Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: BydEgQ5x2bP+Plc/LMF+ZQgQLhvin81QbvqZtJA8/2A=
Subject key identifier: EA:CA:76:92:89:B6:F8:40:53:E2:0F:3D:AA:10:B0:06:7C:BE:AD:70
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 01A11F768FFB0B6A61711796540AF7CA447B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1A9B
Signing time: Fri 09 Oct 2026 07:00:26 +0000
Manifest this update: Fri 09 Oct 2026 07:00:26 +0000
Manifest next update: Sat 10 Oct 2026 07:00:26 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: 5ceEaCYWYNdzq0CZMPQgVnX+VWlDF5liXf/wb8+42OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:76:8f:fb:0b:6a:61:71:17:96:54:0a:f7:ca:44:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Oct 9 07:00:26 2026 GMT
Not After : Oct 10 07:00:26 2026 GMT
Subject: CN=eaca769289b6f84053e20f3daa10b0067cbead70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:96:40:f2:d0:f5:8d:b1:c6:c7:2f:25:46:
50:26:73:82:7e:3d:ec:04:88:3d:02:cb:a6:6e:b8:
ec:ab:21:cd:04:cb:11:1f:0c:f4:c0:0d:f9:17:c1:
60:29:8c:00:5a:09:fb:f7:17:3d:03:62:76:d0:7f:
4e:96:20:f9:d1:88:ff:f0:67:34:cc:d3:e4:4d:05:
55:c0:d9:3c:fe:4d:2d:b8:92:26:13:00:d2:d6:4f:
30:ac:fb:73:9c:a3:d8:e8:cd:68:e6:c9:3e:9e:62:
ec:8a:07:43:06:77:ec:76:94:3b:94:46:2d:29:b4:
12:4f:71:36:59:74:d6:7f:d9:91:04:33:86:a4:16:
99:6a:90:95:23:eb:f5:a1:5c:20:38:aa:5b:71:95:
d3:3e:78:f8:0c:88:bf:c2:3f:3a:f2:2e:1d:44:cc:
d9:f6:f1:9e:42:2c:2e:ac:75:b7:22:2e:5b:45:43:
19:a1:cb:22:47:49:b1:91:cb:99:55:78:94:0c:6b:
40:76:1a:43:0f:a3:88:c8:16:43:02:be:f5:b9:ec:
65:96:f4:20:e0:32:00:28:4e:b5:62:2b:be:e3:ac:
46:40:66:7f:89:ef:b9:f4:05:9d:f2:fa:57:a1:9d:
d3:be:8a:89:48:29:12:5a:89:d8:78:68:e8:0d:08:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:76:92:89:B6:F8:40:53:E2:0F:3D:AA:10:B0:06:7C:BE:AD:70
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4f:f6:64:83:6d:50:5d:f1:86:c9:ce:be:06:9c:07:c4:80:
74:0f:7b:08:f4:39:3b:c1:5a:11:e7:c5:74:18:55:f6:b3:21:
01:1b:f7:4a:3d:0e:97:5a:37:fd:ed:3e:da:f5:e2:5b:d4:a8:
7a:fb:0e:43:28:0d:ec:a3:84:b4:8e:43:17:1e:3e:1e:23:e9:
d9:8b:42:63:95:c3:76:ec:84:0e:80:a9:cb:42:d5:c9:74:68:
ba:e1:73:e5:54:f4:ce:b6:7f:5a:9e:00:5d:f4:24:d2:10:6e:
54:94:59:28:f8:89:9e:1f:da:5d:b4:34:95:13:4d:68:9f:30:
75:6c:c0:90:b6:a5:12:5b:44:aa:15:94:42:a7:54:bd:cf:1a:
77:d5:d5:d6:59:0a:5b:c0:26:07:b7:dd:e8:c8:b9:c6:d0:80:
46:d5:b4:fe:39:1e:c5:fc:d4:b0:83:3e:2c:07:a8:a8:7e:d4:
11:8a:57:42:e4:bb:f5:ca:22:89:79:88:0b:b6:0b:82:a0:a0:
2e:15:bd:1a:31:ec:9b:0b:46:55:6f:7a:7a:3e:df:d2:a8:7a:
b6:f4:08:0e:2e:c3:d8:3e:e7:83:d8:58:10:19:e9:e8:84:6e:
e8:42:40:aa:75:6b:fa:b0:f4:b5:e7:53:58:a5:bc:53:2c:6b:
35:9c:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:23:51 2026 by rpki-client