Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File: i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier: nKT0NgLvmBAcJZ6looZk5hWd4vDudcJzZZItkr/204I=
Subject key identifier: 96:D8:84:04:51:7C:88:8A:67:A3:EE:96:34:89:86:F8:B4:AA:70:9F
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01A0C09ECDC7BDEB453EE06B267071D6B055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number: 17B4
Signing time: Sun 20 Sep 2026 21:00:27 +0000
Manifest this update: Sun 20 Sep 2026 21:00:27 +0000
Manifest next update: Mon 21 Sep 2026 21:00:27 +0000
Files and hashes: 1: 1-e3X3nnOITuhFUTt48TdT2Qw-5U.roa (hash: u9UX0jZDejI6w83BZaY3pHdg72rNaFEVz4TXqidtNXA=)
2: 4UwlYnr52PGvgrKUwZbaj95o1GA.roa (hash: +2AP9nSVJw2jCPzcUReDcj4cufxT4/ipf0cJtgIcbr0=)
3: AdVE5OlXcZj2420IBfPGuTVm1rY.roa (hash: kUUL0iWu2kMToCczE7nZmiSv6u2adUWqU7sTkCw1rJY=)
4: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (hash: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM=)
5: HUcHAL73Sfwe-OwmRifjceYRsyc.roa (hash: /2sMFxs6Y2Y4YXgzJKEXcAfuaIViiN3v3fDdI/L3mew=)
6: RSm0qGEri_euvlxfenvDorVTnKw.roa (hash: uBu5fXFf8DACYIsLAH/WatGFK4JVkAobmStF5eGh7+4=)
7: VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa (hash: nbe4oKw1dzzL8XTpfLmk2OwowG5rknPjlUlPj/nEWbw=)
8: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: QFYHWtO28wNFPCxMCo0rfElfQ40HcUPL24xwGCoPfy8=)
9: z7PU2MzlVVAvlrQw6iVcszWYAXo.roa (hash: 9X6Zea/pUy8vlr4IvEYXZRJ/+mqoqTxPdepT8vjAq6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:cd:c7:bd:eb:45:3e:e0:6b:26:70:71:d6:b0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Sep 20 21:00:27 2026 GMT
Not After : Sep 21 21:00:27 2026 GMT
Subject: CN=96d88404517c888a67a3ee96348986f8b4aa709f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:01:04:47:96:95:3f:89:c2:4c:fb:c5:82:
01:31:0b:0a:e8:f0:0f:78:8f:69:07:cd:5d:f6:fe:
13:91:ac:cf:0f:e7:e2:76:03:01:81:57:bc:97:8b:
62:ea:0b:66:ae:71:60:59:33:d6:22:68:8f:fc:de:
94:6c:6f:a6:f8:26:fe:73:c1:65:14:1c:b3:9f:b7:
0c:df:80:b3:85:75:f4:10:ab:1d:26:ef:69:47:f7:
31:34:10:2f:45:fa:32:56:7b:d7:d2:68:63:60:d8:
50:59:4c:7a:94:3b:8a:4a:59:46:1e:65:64:10:b4:
dd:95:a6:4d:8e:be:71:13:82:66:d9:7e:03:b8:92:
49:cc:d2:b7:b6:24:a0:01:1d:9f:4d:1f:6b:f3:3d:
71:cb:c7:e2:78:45:25:96:f2:90:57:17:f6:a4:e9:
2c:37:82:25:0f:a6:24:c3:08:5f:31:bb:34:73:e2:
8e:8a:aa:2d:12:94:08:c3:ff:08:62:74:1a:73:6a:
60:52:03:ab:87:f9:e0:c3:b1:9c:74:94:3c:a1:c3:
fb:f2:01:52:0a:9c:a5:e6:5b:11:25:37:10:3d:e7:
0d:f1:03:bb:1d:1b:d5:6a:ab:e9:af:d9:7d:2c:9d:
70:de:8d:61:5b:4a:ce:1a:16:a3:8f:80:4d:5e:56:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D8:84:04:51:7C:88:8A:67:A3:EE:96:34:89:86:F8:B4:AA:70:9F
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c3:a4:43:7c:60:98:95:2d:a6:62:d5:82:cc:2d:1c:c7:ef:
bb:ba:88:a3:67:18:86:47:b2:9c:09:5f:09:7d:7c:25:d0:86:
5b:47:ba:f8:66:db:4b:70:c3:50:f4:8e:d8:18:ac:1b:f9:b4:
37:8a:f5:a8:b0:ad:f6:94:d2:e7:c6:b5:3d:ab:66:55:23:1a:
82:14:9b:41:e5:45:28:2d:56:93:d2:18:64:d2:1f:9d:f3:48:
8f:8b:34:3a:74:35:59:5f:d3:c7:74:88:27:23:f3:c9:71:5d:
a4:b4:d2:77:f9:27:e9:07:a7:79:cd:8f:0f:72:4f:23:aa:a9:
f7:4e:fd:8d:02:25:9b:d4:41:5c:4a:e3:a4:8c:21:f2:06:c7:
79:93:eb:80:c3:ad:7e:55:66:f4:9a:c1:fe:f2:27:9f:b2:70:
46:6e:e9:91:8a:da:d5:59:13:6f:30:39:f7:a5:b5:b4:50:26:
78:80:53:10:e7:01:82:2b:4b:2c:82:02:db:de:e9:cc:cc:de:
dd:f7:09:fd:04:df:f7:5e:ea:77:ff:c0:d0:1f:f9:9b:07:d5:
83:8e:26:78:db:8a:8c:87:ef:ab:35:ff:b4:0a:02:45:03:82:
77:cb:b6:be:aa:e6:86:12:73:6c:13:5f:63:7e:dd:51:72:1d:
cb:b0:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:58:32 2026 by rpki-client