Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: lOOlkSU066/74mU3PBpmomzZ8Qm3mdyrzLpQ6gVWI30=
Subject key identifier: 53:0E:64:C2:06:DB:F7:2D:DC:3A:19:87:35:3D:4D:7D:95:5C:26:EC
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019EC06D79B5E71242B7DD45A03C8089D9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 10:01:00 +0000
Manifest this update: Sat 13 Jun 2026 10:01:00 +0000
Manifest next update: Sun 14 Jun 2026 10:01:00 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: mKkpu3UocmkvA4JZ79EtuleYhi7RHUzNYmihfZxBc2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:79:b5:e7:12:42:b7:dd:45:a0:3c:80:89:d9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jun 13 10:01:00 2026 GMT
Not After : Jun 14 10:01:00 2026 GMT
Subject: CN=530e64c206dbf72ddc3a1987353d4d7d955c26ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:a5:cc:8a:c7:4c:a3:7b:f2:88:f5:bb:52:
01:6e:fb:cd:6a:39:2d:4c:41:6b:0f:d8:6c:9b:c3:
fa:1a:ad:10:ff:62:29:46:4e:3c:d9:c0:66:29:5a:
4a:04:e3:7d:6d:fe:a3:e5:5d:af:70:11:ec:e3:f8:
27:5d:2d:fa:de:17:92:d4:e4:0d:a2:69:0b:2c:61:
b7:c7:22:64:0e:fe:65:e0:f8:0f:8a:9b:6e:2b:fa:
58:66:2a:90:80:4f:98:c9:a3:f5:f5:b6:25:fd:2c:
80:d2:f1:6d:f5:98:02:63:69:8c:fd:da:a7:b6:e1:
31:e3:16:e5:ed:a4:e2:4d:f0:b9:48:88:b0:4a:e3:
70:49:4f:46:17:02:2b:81:50:7f:90:73:4b:9d:1c:
0b:64:ec:32:50:c1:3a:2f:64:b6:3a:cf:19:70:4e:
d1:d7:bf:c9:83:73:42:bc:11:e0:d8:1c:3c:18:cf:
e1:9d:37:40:ab:7f:13:a6:b4:54:b2:b4:4e:78:26:
f7:1f:70:31:2d:99:4f:04:80:27:24:a7:39:c6:5f:
7d:4d:58:ce:f0:3f:fb:46:db:bc:e0:16:1b:3b:c1:
eb:b7:70:36:f9:8f:0f:77:ca:0d:f7:4d:8a:06:bb:
3d:30:2f:25:fd:37:c3:54:3c:78:29:f2:03:c7:01:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:64:C2:06:DB:F7:2D:DC:3A:19:87:35:3D:4D:7D:95:5C:26:EC
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:93:b1:a1:6a:d8:5b:7c:3e:c1:b1:e4:1d:68:c4:bf:0c:e7:
81:86:b1:c3:20:f9:ea:36:ab:a8:c2:fa:16:12:a6:70:8f:2f:
00:51:b1:a9:3b:b6:e6:3c:e9:8d:2b:c8:eb:62:32:50:22:8f:
a4:2f:45:b4:bb:17:df:1b:08:d4:b7:b0:1e:46:b8:56:8a:bf:
66:29:14:5b:21:9c:5c:e3:63:f5:0a:35:3d:55:b2:23:3f:ad:
27:bd:0c:16:7c:7b:c8:56:91:3b:9f:be:eb:dc:81:08:8a:4d:
34:4d:86:33:b5:fe:36:d7:a4:e5:63:5b:ca:7d:7e:32:71:1e:
ef:0d:c2:84:78:ed:4f:36:1f:3c:aa:95:08:c3:2b:49:e9:a0:
2c:d1:33:f4:2f:28:f4:87:7b:fb:c3:ca:9c:4e:3d:ff:97:d7:
91:87:53:8e:cf:d4:07:41:36:91:1a:84:0c:be:87:86:40:7c:
8a:f2:4a:8a:bb:a3:a0:cc:94:6d:23:61:86:0f:fd:dc:37:8e:
86:1a:f0:13:14:ea:a9:c4:1d:00:80:3b:3f:d2:7a:cc:0d:61:
88:00:ab:ab:0b:1f:6f:62:74:5d:6f:ac:99:0f:09:16:ff:49:
9d:ca:86:3e:53:20:6d:81:c3:a1:a3:6b:8d:9b:33:a5:66:0c:
33:12:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:18:52 2026 by rpki-client