Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: fZv91Jyi6gC7dGDLlhnLXSCZx2x/gwkJOnG0O5zDnBg=
Subject key identifier: B8:11:55:46:84:35:24:83:AA:8F:BB:6C:04:F4:01:33:9F:A8:C3:B0
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019D98F51BD8A55C27AE65D2F1878DE7CBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 01:01:33 +0000
Manifest this update: Fri 17 Apr 2026 01:01:33 +0000
Manifest next update: Sat 18 Apr 2026 01:01:33 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: Yj/cQH2IUtASibPwa4jUToGYjNH3x5F06xRhVWNhHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:1b:d8:a5:5c:27:ae:65:d2:f1:87:8d:e7:cb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Apr 17 01:01:33 2026 GMT
Not After : Apr 18 01:01:33 2026 GMT
Subject: CN=b811554684352483aa8fbb6c04f401339fa8c3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:34:19:1b:50:47:1d:a8:40:b1:f8:4d:b2:
ae:13:51:1c:d5:fc:95:f8:ac:51:ca:4b:d6:fe:2f:
ac:d9:70:1a:8d:b0:0b:52:91:cd:c1:f7:b5:8f:4e:
1c:e1:b2:3d:58:0b:3b:d4:25:01:12:40:25:d5:3b:
59:cd:b8:76:cc:6c:41:ae:a9:22:0f:5f:ea:21:92:
82:0c:43:04:da:ac:c2:10:55:90:56:75:88:b9:76:
40:5b:c0:5e:ce:c6:bc:a5:f5:97:aa:05:ad:ac:9e:
9f:40:8c:36:ef:b7:71:1c:19:fa:d2:c8:b1:c8:fb:
0c:d6:90:f6:e4:fc:9a:ac:3c:6a:76:38:90:20:39:
47:32:fb:0e:a0:f4:57:66:bb:7a:79:7a:a9:c4:e1:
3e:df:d7:0b:c2:bf:b6:79:59:dd:de:54:21:58:fe:
1c:1b:0b:04:31:cf:01:49:e8:e9:fa:8c:27:97:e7:
75:d1:83:f1:9c:97:a6:9b:78:80:38:53:f3:56:8a:
a5:92:67:f0:0f:43:eb:d9:b4:68:71:4e:2d:4b:2a:
c2:7e:54:dc:19:14:ec:cf:4a:16:9d:9a:eb:57:5c:
00:3e:5e:c8:de:c7:50:4b:c0:e9:2e:71:18:88:51:
c0:9c:6a:4b:c9:af:ab:09:0b:e4:a1:f7:42:fe:77:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:55:46:84:35:24:83:AA:8F:BB:6C:04:F4:01:33:9F:A8:C3:B0
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:db:04:d1:c2:1e:95:ae:3e:c6:b6:40:67:43:52:15:07:8d:
82:4d:cd:1d:9c:37:89:8a:b4:e8:99:19:e7:3b:47:76:01:59:
fb:71:fc:fc:7a:6c:25:1a:07:98:07:c8:d1:d6:f0:11:c7:c3:
c5:86:80:5b:51:b9:cd:1c:57:bf:0f:69:05:4d:c4:40:9d:4f:
4b:aa:60:5b:e2:71:b7:6f:c1:a3:d9:06:a9:51:9b:59:59:f0:
89:26:ea:3a:64:ae:01:cb:ca:81:ec:1a:0d:f2:0b:67:78:1f:
ae:dc:11:2a:cb:3f:d3:f4:eb:1e:d3:18:c3:a2:91:db:3d:1c:
c3:33:a1:2d:83:55:9b:ad:07:ac:64:0e:6a:42:5e:ff:85:e9:
39:e2:54:a3:c0:6d:d4:5c:05:32:d6:07:fb:74:ff:f3:4e:d0:
c8:cc:b1:b2:bc:fb:e0:03:55:cd:9f:c1:f0:bd:cb:54:5e:10:
61:fd:72:d2:63:12:66:23:12:18:64:c8:39:26:ba:7b:46:2d:
ad:43:2a:c7:31:b0:27:a8:38:de:ea:ff:56:11:3d:f5:51:07:
79:ce:97:50:2e:a9:89:18:ec:f5:3e:8e:17:87:18:8e:c1:8d:
62:06:08:67:a4:02:8e:c3:7b:e3:3a:54:37:35:50:0a:9b:c6:
cd:4b:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:05 2026 by rpki-client