Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: n6d4W83y1mAACZyjVPBtvcO50wttihXjikZmkdWLVhk=
Subject key identifier: 37:A6:CA:CE:A9:3A:C2:ED:D4:BD:75:FC:41:C2:EE:71:71:F8:98:AA
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 01A01F42A10CC1FFC691DE139494B2FE4FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 141F
Signing time: Thu 20 Aug 2026 13:00:55 +0000
Manifest this update: Thu 20 Aug 2026 13:00:55 +0000
Manifest next update: Fri 21 Aug 2026 13:00:55 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: 6+0hC5+KHcl58P4um8LR47bw7KYmQbP6jhREg80rbtA=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:42:a1:0c:c1:ff:c6:91:de:13:94:94:b2:fe:4f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Aug 20 13:00:55 2026 GMT
Not After : Aug 21 13:00:55 2026 GMT
Subject: CN=37a6cacea93ac2edd4bd75fc41c2ee7171f898aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:92:a1:cb:6e:5b:ee:d3:19:10:65:37:04:
ef:46:ca:ce:16:f2:ad:91:b6:d4:d7:7c:2f:67:9c:
53:e4:f1:eb:f4:19:d4:bd:8b:be:6c:af:bc:46:70:
e2:50:a9:6b:2e:c2:cb:34:b2:f7:c8:4e:65:1a:94:
58:1d:f6:99:4e:f3:2d:9d:f4:c0:cd:ca:e7:b6:1e:
4e:a8:4a:87:2c:89:b5:fc:cf:63:33:e3:5b:1a:de:
25:6e:28:95:84:2d:4d:9f:78:56:81:0d:63:fe:56:
8d:e4:b2:cd:d1:11:94:3e:a1:1a:ea:a3:79:d0:52:
db:bf:14:d4:a7:89:b1:94:9b:08:f8:19:19:89:cc:
ec:0f:cd:eb:d5:e5:34:21:ff:e8:87:74:5d:ad:37:
b3:49:e5:b0:85:96:5c:98:34:57:b6:c8:75:0f:53:
94:c5:fe:9b:e0:3b:3f:3a:f0:f3:c6:fa:c7:3a:7a:
20:24:ec:31:0a:e4:fe:33:c7:cc:8b:fe:44:a0:07:
1d:9d:7c:4c:97:ee:8c:3d:8f:8f:0a:19:b2:31:6a:
6e:a5:49:42:fd:d2:f1:7e:e6:2d:e8:62:fd:bc:89:
54:2e:64:7b:1a:a7:d5:70:40:16:0b:3a:92:0b:f1:
17:f6:59:c1:37:cb:c6:36:18:3e:03:30:d7:f2:6e:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:CA:CE:A9:3A:C2:ED:D4:BD:75:FC:41:C2:EE:71:71:F8:98:AA
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e4:18:a3:ec:7b:c8:0f:8a:5e:c7:9e:19:d1:97:e4:ff:09:
ab:0a:2f:69:04:eb:a0:44:eb:2c:bb:ad:18:e0:f8:41:ee:f2:
25:a8:7f:d6:97:1b:c9:99:0c:6a:53:c0:0c:0e:85:8e:2a:55:
47:4a:86:d1:8c:48:e6:4d:6c:b6:b8:49:a8:21:49:ed:38:c1:
52:d2:62:95:92:13:ef:75:83:96:9e:23:8d:d4:84:33:c5:b6:
70:bb:0d:45:0d:3e:3a:5f:5c:be:61:46:62:0b:c4:12:84:da:
2f:d9:6b:55:fe:4a:2b:19:f5:19:f1:3e:26:54:b0:41:f0:47:
33:7e:49:fb:1a:e6:0c:66:ad:fb:59:de:fa:5c:f0:cb:d4:1e:
5d:b6:72:07:55:43:9f:74:f5:ab:e2:ae:05:3a:81:4d:c3:24:
59:66:01:87:a3:9e:e0:17:58:c2:6a:ab:22:c6:1d:25:08:cf:
7c:61:cb:f4:ee:30:7c:b0:06:bc:47:c9:0f:de:e7:9d:a6:d0:
68:6f:c8:35:d1:f8:fe:96:7a:ef:97:13:0c:18:ef:42:dc:81:
63:9e:4d:0e:ed:ec:e5:74:f4:23:d8:ce:87:c2:f8:5e:cf:49:
cf:fd:d7:80:40:ec:97:6c:15:7f:6b:cb:d4:da:f6:26:e3:67:
13:cf:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:22 2026 by rpki-client