Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: q3wYmo1WTMDqXTEjGc5PgqZJVm3FDmab7RF9apyEN6I=
Subject key identifier: A6:19:8A:8F:84:B3:D6:44:A7:35:53:3F:E8:D1:93:7B:57:86:D2:AB
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 01A0C7EAACB33ADCF0F5C68FDAB82C9B650C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 19F9
Signing time: Tue 22 Sep 2026 07:00:40 +0000
Manifest this update: Tue 22 Sep 2026 07:00:40 +0000
Manifest next update: Wed 23 Sep 2026 07:00:40 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: V6ry20XYKKKTZjwjNTNee2DX5buZafzeRssk9Rxvf5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:ac:b3:3a:dc:f0:f5:c6:8f:da:b8:2c:9b:65:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Sep 22 07:00:40 2026 GMT
Not After : Sep 23 07:00:40 2026 GMT
Subject: CN=a6198a8f84b3d644a735533fe8d1937b5786d2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:ab:59:91:30:9d:cb:a8:b1:2e:dc:a7:d3:
c2:4d:81:d8:10:fc:a6:1e:64:b2:81:84:7c:a5:e3:
5b:db:07:cb:1e:70:e8:08:5e:1b:63:54:f9:dd:d6:
9c:f6:c5:f9:67:8b:da:e0:ed:21:90:cb:e6:d9:ab:
b4:66:83:d7:51:26:a0:0a:13:57:0c:29:fa:de:31:
06:7b:2d:1a:8f:82:e0:04:48:db:97:82:84:1f:cf:
96:ba:bb:75:3c:d1:8b:05:6b:cd:a5:7e:15:29:e1:
9b:74:b4:47:87:b8:f6:05:40:6d:59:c8:f7:46:b1:
30:bb:46:6f:93:2c:c1:50:92:ad:2c:ab:58:f3:94:
9a:51:0d:21:05:16:c5:5f:88:c7:a4:39:0f:5d:97:
ef:5d:59:8a:23:24:7b:0a:af:d9:7e:59:18:41:60:
15:11:03:48:d8:56:7f:c6:fe:ae:45:42:09:0d:5b:
a6:99:60:c8:ff:c4:0d:ce:18:42:bb:19:0a:9f:9c:
89:77:c6:d0:d9:4e:2e:34:a6:8b:b8:f8:09:04:35:
f3:3a:d9:f2:b4:fc:75:ad:4d:8f:03:ee:42:47:b5:
83:32:6f:46:a0:c8:49:92:ce:cd:db:db:e4:bd:df:
ca:7c:de:49:0b:12:29:91:3f:1e:44:d6:a4:42:53:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:8A:8F:84:B3:D6:44:A7:35:53:3F:E8:D1:93:7B:57:86:D2:AB
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:67:b5:e5:6c:bf:90:05:23:6b:8c:59:27:b4:ac:65:ad:d1:
c4:ec:a7:c7:e9:23:34:89:74:7c:92:7a:e2:95:1b:68:0f:00:
f2:ea:d7:29:50:71:cc:04:5e:e9:e1:d7:ae:73:56:aa:a0:ae:
ac:e8:e4:93:f2:2a:8e:8b:cc:e6:94:48:01:9d:26:64:93:8e:
f6:5c:e8:61:97:22:b6:0b:12:92:92:df:08:01:4f:3c:6d:e2:
d9:88:6e:dc:7d:44:1b:e4:27:53:c6:7f:34:ac:0b:1d:50:ce:
2c:cf:b6:50:75:e0:08:3f:0c:6a:29:9f:94:03:41:e5:c1:a0:
58:97:18:9e:68:47:7b:41:ef:06:31:04:ce:d5:f2:7e:15:ce:
5b:d2:a3:51:3e:93:c2:63:59:53:ee:39:12:c9:fe:e7:9e:0c:
f3:be:08:b5:e4:16:f6:cc:31:17:ed:c9:63:71:5b:08:bd:44:
fd:0e:ac:11:db:6b:47:b7:1a:57:23:44:02:73:98:01:aa:75:
f0:37:f2:fc:e0:ca:89:6e:b8:a3:ea:83:b4:1b:46:87:2b:6a:
b8:04:8d:de:5c:07:66:81:d1:64:20:5d:21:51:57:f4:5b:35:
10:7d:55:25:e9:c9:1c:e2:a5:98:7a:b7:a9:55:2f:b5:da:e7:
16:68:44:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:18:43 2026 by rpki-client