Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: SgmMNVC37ekmWHyqU5Ayv8zjxwA8QacufA9LFekY0Kw=
Subject key identifier: 51:F8:C5:5B:0C:99:2F:3D:81:B6:08:55:8A:E0:09:77:14:BB:FC:46
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 01A138FF91636215C409387B365AEA4EA231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 1AA1
Signing time: Wed 14 Oct 2026 06:00:35 +0000
Manifest this update: Wed 14 Oct 2026 06:00:35 +0000
Manifest next update: Thu 15 Oct 2026 06:00:35 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: lDYCYb5pvW2NAcy4I5CQVCKbYxRCxYOWCvWohG6a/YU=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:91:63:62:15:c4:09:38:7b:36:5a:ea:4e:a2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Oct 14 06:00:35 2026 GMT
Not After : Oct 15 06:00:35 2026 GMT
Subject: CN=51f8c55b0c992f3d81b608558ae0097714bbfc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:8d:fb:1f:73:04:6d:97:19:4e:63:48:48:
7f:b9:0a:c6:91:be:ff:2b:03:53:5a:88:bc:c7:ec:
11:6a:55:04:47:af:a6:33:c2:8c:f6:58:d9:ce:05:
8b:f0:df:ae:a6:f7:65:4e:e3:d9:6b:45:fa:f5:32:
5e:32:bf:90:9a:d9:0d:c9:9f:b0:f0:6d:ac:46:e5:
f9:92:d3:0c:50:5c:99:b8:d4:87:5b:d1:62:8a:b5:
8a:a9:9e:90:de:8d:d7:72:bd:53:c8:1f:0d:4a:0b:
21:e9:c0:df:3d:b8:f8:6f:76:fc:11:65:e8:aa:cc:
2f:8f:8b:17:59:80:09:c9:b3:ac:2d:25:99:36:18:
98:f3:57:94:67:eb:1c:6a:81:fd:78:bf:b7:10:87:
79:07:37:e5:e8:4f:1c:27:b3:77:a8:25:53:09:f3:
ae:2e:52:69:48:22:fd:a5:2f:65:92:84:f5:22:33:
f7:37:ba:46:92:c9:b5:c1:a0:98:0e:63:06:85:be:
43:29:29:cd:56:3e:9b:95:6f:4f:8b:16:54:a2:c9:
df:5b:06:47:b0:4a:5a:6b:4a:1e:42:16:ee:e8:3e:
23:7d:18:63:29:0e:b6:62:8e:1a:d9:80:b1:4b:84:
a2:ad:2e:30:48:23:24:c0:5f:e5:dc:50:9f:87:43:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F8:C5:5B:0C:99:2F:3D:81:B6:08:55:8A:E0:09:77:14:BB:FC:46
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:29:0a:b6:0a:be:68:62:f1:80:2a:6e:33:9e:fc:ea:ae:73:
75:71:14:c0:e1:19:4c:cb:e5:c9:ac:cf:ac:62:7f:4d:e6:f2:
e6:1d:b7:4e:e9:b2:13:05:a2:dc:ce:c9:98:21:6a:9a:de:fb:
fb:ba:61:b9:aa:a7:1b:3f:c2:d2:af:51:c3:f3:ad:fc:58:07:
56:17:38:97:c5:c1:b5:8d:79:30:4f:18:8f:df:17:d5:87:e8:
b7:8c:bc:2c:80:cf:80:44:6b:6c:a6:69:dd:e8:3a:17:db:c1:
34:a1:cc:ac:a9:fb:e9:e2:23:0f:1a:01:cb:8f:0d:9e:20:c7:
a0:9e:4d:75:4b:9d:d0:bc:52:68:0b:41:c3:10:4e:ee:94:9f:
11:2d:81:25:ad:47:8a:62:08:fa:69:b5:cb:bc:74:67:08:24:
1d:a0:e7:fe:a6:9e:e0:1c:a5:c3:a3:7d:2d:26:09:8b:8a:96:
53:89:92:98:d1:f5:96:aa:6c:eb:ec:8f:0c:89:bd:8e:37:1f:
b6:ff:7f:59:16:41:6d:27:bf:02:1e:85:56:28:38:6f:1c:6c:
6f:5c:e8:6a:d4:b2:2c:dd:af:60:90:0c:02:a4:72:cc:c5:ef:
00:6b:86:f3:bb:6d:fd:7b:6b:ec:62:70:f9:c4:61:86:59:0e:
4d:de:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:12:22 2026 by rpki-client