Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: QJVlC6rmWg2r/Z7WzBkfsig6aGgPI3oJE9zGe/EY1Z8=
Subject key identifier: C4:AE:76:C0:0C:C9:39:90:71:8E:CF:C7:52:46:C6:7A:9C:49:29:E2
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 01A0CEFEF48E833C129AB677C781E95FDC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 1838
Signing time: Wed 23 Sep 2026 16:00:10 +0000
Manifest this update: Wed 23 Sep 2026 16:00:10 +0000
Manifest next update: Thu 24 Sep 2026 16:00:10 +0000
Files and hashes: 1: 2i-4ee2wP9JCOqgKECftxH61WUM.roa (hash: QQKwzJfgPGXePgVfTn1B7G5l+qkMGWhzUecnh31tn84=)
2: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: 8TuXV7Pgeh6LhybgFU4L8RyRAprYms2ZJIco4qKJ6jo=)
3: rwnmDRqOKZ4XobKPk7EfioXDUHU.roa (hash: XenrA46Tl2A6yQoz5IgLxyvlUvV4GMGTev0IO4loosw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:fe:f4:8e:83:3c:12:9a:b6:77:c7:81:e9:5f:dc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Sep 23 16:00:10 2026 GMT
Not After : Sep 24 16:00:10 2026 GMT
Subject: CN=c4ae76c00cc93990718ecfc75246c67a9c4929e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:d8:67:41:e2:47:78:f1:85:67:0b:d8:a0:
c8:43:ee:22:6f:e1:b0:51:ae:9b:7e:1d:5d:aa:cf:
54:13:b7:1a:e3:44:f7:96:c5:71:7d:47:8f:f5:e4:
76:03:72:0c:68:c2:cb:32:57:90:d8:45:4c:2c:66:
cf:0c:82:d2:15:73:ab:71:74:f0:5e:4a:1b:68:62:
1b:6f:43:38:69:48:9c:94:50:8c:5f:fe:58:05:f3:
30:ce:fb:d2:12:6c:81:5a:f8:f7:f5:d9:28:d8:fa:
b1:c9:46:5f:6b:b6:e7:0e:bc:7d:51:2e:fc:ed:63:
46:c6:4f:59:b9:a3:df:cd:b4:73:1d:66:7c:35:51:
a6:8f:41:d7:51:5d:7a:42:a7:84:99:0f:96:ef:05:
77:70:f4:dd:b4:98:ae:2b:3f:39:22:85:23:41:22:
e9:da:66:3d:3c:31:0e:8a:c7:36:db:73:67:13:83:
11:43:be:0a:d5:6b:ba:ee:33:33:79:05:b6:54:81:
67:66:14:f2:d2:6a:b2:1a:7f:7b:14:10:26:b0:15:
86:a2:ad:81:2a:74:53:95:b5:81:e8:cb:78:8e:60:
b6:ca:1e:d4:1a:30:69:15:17:61:f8:0f:aa:7a:81:
0d:68:a0:83:3a:c2:a0:a6:8f:08:03:31:1c:05:08:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:76:C0:0C:C9:39:90:71:8E:CF:C7:52:46:C6:7A:9C:49:29:E2
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:64:78:c0:64:23:9c:db:1e:4a:80:aa:1f:51:c1:fd:d2:98:
e5:50:40:81:04:6d:21:9a:69:3b:a4:66:e1:69:23:f3:84:df:
0d:6a:99:f2:5f:d4:d4:68:24:93:5d:88:95:b1:96:55:a1:e5:
31:f3:70:65:42:7d:3f:90:e4:d0:34:12:30:9b:2a:99:9e:9f:
f7:6e:51:a0:eb:25:9a:46:a7:e9:79:b0:bf:80:78:04:07:2e:
1f:24:e7:36:eb:78:15:76:23:19:23:b7:9c:c7:9d:d8:5e:d5:
6e:f2:b4:4d:7d:9a:63:59:f2:e2:fb:6c:87:9e:9d:f7:21:8e:
33:69:cb:f8:f3:d3:72:bf:e2:27:27:97:0a:d6:de:f3:ae:ea:
97:7f:d4:5c:65:ce:03:27:9c:8e:a8:86:6d:99:16:70:ce:19:
b3:3f:1b:cd:e0:67:b8:eb:31:e2:cd:50:03:ff:08:cc:0d:52:
e3:20:1c:c9:22:a5:13:0c:0f:39:a5:c0:99:48:86:d7:20:19:
2b:44:a1:da:9c:8d:7d:cf:e6:95:62:1e:dd:32:3d:0a:ba:f2:
56:e4:d6:0c:3e:0b:78:2d:c2:fb:96:5c:ca:5a:9e:6d:da:13:
41:7a:28:02:7d:a7:68:9f:fd:e7:0b:85:af:1c:e9:66:00:23:
f1:f5:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:57:20 2026 by rpki-client