Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: 9xupKBn6gUFkhy6GNSy+3PTJ3U3TzPylIZNZlyForIs=
Subject key identifier: FD:F8:45:33:EE:4D:F3:A4:3A:76:5B:27:A6:01:63:51:99:6F:D7:22
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019FAA1A7304CBC2263805D0D3C8204FE168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 19:01:27 +0000
Manifest this update: Tue 28 Jul 2026 19:01:27 +0000
Manifest next update: Wed 29 Jul 2026 19:01:27 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: p8J2/RT4sU2XciFQ5BEdBjLb3H4RNNMLzfjxPWQa2sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:73:04:cb:c2:26:38:05:d0:d3:c8:20:4f:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jul 28 19:01:27 2026 GMT
Not After : Jul 29 19:01:27 2026 GMT
Subject: CN=fdf84533ee4df3a43a765b27a6016351996fd722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:b2:65:53:a1:47:c4:c9:fa:d2:75:47:43:
2a:27:0c:1a:11:e3:be:88:63:56:8b:94:63:38:26:
ea:08:e3:68:84:9e:20:0e:82:5c:55:ab:c5:8e:a6:
14:7b:7f:06:30:b7:a8:4d:ec:58:24:f5:14:02:e3:
87:c0:37:0c:8e:67:6d:95:37:a9:8e:4c:2d:62:af:
57:49:18:dc:be:0d:01:4a:aa:01:d8:b0:d0:f9:b6:
a7:4f:f1:77:3f:8a:d8:36:65:3c:3e:8e:43:2b:51:
5b:5e:77:23:72:f6:4e:dd:75:b8:9f:2d:41:0d:f7:
b2:d6:91:87:d6:67:ec:39:60:45:47:36:f9:f1:94:
aa:f6:5c:90:d3:e0:14:16:e9:00:d3:93:a9:e0:56:
0e:da:09:5e:ed:e1:0c:e8:1d:99:fe:19:4b:38:03:
79:91:e3:6c:16:20:fd:f8:05:58:8c:7e:94:00:cc:
1b:7d:8b:7f:30:fc:e8:a4:9b:40:bd:d7:fa:ae:ff:
6a:69:ff:bf:e5:19:64:b1:fa:fb:2f:bd:e5:46:5a:
57:11:6e:7f:64:20:1f:e6:ec:8c:5c:62:e6:94:12:
42:b7:75:c3:cd:7a:9c:64:f6:6a:de:49:e1:b0:da:
32:1c:81:de:0e:c2:3d:15:56:cd:ef:e4:f5:6d:d6:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:45:33:EE:4D:F3:A4:3A:76:5B:27:A6:01:63:51:99:6F:D7:22
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:75:c1:7b:e9:d0:b9:89:05:a2:6f:9f:97:77:d2:94:af:16:
10:6c:2d:86:d6:30:fb:cc:99:15:81:ec:22:b6:bb:a1:41:a9:
ef:a2:35:d5:66:ab:01:11:9f:60:91:92:80:be:d1:29:bd:2d:
c0:d5:26:aa:43:4b:91:ae:ad:8d:9c:89:d8:06:61:c4:be:64:
bf:6f:38:a6:e6:d6:62:1a:a1:ef:46:9a:a6:14:e5:34:a5:39:
c5:cd:d3:94:ee:81:bf:10:a4:b0:8c:fc:cc:22:bd:d1:ab:d2:
b8:70:7a:a5:a9:71:05:0e:91:15:fb:75:21:de:0e:a3:9c:4a:
70:93:3c:3e:13:06:20:a9:6f:b2:36:5c:79:ba:1d:dc:24:24:
e2:2a:e7:89:9b:a5:d1:0f:65:b1:e2:ff:85:36:81:4f:06:87:
31:5c:f2:cb:c1:6e:f1:cc:e0:93:ee:59:d2:46:d3:ab:d7:24:
49:c1:9f:94:91:bf:39:4d:8a:6f:99:2d:48:b5:f7:79:73:76:
5b:76:30:af:6f:b2:47:21:30:36:bc:f5:a1:17:b6:23:56:eb:
ff:e8:20:1f:18:db:dc:80:40:4e:bb:60:12:bc:1d:bd:6a:c1:
29:3e:bf:2f:b4:fd:2e:08:50:ce:8e:a1:69:e6:ae:f0:3e:00:
47:b0:9e:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGnMEy8ImOAXQ08ggT+FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4
NTVmYzQwHhcNMjYwNzI4MTkwMTI3WhcNMjYwNzI5MTkwMTI3WjAzMTEwLwYDVQQD
EyhmZGY4NDUzM2VlNGRmM2E0M2E3NjViMjdhNjAxNjM1MTk5NmZkNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkimyZVOhR8TJ+tJ1R0MqJwwaEeO+
iGNWi5RjOCbqCONohJ4gDoJcVavFjqYUe38GMLeoTexYJPUUAuOHwDcMjmdtlTep
jkwtYq9XSRjcvg0BSqoB2LDQ+banT/F3P4rYNmU8Po5DK1FbXncjcvZO3XW4ny1B
Dfey1pGH1mfsOWBFRzb58ZSq9lyQ0+AUFukA05Op4FYO2gle7eEM6B2Z/hlLOAN5
keNsFiD9+AVYjH6UAMwbfYt/MPzopJtAvdf6rv9qaf+/5Rlksfr7L73lRlpXEW5/
ZCAf5uyMXGLmlBJCt3XDzXqcZPZq3knhsNoyHIHeDsI9FVbN7+T1bdazXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP34RTPuTfOkOnZbJ6YBY1GZb9ciMB8GA1UdIwQY
MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt
YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh
LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHXBe+nQ
uYkFom+fl3fSlK8WEGwthtYw+8yZFYHsIra7oUGp76I11WarARGfYJGSgL7RKb0t
wNUmqkNLka6tjZyJ2AZhxL5kv284pubWYhqh70aaphTlNKU5xc3TlO6BvxCksIz8
zCK90avSuHB6palxBQ6RFft1Id4Oo5xKcJM8PhMGIKlvsjZcebod3CQk4irniZul
0Q9lseL/hTaBTwaHMVzyy8Fu8czgk+5Z0kbTq9ckScGflJG/OU2Kb5ktSLX3eXN2
W3Ywr2+yRyEwNrz1oRe2I1br/+ggHxjb3IBATrtgErwdvWrBKT6/L7T9LghQzo6h
aeau8D4AR7Cejw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:38:14 2026 by rpki-client