Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
File: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft (raw, json)
Hash identifier: gZ/jYySrGMfjekmJiUBHaufXC833XrTvnHGWwTZUzKE=
Subject key identifier: DE:AF:EB:FD:42:88:C4:52:CD:6E:D1:D9:2A:26:0B:CD:85:42:F1:51
Authority key identifier: 8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
Certificate issuer: /CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Certificate serial: 019FF7FEF7898CD8F4327B15583AC84C354E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
Manifest number: 2B
Signing time: Wed 12 Aug 2026 22:01:49 +0000
Manifest this update: Wed 12 Aug 2026 22:01:49 +0000
Manifest next update: Thu 13 Aug 2026 22:01:49 +0000
Files and hashes: 1: IOGuoiGHLJAwbi5pEcAAvhgCSXA.roa (hash: QEfBl0X5W4QlD56u3JPPsSJ9EOc7Fk9l1CYCpj33Vcg=)
2: ZNjBbJJhYFUjEtTGh7JC0wy2zdE.asa (hash: Dy1YZG8ZdOicfaxVr2xJvKZTph/YTekn7sgLkepqLbY=)
3: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl (hash: 2xgYAP32MrRnZK6152E4R+sr7esmtNRvId2l55Z0CEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:f7:89:8c:d8:f4:32:7b:15:58:3a:c8:4c:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Validity
Not Before: Aug 12 22:01:49 2026 GMT
Not After : Aug 13 22:01:49 2026 GMT
Subject: CN=deafebfd4288c452cd6ed1d92a260bcd8542f151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:31:b4:2c:f8:78:00:d0:39:c5:cd:12:5a:
80:3a:9a:99:7e:28:66:c4:42:a6:16:f0:b1:ea:b1:
65:e7:2c:bc:39:e6:38:93:b6:75:93:39:17:50:28:
b4:ca:56:54:75:54:68:dc:cf:48:8a:fb:2d:6a:59:
10:55:3b:46:4b:aa:c5:ec:e4:ca:01:1e:d8:1e:ce:
42:b5:0a:46:ad:ab:b9:3e:70:33:a8:4e:7c:a1:4d:
8c:80:61:d6:ff:26:31:22:f3:c9:5e:59:b3:88:85:
45:8a:51:3d:f7:75:5d:50:4a:38:4a:7c:13:84:d8:
97:b8:c9:5e:bf:5b:84:7e:9d:32:56:ae:c3:79:70:
d2:3b:05:fe:5e:21:ae:73:1e:1b:e7:6d:6e:3c:19:
e6:f2:d8:8d:a6:29:1e:58:d2:09:dd:74:91:05:6d:
76:7b:3e:d8:51:f8:00:3e:2c:10:6c:e5:0f:67:b1:
58:4d:a5:b9:20:c8:ca:96:31:6e:a1:72:44:c7:f2:
72:fa:93:05:c8:e3:a8:99:c3:0d:47:fc:25:5c:9b:
ed:61:fa:4c:c5:58:03:be:47:82:75:38:15:88:ed:
8b:d8:da:5a:09:84:ff:8b:23:6a:21:21:fd:e3:93:
fd:32:55:18:48:0a:3b:b0:26:b8:12:76:59:11:15:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AF:EB:FD:42:88:C4:52:CD:6E:D1:D9:2A:26:0B:CD:85:42:F1:51
X509v3 Authority Key Identifier:
keyid:8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:34:e0:ee:e9:7f:14:76:97:6b:62:60:02:38:29:5c:60:b6:
4d:21:b0:47:07:cd:1f:06:8a:4c:ec:ff:d5:6b:29:93:c1:72:
e1:09:3a:d0:c3:4c:54:83:e8:a7:7d:9c:4a:f4:cb:44:80:5d:
88:37:14:2f:5f:c6:2d:71:18:96:88:ae:bf:b5:39:6e:d4:8d:
d5:c7:7e:b0:61:36:6f:ab:39:a5:1b:44:7b:75:38:8b:2b:3e:
20:0b:8a:99:87:de:7a:d3:31:3a:c4:17:1d:2c:f6:db:60:17:
d6:c3:e4:3e:5d:b8:48:aa:89:26:e5:b2:ba:78:31:dd:1d:86:
c8:b1:a1:f6:59:56:85:a5:ec:1f:d0:8a:d8:97:bf:c4:bc:0e:
e2:f4:2a:7b:67:32:57:bd:71:58:18:15:2c:1b:0e:aa:42:98:
00:54:79:c2:27:14:79:77:26:b2:da:db:6b:13:e3:8f:7b:4b:
b5:8d:9c:8c:55:a7:c7:3a:a5:05:44:40:96:8f:56:3f:64:a7:
ea:d0:68:4a:5f:ed:01:36:96:8c:41:81:ea:d9:60:f9:dc:35:
ab:ec:d0:43:bf:50:08:b3:79:aa:bf:ab:41:8b:79:03:93:4b:
72:02:17:4b:dd:48:66:f6:b1:0f:32:69:2e:77:90:65:c4:29:
b0:1e:e0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:26 2026 by rpki-client