Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
File: I35O6WWAXHT-K615pepShu9ofZk.mft (raw, json)
Hash identifier: tS5S4SwZf1T3NvhO41Y+r72GEuitNubi1OfU4g67gmM=
Subject key identifier: F6:19:B7:57:1E:F0:BB:CC:8B:7E:26:3D:14:66:B9:65:92:7A:BE:68
Authority key identifier: 23:7E:4E:E9:65:80:5C:74:FE:2B:AD:79:A5:EA:52:86:EF:68:7D:99
Certificate issuer: /CN=237e4ee965805c74fe2bad79a5ea5286ef687d99
Certificate serial: 01A0C3D7179DBC4ED6211E3FD6D5649D294A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
Manifest number: 08
Signing time: Mon 21 Sep 2026 12:00:48 +0000
Manifest this update: Mon 21 Sep 2026 12:00:48 +0000
Manifest next update: Tue 22 Sep 2026 12:00:48 +0000
Files and hashes: 1: Dw86BQwD7CpxNVB1IfdiHj_0660.asa (hash: oEarT5CVUXeCjVcHP6Lq9WuNhCM+VyZb6nwKwT5caDM=)
2: I35O6WWAXHT-K615pepShu9ofZk.crl (hash: 5DdV+HDqttha0E1xhbem5PMR3kxf+4CsnZaT6HSbqTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:17:9d:bc:4e:d6:21:1e:3f:d6:d5:64:9d:29:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237e4ee965805c74fe2bad79a5ea5286ef687d99
Validity
Not Before: Sep 21 12:00:48 2026 GMT
Not After : Sep 22 12:00:48 2026 GMT
Subject: CN=f619b7571ef0bbcc8b7e263d1466b965927abe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:7c:12:f9:cc:80:bc:5a:12:23:2b:61:89:
5a:16:a9:b8:af:34:34:38:30:e5:2e:2c:be:9a:6c:
12:fd:54:43:d4:e1:85:93:b2:c9:fe:bb:5e:ec:c5:
57:be:76:bf:0a:b9:cd:19:0a:71:93:4d:b0:d3:44:
b6:26:13:f7:64:5a:5d:2b:31:53:e8:de:45:b7:22:
c1:6d:c8:42:24:36:5e:37:1f:7a:6c:44:36:1d:60:
70:e9:02:cc:59:fa:74:fb:72:77:14:ce:fa:71:0b:
0f:08:da:9b:20:01:c3:00:2a:10:e9:7a:2e:ce:4a:
9a:c6:df:b2:e2:15:ac:dd:be:c7:08:1f:c3:af:65:
ab:f4:58:cf:57:f6:b1:67:9d:05:bb:aa:bb:d7:a8:
30:bb:a6:9d:6d:09:70:c5:89:3d:3d:67:dd:7b:52:
71:f8:c7:e9:18:e6:3a:d0:0b:ff:a0:46:49:0e:1b:
ab:3f:c7:7c:bd:d9:4a:73:3f:d4:e3:6e:00:06:55:
5b:23:45:ab:c4:6e:18:a4:88:5b:46:14:d5:6c:bc:
7a:b5:72:20:ca:3b:65:c4:cb:87:04:e5:0a:c1:52:
76:cb:ab:03:9b:b4:09:a2:8a:98:75:1e:2c:62:74:
f3:a5:9e:05:24:4b:23:a2:af:d0:59:38:e3:69:34:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:19:B7:57:1E:F0:BB:CC:8B:7E:26:3D:14:66:B9:65:92:7A:BE:68
X509v3 Authority Key Identifier:
keyid:23:7E:4E:E9:65:80:5C:74:FE:2B:AD:79:A5:EA:52:86:EF:68:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fe:57:bb:6f:6f:91:0d:82:7a:71:63:04:db:0c:c3:dc:37:
fb:c9:ae:0d:7e:87:3e:02:e1:a3:a7:37:e6:9a:1c:3b:2d:91:
eb:64:80:2d:b9:96:45:b8:33:86:f9:a7:13:a2:2d:e3:88:8a:
3e:ee:66:60:92:0c:92:ba:a6:ab:7d:de:b6:36:39:ce:b3:08:
e0:bf:ea:56:37:0e:5f:b3:a1:8a:7c:a8:44:c9:9b:d4:94:13:
bc:5c:34:2e:8f:61:7f:b1:44:4e:20:8f:bd:12:22:02:a3:14:
e2:a8:b3:43:03:87:ae:f8:49:e6:2a:31:dc:0f:66:8e:a5:19:
2a:4d:1d:06:74:70:f2:e2:55:5a:63:1f:97:9a:69:81:14:da:
ac:5c:7f:46:23:25:b7:a4:95:61:e6:27:65:ee:47:ea:09:fa:
17:b3:23:a6:e7:c5:ed:04:e0:8e:83:05:39:35:d5:b1:e3:ac:
fb:15:a2:fe:bc:04:37:83:ad:ec:fb:18:66:ee:78:ed:ef:7b:
ca:80:3f:6b:ee:28:bd:b6:81:49:c8:8e:74:85:0f:bb:c0:70:
94:c1:0e:bb:91:a9:d9:d0:49:d5:a4:70:78:bd:8d:e5:94:e3:
e6:1e:ea:61:bf:83:39:75:cd:0e:5f:2b:f7:14:34:bf:e9:a1:
e1:3f:3e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:46:04 2026 by rpki-client