Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: p76slFTkf/nzL+MXHFSq5GgPPErGYv8pq24FNUi8WHU=
Subject key identifier: F5:93:17:1D:9C:51:EC:48:6B:C4:E9:F6:52:C7:9D:73:D0:B0:C8:49
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019EC2CA2AFB4353BBEBCB22C4AF373C913E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 0409
Signing time: Sat 13 Jun 2026 21:01:29 +0000
Manifest this update: Sat 13 Jun 2026 21:01:29 +0000
Manifest next update: Sun 14 Jun 2026 21:01:29 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: 0ji+OUYrUxRddP+vd4tFoBXObPfnXOEszj1Hawds428=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:2a:fb:43:53:bb:eb:cb:22:c4:af:37:3c:91:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Jun 13 21:01:29 2026 GMT
Not After : Jun 14 21:01:29 2026 GMT
Subject: CN=f593171d9c51ec486bc4e9f652c79d73d0b0c849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:10:e6:85:dc:c3:3c:b3:cc:35:bf:60:83:
f0:5f:17:d2:25:52:88:5b:bf:59:5f:39:c5:a5:28:
66:c0:6c:b4:bf:70:2d:31:78:53:d5:50:af:a7:2f:
89:f0:e5:7f:fc:88:ba:80:a7:99:69:1c:a3:71:97:
20:f7:cc:69:1e:f3:46:88:75:03:8d:a5:8d:b7:75:
2b:1d:80:46:af:5c:6f:ef:cc:e3:9b:f6:cd:12:a6:
7d:76:ba:df:a1:c9:68:b3:a7:98:9f:39:62:19:4b:
e5:c3:bf:94:46:26:64:95:28:b5:99:03:31:66:b0:
62:c3:38:1b:c9:88:3c:fb:00:02:38:63:76:9e:5b:
b1:ec:0a:c2:1c:3c:cf:13:b3:97:44:99:9c:4b:ca:
c4:df:87:78:6f:17:95:5d:5f:85:60:80:a8:83:73:
67:57:c2:a5:db:c7:c4:d1:07:e5:70:49:20:43:cd:
6f:0b:0b:d7:44:6f:3c:15:0b:15:5f:44:12:67:68:
76:99:a1:89:d9:bc:dc:be:49:47:1e:fc:5d:d1:80:
3e:87:f9:a1:90:c1:90:12:04:c3:cf:54:3e:12:01:
40:4c:01:17:e4:a5:12:cb:14:95:6f:3f:aa:6b:b4:
d8:64:29:ad:c0:cf:61:9b:cc:96:e4:db:bf:61:ba:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:17:1D:9C:51:EC:48:6B:C4:E9:F6:52:C7:9D:73:D0:B0:C8:49
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e7:5e:d4:3e:69:5c:44:69:48:a8:25:a4:a9:98:7e:d7:a4:
61:2e:69:b3:13:d3:39:48:ab:31:90:86:54:c4:c6:07:fa:fe:
83:ca:14:f9:c7:1d:77:fa:8b:6b:03:38:7b:05:16:68:96:64:
92:c0:68:b0:38:e6:4c:7a:61:a4:6d:d5:1a:14:a3:2a:8b:a3:
af:0e:24:f7:65:b1:eb:36:a5:46:52:17:f6:23:57:a0:7e:39:
93:29:59:44:6b:55:1f:33:20:c4:22:f0:e8:78:69:53:e3:04:
d2:98:5a:ce:d9:b7:c6:8c:dd:87:6f:ec:42:27:fa:00:eb:9e:
d3:2a:19:00:e1:08:e9:24:ec:1d:bd:c6:23:9c:f6:eb:17:d5:
f7:88:50:23:5c:fb:da:8a:3e:9a:09:11:af:f3:f5:25:7b:20:
ab:67:08:ac:20:24:e7:c5:09:a5:d7:2a:95:8f:76:b8:23:ee:
67:c2:5b:92:5e:94:7c:8e:48:98:e7:74:40:ae:ee:35:c4:4c:
84:69:ad:f7:be:55:5b:9a:3c:20:e8:c1:fc:85:1e:89:ab:ae:
0c:ed:00:5f:6c:e4:4a:1d:cd:ae:d1:6f:ca:a1:8d:a1:8b:2d:
07:f5:92:88:2e:48:43:2c:a6:a9:ae:d8:6e:da:83:40:80:e9:
c6:ca:3d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:46 2026 by rpki-client