Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: 7wUIL8u2FQ5wAvmi4uGWBCX9lLUcGp4qWxMEFd90VG8=
Subject key identifier: 4E:BA:B2:0E:9F:F5:16:1B:15:B8:34:B1:60:7F:DB:69:EB:86:90:58
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019FAB63B38C2EF2D5D59551018206EE9B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 17A1
Signing time: Wed 29 Jul 2026 01:01:05 +0000
Manifest this update: Wed 29 Jul 2026 01:01:05 +0000
Manifest next update: Thu 30 Jul 2026 01:01:05 +0000
Files and hashes: 1: 2i-4ee2wP9JCOqgKECftxH61WUM.roa (hash: QQKwzJfgPGXePgVfTn1B7G5l+qkMGWhzUecnh31tn84=)
2: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: BxC9YSddYJymyFw4u7lTHm0dMO5Ac7xuQqAeeTnV1Cg=)
3: rwnmDRqOKZ4XobKPk7EfioXDUHU.roa (hash: XenrA46Tl2A6yQoz5IgLxyvlUvV4GMGTev0IO4loosw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:b3:8c:2e:f2:d5:d5:95:51:01:82:06:ee:9b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jul 29 01:01:05 2026 GMT
Not After : Jul 30 01:01:05 2026 GMT
Subject: CN=4ebab20e9ff5161b15b834b1607fdb69eb869058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:2d:15:6f:9b:ca:05:8d:66:cf:8f:d7:51:
83:94:43:04:94:16:a3:22:c7:64:4f:e7:03:8e:62:
f1:0b:5b:28:4d:39:15:bf:c3:6b:6d:e2:80:1a:c6:
05:d9:c7:82:da:54:11:e9:e3:b8:2c:09:ca:f0:e9:
70:89:33:09:93:7f:50:14:00:c4:56:5c:41:1d:4e:
3a:c8:a4:8a:da:1e:24:8e:47:f8:a4:68:5a:4f:42:
cb:93:16:59:49:a0:6a:04:45:9b:7f:cb:cd:f4:a5:
96:59:73:96:9c:e3:7d:5a:52:7b:4c:0e:4a:d7:e1:
a0:ea:9d:80:54:ec:2a:de:ad:8f:1a:c0:0e:85:17:
f3:91:96:04:8d:b8:41:3d:95:32:6a:2d:db:3f:da:
26:cb:d4:61:94:45:6d:d5:6c:54:b1:93:ef:86:7e:
15:15:49:cd:fa:ca:3a:d3:23:64:af:77:7d:2d:96:
ec:7f:5c:1c:a7:9f:e3:f7:9d:83:95:91:d3:3a:57:
7f:54:c4:84:e9:45:4e:61:66:fa:fe:07:74:4e:dc:
56:ce:af:ec:de:3d:c0:23:ab:79:2a:46:10:6e:1e:
ff:ab:54:e0:f6:6a:85:2e:52:a8:17:4c:6b:b5:a9:
02:36:d4:8e:a9:55:d9:22:a2:b9:54:74:84:4a:d6:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:B2:0E:9F:F5:16:1B:15:B8:34:B1:60:7F:DB:69:EB:86:90:58
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:e1:92:62:24:89:37:02:ed:df:b2:02:61:8d:bf:01:93:
57:8c:88:92:a9:a1:7d:f0:36:5c:aa:a2:7a:7e:40:7f:47:40:
4c:0e:1c:c8:ce:d5:3c:c1:51:bf:e4:30:1d:16:cb:ed:30:1c:
4c:41:76:60:82:9e:d2:7a:cf:40:66:bc:bd:e0:b0:d2:e2:4d:
3f:44:bc:65:f4:ef:8e:16:6c:bc:db:6d:b6:4e:19:a3:be:e0:
1c:18:a7:e2:a0:7c:71:63:40:ca:d9:97:de:9a:e5:8e:9a:d5:
f1:4c:61:8c:0b:94:a9:9c:c0:a9:02:60:f5:f3:a8:af:99:5f:
96:ed:de:38:3b:74:39:9d:42:ff:35:56:67:d6:4e:7a:a4:c3:
2c:b5:1f:43:b6:ed:79:9d:a0:bb:55:1b:bc:85:64:ca:e9:1b:
68:f8:86:8e:b6:67:96:b0:a4:a4:85:96:fc:5c:91:43:f7:40:
6e:38:b5:e8:f5:3c:fd:0f:50:9e:d7:94:4f:4d:fe:93:d6:4f:
5e:9f:f8:d2:79:29:da:2f:eb:fe:f8:c1:d9:86:b3:cd:76:6d:
33:4b:7d:1e:1d:c0:d7:25:96:33:59:0f:52:04:00:4a:2f:72:
70:07:da:e2:13:08:34:e9:4d:f1:ce:30:ea:18:e9:0b:0b:91:
42:42:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:14 2026 by rpki-client