Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft
File: 1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft (raw, json)
Hash identifier: 8yK3poIkECbasmtChYyomc+4cdNQVaRmanWE7aWNYJ4=
Subject key identifier: 10:4C:9F:6C:AB:9A:94:1A:36:0B:E6:9C:5F:8D:C8:EF:0C:3E:B6:49
Authority key identifier: FA:2F:09:ED:84:9D:68:8C:6B:C8:B9:A7:52:B2:0F:CB:C8:BE:7D:F5
Certificate issuer: /CN=fa2f09ed849d688c6bc8b9a752b20fcbc8be7df5
Certificate serial: 01A03FA95E19865B596DEAD3894A753AA473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i8J7YSdaIxryLmnUrIPy8i-ffU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft
Manifest number: 76
Signing time: Wed 26 Aug 2026 20:00:59 +0000
Manifest this update: Wed 26 Aug 2026 20:00:59 +0000
Manifest next update: Thu 27 Aug 2026 20:00:59 +0000
Files and hashes: 1: 1-i8J7YSdaIxryLmnUrIPy8i-ffU.crl (hash: yHbFWMjIigjHnaOzQyPbhJCN8OMLv8h1rzKpXDG00ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i8J7YSdaIxryLmnUrIPy8i-ffU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:5e:19:86:5b:59:6d:ea:d3:89:4a:75:3a:a4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2f09ed849d688c6bc8b9a752b20fcbc8be7df5
Validity
Not Before: Aug 26 20:00:59 2026 GMT
Not After : Aug 27 20:00:59 2026 GMT
Subject: CN=104c9f6cab9a941a360be69c5f8dc8ef0c3eb649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:68:92:49:f4:dc:87:70:5c:1a:6e:5d:fd:
c1:14:0f:be:24:6d:87:61:69:13:8c:61:e6:95:39:
ac:10:5e:d7:7a:c7:41:ed:b5:23:79:dc:c2:92:de:
47:59:95:85:54:db:09:f4:f4:5c:f4:14:8b:f2:00:
64:b3:b9:13:96:90:4a:04:68:53:d4:4c:cc:9a:b7:
9a:ee:c1:69:d8:6c:71:c0:62:b4:7f:8d:eb:d0:43:
51:ec:97:b0:78:1b:85:1e:ec:7f:6a:67:23:c3:97:
ec:a1:a5:d1:3f:21:03:24:98:52:2b:11:6a:59:c8:
88:b8:40:f1:14:8f:19:15:f9:48:4c:27:bf:8e:96:
35:ca:c6:70:1f:96:e5:cf:49:14:82:46:df:f9:6f:
7c:b9:9b:cc:72:da:7e:b4:06:03:8c:a1:6c:bd:e2:
35:88:3a:13:58:52:5e:08:a5:6b:cd:2f:9f:82:90:
d8:df:52:b2:9d:34:de:18:f2:01:3f:03:e6:97:86:
ac:89:f8:c4:5f:f4:ed:60:76:bd:a7:24:ce:03:a8:
ba:14:b7:70:2d:55:4e:7f:cd:45:81:ec:d8:49:3a:
a1:6c:9e:8b:9e:83:34:2a:a3:40:47:63:49:e6:8e:
ea:14:01:60:ba:41:5c:dc:73:8e:c5:be:6b:0d:b2:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:9F:6C:AB:9A:94:1A:36:0B:E6:9C:5F:8D:C8:EF:0C:3E:B6:49
X509v3 Authority Key Identifier:
keyid:FA:2F:09:ED:84:9D:68:8C:6B:C8:B9:A7:52:B2:0F:CB:C8:BE:7D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i8J7YSdaIxryLmnUrIPy8i-ffU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b47a88-a715-4a05-8f52-1bbd95172a28/1/1-i8J7YSdaIxryLmnUrIPy8i-ffU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:78:14:57:a8:f6:58:f7:45:08:8a:f7:cf:d4:60:14:16:24:
f2:db:02:3f:b1:44:b4:b2:a4:e0:66:34:27:48:f0:b6:90:5c:
11:62:9b:a9:cf:90:be:f5:ae:36:13:2c:68:96:b4:9b:db:d0:
1f:54:07:ec:14:74:eb:9c:9e:ba:21:d1:de:5e:d7:d8:6c:70:
a2:6b:ca:36:f8:e2:76:55:89:9f:21:e5:cb:91:4d:d3:39:2f:
51:42:07:42:b1:2a:b2:15:32:56:65:f5:b8:67:f8:02:5a:53:
1b:b5:13:c9:3d:40:6c:03:ad:9d:9b:71:6d:b5:9b:d6:24:6c:
9a:15:b8:c3:e9:4a:1b:1e:25:a9:35:66:b0:43:77:02:c6:ae:
93:4e:94:29:d6:a2:0e:93:21:fb:2a:59:f2:ea:37:b6:2a:99:
20:44:0e:d0:67:b3:fd:1a:7a:9c:c9:6d:5a:15:32:01:0b:f3:
48:05:87:b9:52:d7:75:1b:c2:4e:58:88:1f:f9:80:97:6e:6c:
d9:5b:65:39:9c:55:cd:09:cf:10:ea:16:23:f3:58:24:2f:8e:
88:1a:c0:ba:00:b5:93:0b:dd:c9:86:b3:d3:8d:78:9c:af:ce:
93:0c:0a:84:11:8b:fd:ab:32:d2:b0:bb:b1:f1:f1:d1:0a:bc:
53:97:9c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:39 2026 by rpki-client