:46:82
X509v3 Authority Key Identifier:
keyid:8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0f:bd:45:d4:64:8c:12:2b:ae:8c:b5:52:bb:a6:28:10:b7:
e8:a5:80:77:fb:3d:10:20:71:08:b3:5d:92:f2:c0:25:72:db:
0c:2d:b5:46:d2:fc:e7:79:23:9a:80:a0:e0:29:6d:d4:7b:0c:
83:b4:2f:a9:ca:99:5b:df:b4:2a:34:e7:28:27:ca:6f:e6:82:
cd:cd:99:98:43:ce:c1:8f:b8:fe:37:09:2d:ca:df:0a:8d:0c:
7f:fb:3b:36:03:ec:1a:62:30:b1:34:50:61:8f:ec:34:bb:bf:
0d:73:53:c5:1c:75:e7:e8:9c:17:a8:25:b8:21:2b:49:21:47:
e5:72:11:98:c6:42:ed:4d:87:7d:63:b3:99:5e:01:34:74:29:
d7:a2:4a:94:51:8c:d9:4a:75:45:f7:73:66:26:77:3c:77:26:
32:44:f8:9b:bb:7a:5b:b6:aa:c5:c2:39:63:c0:46:54:6c:54:
74:6c:33:a9:3b:5e:7f:6a:b4:75:24:e6:de:26:79:ea:51:5d:
3b:38:96:2a:b3:02:3d:b6:ec:ab:b9:42:53:be:46:3f:c8:3a:
b1:b7:11:5f:53:e3:97:fa:05:ea:c4:89:07:a9:f2:d4:58:70:
48:ed:17:0b:eb:04:a3:ed:2a:1f:52:af:6f:80:be:c9:19:cd:
1a:78:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:25:03 2026 by rpki-client