Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: EMlVy1g+TowJLHAelgF7B/AGX/dOmMdxa9haNTT4fjI=
Subject key identifier: 87:29:51:43:43:7A:82:DB:C7:90:6F:96:B0:CC:C7:EF:43:4C:4B:80
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 01A1965726906FCAA316658E615A7A02D12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1AD3
Signing time: Sun 01 Nov 2026 09:00:56 +0000
Manifest this update: Sun 01 Nov 2026 09:00:56 +0000
Manifest next update: Mon 02 Nov 2026 09:00:56 +0000
Files and hashes: 1: JOkPA8hTaCex6PevZHvmCNxtsfs.roa (hash: 0uXj8pryRRozEl6lHQb46ndxpU/qwFl9p2os5lcSSok=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: Mzjv2JcGfU4JBI0b19LRZWx0JBdNZHPLrLcdD8CCtoc=)
3: w883UTvE9aAPM26F3jGQ91P2JH0.roa (hash: Zo+XYBLtWLmmmelaOVtJ2aF9Vo4DulRMeStZXPCZZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:57:26:90:6f:ca:a3:16:65:8e:61:5a:7a:02:d1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Nov 1 09:00:56 2026 GMT
Not After : Nov 2 09:00:56 2026 GMT
Subject: CN=87295143437a82dbc7906f96b0ccc7ef434c4b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:99:97:9f:61:9d:82:e8:97:84:00:10:3b:
20:cf:30:24:59:85:45:65:24:15:96:58:4a:31:fb:
17:c4:59:39:7f:84:c8:83:16:1e:88:df:23:cd:08:
32:c4:af:a5:a9:65:66:72:fa:fc:9c:5e:4f:a9:68:
a9:63:89:68:58:f3:a2:8b:56:fa:a3:96:df:39:8b:
a8:76:58:2e:a7:d6:d2:0d:5f:11:ed:f3:07:08:5b:
10:b4:15:ae:1c:f8:32:22:a1:e0:dd:39:74:25:04:
01:40:0e:7f:af:5e:e0:4e:a0:91:b1:ca:9d:2c:33:
c0:f2:bc:96:c5:dd:b9:a5:f7:6e:83:a8:f0:b8:02:
af:fa:95:12:36:73:88:5d:3b:35:01:16:33:51:a4:
67:88:6f:fb:0f:e8:28:e5:e4:2a:e3:03:98:4f:cf:
33:4b:f5:d5:20:da:1f:a8:4c:3f:73:31:bd:e9:78:
c9:62:3e:51:26:5e:10:d7:bc:62:05:fb:ab:99:ae:
7d:3a:df:3d:31:17:96:32:47:09:b0:5f:93:78:fb:
2f:b7:b5:8e:be:0d:e2:d8:a5:88:db:6d:34:70:87:
36:56:f9:61:0c:f3:d1:40:78:6a:1c:05:65:c5:ce:
42:63:2e:04:ee:50:e7:a2:b3:82:35:5d:45:75:0b:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:51:43:43:7A:82:DB:C7:90:6F:96:B0:CC:C7:EF:43:4C:4B:80
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0a:a6:ed:b5:9e:e1:bb:2b:f6:02:a1:9f:d1:67:4a:32:53:
3e:53:34:d2:31:e7:16:9e:5c:d7:ca:a3:80:86:1f:c0:b1:b2:
4a:41:7f:36:78:2b:c5:d8:44:50:9c:9c:82:98:b3:14:e8:5b:
8f:e4:c8:55:4a:3e:ea:4a:e0:07:a1:52:27:22:ec:b0:4f:3a:
cc:7a:ef:75:54:e7:5e:01:c2:7f:68:86:f1:ce:26:ef:ab:3b:
01:54:95:ed:38:94:27:28:73:70:c5:88:bb:3e:56:0d:73:72:
63:d5:f4:4f:1a:22:a3:92:b9:ba:8b:18:0d:08:84:ef:89:ed:
7f:f7:fb:e5:e8:b0:0d:56:2b:0d:a8:40:b3:8f:35:71:c3:2f:
57:c0:35:07:80:60:2e:9d:3e:b5:8c:42:6e:9e:86:af:1a:a2:
6a:36:bd:07:91:e7:97:ce:ff:e7:8c:46:1e:42:cd:d3:d2:d4:
ae:bd:31:91:a8:c1:fc:5a:ae:96:32:ad:89:a5:b2:13:cf:45:
53:e1:a9:c8:81:6f:aa:6a:e1:b9:fb:a8:0b:ff:b4:69:01:10:
6a:d2:40:b4:ca:ad:6f:11:97:5a:d6:5a:04:b1:c4:84:61:e7:
49:11:a2:35:ac:49:da:88:3d:47:cc:bd:62:7f:8e:29:94:a9:
73:27:d4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:24:29 2026 by rpki-client