Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: 2SKbeBn2RZlz43t2z4WNU8cwZt21ACOU5i9tnhaBs38=
Subject key identifier: 09:F2:AA:89:40:D4:62:F0:CA:70:D7:48:54:D8:B6:CA:D0:B3:08:92
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 019CAA8F94098447F4439AD65798FCE1F480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:01:02 +0000
Manifest this update: Sun 01 Mar 2026 18:01:02 +0000
Manifest next update: Mon 02 Mar 2026 18:01:02 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: sjV8+wBCut9z5MypC2SUjYm4eaS7O/gKYkbBzgbiBJQ=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:94:09:84:47:f4:43:9a:d6:57:98:fc:e1:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Mar 1 18:01:02 2026 GMT
Not After : Mar 2 18:01:02 2026 GMT
Subject: CN=09f2aa8940d462f0ca70d74854d8b6cad0b30892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:6f:26:d2:be:ab:4b:13:0f:04:fe:72:bf:
ff:92:05:28:2e:06:07:80:f6:7c:ea:50:da:b9:1a:
f1:b7:79:cd:32:fa:28:a5:35:c9:cd:6d:66:98:29:
9d:a6:2c:f4:15:59:1f:25:26:a0:65:44:ac:85:c5:
f6:53:bb:1c:01:5e:74:f2:33:7a:6c:b3:a4:d3:01:
fd:fa:91:59:f3:32:b4:93:de:d9:99:cf:59:55:f5:
e1:21:04:fa:32:01:d2:42:26:3d:9d:f4:cc:0f:90:
11:0e:be:c3:65:57:3c:6c:1d:58:0b:10:7c:6f:d2:
64:70:2a:42:77:63:4e:27:fa:ca:0b:a1:95:18:54:
7b:a1:c8:03:3c:b9:4f:af:dc:13:2f:15:3f:be:1a:
3c:71:ec:0f:e3:74:2a:4f:6b:72:bf:df:12:2e:35:
c6:73:d9:30:4e:9a:41:f7:3e:c9:59:31:68:a9:93:
6d:17:df:6b:4e:2c:9b:ca:ad:b7:90:cd:4a:88:db:
05:ca:d0:58:08:97:55:6f:4c:63:50:51:db:72:f3:
f5:bc:a2:eb:38:0b:69:34:17:46:8c:26:e0:00:5c:
3d:b1:68:01:e1:41:8a:76:d7:65:26:04:d5:62:f1:
eb:ec:41:73:25:b3:04:82:1a:d7:86:6f:82:72:63:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:AA:89:40:D4:62:F0:CA:70:D7:48:54:D8:B6:CA:D0:B3:08:92
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:07:be:29:16:df:5d:42:e5:05:53:43:f9:1a:58:a7:32:88:
fe:a2:ea:3c:6f:62:a7:69:de:d3:07:26:f8:32:fe:c7:e6:b2:
91:a5:a2:cc:c9:44:e1:2e:20:bc:ff:0b:38:69:60:0f:42:9b:
bb:71:63:65:3d:a2:a9:e3:0a:b6:42:20:31:ee:50:0d:c3:f9:
aa:33:48:11:0a:66:09:f3:94:20:29:50:e1:5c:f6:15:f1:7a:
42:ac:ec:ff:77:a8:8a:7f:97:31:11:6e:14:c9:17:22:5d:83:
64:db:2d:a2:c8:1b:08:38:85:25:0d:b6:49:07:94:cf:71:23:
d3:96:46:33:e8:7f:6f:38:0b:7a:8c:97:0e:29:b1:1a:ef:fb:
9e:18:67:a9:81:ce:e4:16:f5:a9:98:37:50:fb:8b:7d:ee:71:
03:a3:ac:db:e0:81:99:96:40:d5:c1:b7:88:77:e1:85:8d:62:
42:c8:b5:02:15:0f:7b:21:e9:33:42:87:c6:1c:66:c1:ea:2b:
47:43:6d:55:b2:fc:43:81:f3:5e:e6:95:3e:1f:9c:84:2a:5a:
53:88:81:18:0e:11:4c:9f:ee:c5:15:b0:75:ca:64:c1:13:25:
c4:6b:83:f6:31:de:e5:79:88:22:a2:b7:d8:9f:a8:fd:c4:0a:
29:46:02:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:19 2026 by rpki-client