Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: /W5gl0l10Knq26tXwHvqMjvje0CDTVYdu9r/E9OQF9s=
Subject key identifier: 53:78:89:32:39:0A:00:AF:C0:AD:22:B7:FB:7C:4B:83:51:D4:E3:37
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019CADC762B01687545F013FD48CB034E389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 02F5
Signing time: Mon 02 Mar 2026 09:00:51 +0000
Manifest this update: Mon 02 Mar 2026 09:00:51 +0000
Manifest next update: Tue 03 Mar 2026 09:00:51 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: AcjRZ4HNvAKySyM0ZO6vDav6HOG3lQJzyTH5r8UrEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:62:b0:16:87:54:5f:01:3f:d4:8c:b0:34:e3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Mar 2 09:00:51 2026 GMT
Not After : Mar 3 09:00:51 2026 GMT
Subject: CN=53788932390a00afc0ad22b7fb7c4b8351d4e337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:f3:d0:60:1e:d9:f3:b8:c1:67:65:a0:7f:
2a:8e:7a:59:56:11:e6:17:35:da:66:8a:f8:b8:da:
58:56:bf:d5:2e:5b:3d:0c:b1:5d:d0:c7:1e:f2:74:
6d:40:ad:1c:92:dc:40:8f:0a:a9:c5:d3:2b:18:a5:
7f:43:57:7c:d0:96:35:b3:3e:8a:40:19:e7:4f:41:
7c:e5:0d:ef:b8:d4:4c:a3:cc:8a:a4:77:bc:76:d6:
6e:9f:9a:05:50:70:bd:ad:6d:dd:6d:45:d1:f6:da:
10:ec:ae:e4:24:b2:dc:0b:68:30:17:cd:a6:ec:5c:
43:c0:7a:f9:ed:f9:2d:f7:d5:d8:a7:12:02:0d:3a:
3b:79:1d:d0:cb:6f:76:70:74:39:4d:af:5e:c8:84:
6b:3e:01:a6:81:ad:30:c4:f4:fc:ab:a7:13:f3:33:
a2:68:88:a5:28:c6:55:1f:06:70:32:9c:d1:03:92:
26:89:4a:ee:38:e2:26:45:10:a9:1e:2e:71:43:a8:
45:1a:72:17:8b:a3:57:56:ce:cb:ae:1b:56:40:82:
70:5a:b9:9a:5e:25:29:ca:e8:71:d6:f6:15:54:f8:
a0:81:dc:3c:21:0f:b7:3d:2b:aa:77:59:3b:d5:56:
b8:88:3f:5c:be:0f:e8:b4:34:40:8b:e4:a3:d4:3e:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:89:32:39:0A:00:AF:C0:AD:22:B7:FB:7C:4B:83:51:D4:E3:37
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:26:9b:59:a1:46:0b:0f:32:8b:93:72:cb:c6:4d:74:31:d6:
ca:6a:7f:98:dd:dc:e1:83:fe:96:4c:90:b7:f5:c4:07:94:cd:
26:da:45:4d:01:43:0b:c0:a0:10:60:35:c1:83:1a:3a:d0:73:
ba:84:cb:cb:09:3e:41:61:d0:9b:7f:48:3f:a5:b5:a6:c5:2c:
35:ec:c0:be:a3:8d:28:11:1a:d4:ee:85:39:3d:2a:ee:82:9d:
0a:b8:e5:63:eb:22:01:31:01:ef:2f:e4:7d:aa:28:31:83:70:
d1:77:1b:c7:f1:b6:80:bf:46:3c:94:b2:ab:b0:0f:93:75:07:
bd:01:77:33:11:75:29:09:43:74:ec:e1:f6:4d:f5:8e:81:23:
0a:f3:72:da:e9:66:7a:a9:09:79:82:79:fc:3d:d2:61:3f:67:
e8:57:ed:d9:f7:06:c1:f7:50:a4:db:be:62:fd:45:1a:50:2c:
9d:ff:d4:8f:1b:85:a4:06:97:54:46:ec:7f:49:ba:1b:16:86:
78:bc:c5:01:0f:9b:91:3e:28:cf:d7:20:8a:75:cb:f4:c3:51:
1d:10:9f:cd:be:72:48:55:32:07:98:c8:51:25:0f:e4:fb:71:
36:e0:88:51:d0:47:d7:ab:5c:24:79:5c:83:17:79:8e:b8:d8:
e5:0a:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:01 2026 by rpki-client