Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: jE4TNy9FCpwvzhcuB9v9OgcQ/zC2RfeJMUw/OGyz2oo=
Subject key identifier: 91:BE:18:79:D3:02:40:39:61:E1:0B:88:B3:DA:C3:40:ED:0D:01:AE
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 01A18E9DC05D5D348F3F5612DEDFE3290F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1ACF
Signing time: Fri 30 Oct 2026 21:01:05 +0000
Manifest this update: Fri 30 Oct 2026 21:01:05 +0000
Manifest next update: Sat 31 Oct 2026 21:01:05 +0000
Files and hashes: 1: JOkPA8hTaCex6PevZHvmCNxtsfs.roa (hash: 0uXj8pryRRozEl6lHQb46ndxpU/qwFl9p2os5lcSSok=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: HmuK7XQ6RWjjQ7hnSUCMO87v9oVZ0iPGKDhUSSbzhFA=)
3: w883UTvE9aAPM26F3jGQ91P2JH0.roa (hash: Zo+XYBLtWLmmmelaOVtJ2aF9Vo4DulRMeStZXPCZZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:c0:5d:5d:34:8f:3f:56:12:de:df:e3:29:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Oct 30 21:01:05 2026 GMT
Not After : Oct 31 21:01:05 2026 GMT
Subject: CN=91be1879d302403961e10b88b3dac340ed0d01ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:5c:d7:cc:cc:ea:10:68:28:a7:07:dc:6d:
05:62:7d:a2:20:0b:1a:f9:61:a7:30:f6:03:2e:b7:
a1:14:0d:31:ae:74:b4:25:72:dc:59:05:20:73:43:
a3:a6:8c:51:9e:f1:30:32:0c:f1:89:c0:5c:91:fa:
1a:f0:52:b7:fc:67:e0:c7:31:32:5d:d9:b8:6a:10:
c1:2f:86:7a:3f:04:68:c0:0f:82:21:e7:44:94:d7:
57:d6:92:41:ca:0f:17:a0:59:49:41:ae:c5:81:6c:
bb:1d:11:fb:8c:cd:50:ae:3f:4e:b1:de:6e:11:2d:
bc:ad:09:4e:78:e0:82:2c:df:2a:47:d6:b5:69:d2:
ea:27:27:3f:b1:6b:39:7c:44:e3:ea:38:26:7c:17:
61:1a:1b:af:4d:19:d0:91:f6:09:5f:c7:83:32:2e:
3d:f6:7a:e5:d0:ff:3a:97:a8:d8:56:50:09:6a:26:
8c:0b:7b:47:01:99:f3:53:34:91:4f:cd:7c:0c:a5:
33:b2:4c:8b:72:6f:f9:f1:2a:b2:19:30:e3:b9:07:
a2:57:c7:d8:09:ab:d2:ca:72:7e:54:5c:17:f6:c7:
ad:48:ba:c2:fb:d8:96:38:4b:29:31:86:24:ac:93:
31:95:32:81:10:60:63:f3:6e:f5:49:a6:e2:0b:74:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:18:79:D3:02:40:39:61:E1:0B:88:B3:DA:C3:40:ED:0D:01:AE
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:ab:3c:39:03:2e:99:da:b1:29:92:b0:c4:0a:6f:6c:c8:
a9:f3:7a:d0:5c:72:9d:88:bd:ca:91:b2:e9:c6:47:e2:52:ec:
9c:53:d3:0c:27:f5:2b:7e:94:fd:13:9e:e8:04:d9:63:73:d8:
64:1d:cf:5a:68:eb:93:e6:bf:5e:9d:9a:0b:78:f5:1d:bb:eb:
99:23:e9:2c:cd:c6:66:db:09:d8:58:a5:a7:65:a5:ef:08:ef:
7e:fc:22:47:3a:bf:e3:a7:c4:31:48:9c:79:f4:b1:58:6d:7f:
a0:6e:07:68:53:ff:d4:b3:a3:df:e7:9d:4b:41:39:35:16:cd:
a1:7b:f0:5d:f9:16:2d:5a:7d:eb:87:e3:05:41:53:af:22:0c:
36:50:90:4a:37:98:91:bd:ad:39:e1:f9:a7:24:cd:e1:c4:af:
74:3c:8a:df:16:09:88:61:3e:e4:a5:e4:51:f8:4c:b0:f6:6a:
35:43:f8:c9:59:ff:68:d1:af:04:d8:b1:4e:4e:68:95:3c:0b:
38:69:bd:48:42:81:1d:ff:16:53:d2:95:98:d9:3a:5d:ad:de:
84:8b:e9:17:b4:d7:3e:d9:dd:a2:ce:80:88:07:72:62:d1:b0:
c9:66:66:09:1d:2e:ca:00:d8:e7:a0:2b:1c:9c:e4:7e:06:b9:
86:26:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:52:31 2026 by rpki-client