Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
File: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft (raw, json)
Hash identifier: bMq1ddEI+ohZViQfbaGSRdBSd+TFVo0C7OX43X4T5s8=
Subject key identifier: 3F:ED:E0:5D:29:D6:37:14:10:81:E0:0A:A1:F4:1D:92:67:56:BB:12
Authority key identifier: 8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
Certificate issuer: /CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Certificate serial: 01A0EB53A1C656033460CC0711809EB0C11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
Manifest number: A9
Signing time: Tue 29 Sep 2026 04:02:01 +0000
Manifest this update: Tue 29 Sep 2026 04:02:01 +0000
Manifest next update: Wed 30 Sep 2026 04:02:01 +0000
Files and hashes: 1: IOGuoiGHLJAwbi5pEcAAvhgCSXA.roa (hash: QEfBl0X5W4QlD56u3JPPsSJ9EOc7Fk9l1CYCpj33Vcg=)
2: ZNjBbJJhYFUjEtTGh7JC0wy2zdE.asa (hash: Dy1YZG8ZdOicfaxVr2xJvKZTph/YTekn7sgLkepqLbY=)
3: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl (hash: bpSjoZ25y/qOch4CEiQ28B0dq5WQxmIKjP1Wthf7vlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:a1:c6:56:03:34:60:cc:07:11:80:9e:b0:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Validity
Not Before: Sep 29 04:02:01 2026 GMT
Not After : Sep 30 04:02:01 2026 GMT
Subject: CN=3fede05d29d637141081e00aa1f41d926756bb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:46:44:94:34:c0:ef:93:6e:b9:88:b7:20:
92:b8:b3:fd:37:9d:84:cb:92:01:1f:11:71:aa:1a:
f9:a8:73:28:1f:1d:77:83:aa:3c:24:94:fc:10:4f:
2a:28:68:46:16:5b:33:87:5e:43:d8:c8:d4:1a:f1:
9c:fa:6e:72:3d:cc:bf:be:6f:2e:44:bb:4e:b1:b0:
26:57:94:b6:ac:89:b0:53:6e:8d:cf:30:e9:2f:8c:
5f:b6:6a:5b:e9:9a:ca:6b:b0:71:ae:8a:80:19:19:
fe:a2:fb:64:7d:1a:be:1e:c2:0a:5b:da:c0:83:cd:
0b:0e:01:91:58:47:bd:9f:2f:b1:bf:18:6c:c9:aa:
53:23:4a:7d:71:52:de:e4:c8:69:5d:89:31:77:79:
fe:f1:96:6d:f6:f0:f5:be:8d:eb:0a:eb:e2:f4:7a:
ae:db:46:d4:95:66:7d:fe:ba:93:28:fb:99:59:bc:
49:f2:ce:b1:16:80:77:a1:d5:84:b9:d2:45:80:34:
4b:32:b9:c2:54:b2:d1:48:b9:a0:ee:eb:6a:a4:a9:
2c:35:1e:e5:7e:71:4c:b7:1b:b5:a9:29:95:9c:be:
16:60:14:64:80:8c:97:03:f6:2f:0b:cc:83:e6:2e:
a7:03:27:78:81:8b:3f:c5:c3:1d:a6:9d:e9:30:7e:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:E0:5D:29:D6:37:14:10:81:E0:0A:A1:F4:1D:92:67:56:BB:12
X509v3 Authority Key Identifier:
keyid:8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e1:83:f3:7a:df:dc:6c:90:9c:f2:38:d5:54:cc:5d:63:cc:
ce:0e:22:7e:16:5e:c1:09:d4:0d:66:68:bd:f7:17:3d:5f:04:
30:09:74:40:2e:fd:25:42:22:dd:8a:12:f2:c8:3d:f8:2d:28:
05:0e:7f:f9:92:a7:cb:35:90:d7:b5:cd:bf:9d:3f:a9:6a:66:
e1:7a:36:7d:fa:ce:ff:4e:e9:da:ce:06:2a:a7:a2:c6:ef:bd:
c3:37:2d:ea:3a:59:53:82:a6:7f:f4:f6:7c:01:03:f1:75:e0:
58:5d:30:75:5b:a4:8b:cc:42:25:d4:40:11:ac:bb:a6:d8:00:
e1:0a:7b:a7:ec:58:30:a8:3b:26:ab:cf:7c:b5:3e:72:5e:6b:
77:21:29:d6:c7:c7:6a:74:d5:2e:5d:7b:61:1b:8e:54:b4:5f:
c4:07:8e:4f:bc:aa:e0:0b:06:7f:a2:a9:a5:1f:3d:b3:fc:02:
dc:4f:49:15:85:29:8e:12:5c:ab:08:e5:31:4f:bd:ee:72:90:
eb:50:22:29:0e:72:69:d1:e1:10:8a:70:0a:58:be:b4:b9:b9:
a0:b2:c8:c8:4b:d4:ca:80:c4:9f:07:0c:1f:70:32:c8:7c:89:
f1:53:01:4a:d0:2f:05:0f:3d:b2:bf:c3:e7:75:cd:1e:c0:ac:
cc:0a:0e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:16:16 2026 by rpki-client