
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: T7CH6fEiNG96NCqtHfucFKTaAXkcyjUDl7Dn4dWLSJY=
Subject key identifier: 0F:5E:96:54:FF:FE:94:97:BC:06:B8:47:0C:32:23:A0:83:59:96:BA
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019D9A3ED16F704F2EAF36E2D43519FE719C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 168E
Signing time: Fri 17 Apr 2026 07:01:41 +0000
Manifest this update: Fri 17 Apr 2026 07:01:41 +0000
Manifest next update: Sat 18 Apr 2026 07:01:41 +0000
Files and hashes: 1: 2i-4ee2wP9JCOqgKECftxH61WUM.roa (hash: QQKwzJfgPGXePgVfTn1B7G5l+qkMGWhzUecnh31tn84=)
2: aVs_pTCF35izq7eFYVQj7GDKKKg.roa (hash: HUtPfJfh73XSHYvTDAm1hqZnRW91m33+bqE8cdLnnnE=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: YpESxmX/GHO3xWkjIF5hy0XF/jJ62WMSn/T7PPWFezg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d1:6f:70:4f:2e:af:36:e2:d4:35:19:fe:71:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Apr 17 07:01:41 2026 GMT
Not After : Apr 18 07:01:41 2026 GMT
Subject: CN=0f5e9654fffe9497bc06b8470c3223a0835996ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:e8:0d:1b:07:c8:54:43:61:01:f3:57:c0:
30:77:af:33:72:bd:67:22:f4:f4:67:d8:11:a3:f1:
23:01:68:8a:02:f4:8d:44:28:d0:c7:95:cc:44:57:
a0:42:84:b6:7d:50:e2:f4:24:d1:ce:2e:cd:48:92:
9b:49:35:b7:50:6e:89:b7:df:03:28:36:e3:a3:8d:
41:84:4a:6a:6e:95:30:c3:70:00:34:3f:61:73:1d:
25:dc:cb:2e:0e:c9:51:e5:3b:ea:29:7c:59:6b:b3:
bb:4b:b8:aa:36:de:d1:93:56:4f:41:26:ce:e2:c7:
1a:37:3b:61:9a:15:b8:3d:9b:8b:6c:e1:20:f8:7a:
65:14:ca:35:aa:26:a4:30:71:ab:23:32:b2:88:2c:
ee:57:37:e9:35:8a:c3:4b:13:31:85:90:77:69:cd:
79:13:34:83:cd:5e:af:38:eb:99:14:8e:6c:38:e5:
ca:aa:40:aa:d0:ce:54:68:02:2b:d5:5f:eb:90:45:
d0:b6:cf:c2:53:3d:ff:d7:5c:c4:33:8a:ab:71:77:
3b:35:fe:9b:68:55:63:fb:13:63:6d:a5:83:c4:5c:
17:3f:78:a9:fc:41:39:5e:16:ed:a7:6f:19:04:54:
9b:94:97:65:92:70:89:f7:cb:7a:6a:45:7e:27:c6:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:96:54:FF:FE:94:97:BC:06:B8:47:0C:32:23:A0:83:59:96:BA
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ca:af:bd:b9:f4:ba:c4:c0:d6:75:a5:8d:d1:f6:73:b8:bb:
c4:41:eb:5c:3f:fa:39:01:c8:bf:79:be:73:67:b1:5b:4a:a5:
28:5c:05:74:62:52:a4:20:3d:e8:9b:39:d1:30:4d:47:74:17:
4f:32:d3:86:15:ec:44:6b:56:0e:e7:72:64:64:12:a9:d5:2c:
17:f6:b0:75:fa:6c:57:05:a8:a3:3c:d9:6f:c9:df:3b:90:82:
61:72:95:06:1c:59:3a:41:68:8d:28:da:fb:2f:4e:ad:ee:d4:
91:aa:8d:d9:8f:b8:cb:87:6d:3c:3e:d1:35:c7:15:09:96:bf:
07:68:49:7b:07:05:91:96:86:7e:40:1e:fa:cd:34:2c:b9:a7:
9b:73:68:2a:b8:2e:38:01:41:21:47:73:cc:40:dc:2b:f5:a8:
43:30:ce:6d:7b:8b:c7:1c:60:0e:c7:33:c2:3c:ef:46:9e:ac:
0d:4f:16:16:03:e5:60:25:82:94:a9:a0:45:bd:91:94:91:ee:
ac:f6:ac:7b:41:81:3e:de:87:7f:f4:c7:8a:37:2f:13:d6:b2:
91:7d:8a:e7:92:34:d8:d9:79:b7:c1:61:95:8b:3b:73:27:03:
3b:1e:29:b8:db:85:1d:e0:6b:9e:64:bb:3e:2d:66:88:d7:3d:
1a:f6:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:24 2026 by rpki-client