Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: 8jt71Q3gzpiSe8zklKQgIzv4/hANddkibEtLJrfdLk8=
Subject key identifier: 21:8A:B9:9F:D1:AA:8D:A1:D2:48:98:C1:82:1E:4C:1C:79:2F:6C:94
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 01A11A50796834D586330577E66B69B7428C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 14A1
Signing time: Thu 08 Oct 2026 07:00:43 +0000
Manifest this update: Thu 08 Oct 2026 07:00:43 +0000
Manifest next update: Fri 09 Oct 2026 07:00:43 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: YiI/E9KL4Vrqdfheo1xXXlAPYVL+VeqmEO+41pLSVX8=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:79:68:34:d5:86:33:05:77:e6:6b:69:b7:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Oct 8 07:00:43 2026 GMT
Not After : Oct 9 07:00:43 2026 GMT
Subject: CN=218ab99fd1aa8da1d24898c1821e4c1c792f6c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:82:ad:2c:15:d9:13:f9:3e:3b:77:b0:a2:
3a:51:a8:b8:dc:ae:58:26:74:c4:1a:97:4c:c6:23:
37:ae:05:b8:a1:1b:f7:c0:50:00:80:81:c1:86:60:
0d:ab:4f:41:7f:e3:1b:3e:50:21:9b:7b:fa:ed:2f:
9d:b2:58:51:88:0a:80:ce:c7:d7:40:70:a3:9c:6b:
fd:07:bb:78:4b:2b:bf:82:d1:c8:7d:88:54:44:81:
ba:49:d0:1a:1a:1b:8f:ab:94:ff:22:4e:11:92:ac:
18:d0:66:ea:fa:5a:48:4b:50:2c:6b:d3:71:93:71:
57:d8:6e:2b:34:ac:03:5f:ae:f0:6c:02:30:39:a4:
d1:54:c2:2b:42:8d:1e:c5:39:d1:6d:0d:d6:b1:5c:
48:ac:9a:0f:a2:58:22:38:d0:61:a5:2b:5b:40:0a:
d3:82:83:80:7e:16:0b:1b:3c:dd:1f:54:d5:07:95:
09:1e:ac:44:23:c0:91:10:1a:e4:57:66:b7:b0:5d:
f2:8e:27:7d:b9:6d:23:bf:e3:ee:ed:86:d1:59:e9:
52:1b:7e:90:8d:c9:66:42:35:19:12:93:ca:40:16:
20:5e:91:d7:df:b6:17:1e:22:a0:ba:32:42:d7:36:
52:78:b4:b0:75:49:0b:b7:f5:c7:f7:0d:37:cd:d3:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:B9:9F:D1:AA:8D:A1:D2:48:98:C1:82:1E:4C:1C:79:2F:6C:94
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:2e:7e:5e:61:83:fc:55:50:68:bc:5d:35:03:82:8f:b3:
71:cc:d8:49:ec:6e:e0:92:6e:a0:49:44:b6:0c:be:55:28:25:
34:5d:66:12:91:d6:9f:5e:c9:fe:bf:ec:86:b2:29:7f:97:54:
31:e8:f8:99:cd:dc:e9:c5:e3:85:72:df:2c:95:7c:43:40:6c:
0b:be:36:38:ea:df:2e:f6:07:f5:04:7e:a7:71:b0:dd:a3:05:
b2:4a:14:5e:81:01:49:4d:b8:c6:47:06:12:49:e7:d3:c4:64:
46:db:58:aa:be:6d:9c:30:d7:5e:50:9c:32:b0:02:52:a1:0f:
ac:0e:6f:39:10:c5:50:54:80:0f:92:a3:2e:99:f9:ab:37:64:
5c:5c:c7:b0:5e:55:6f:3e:9c:ca:ba:43:31:7f:08:50:a6:24:
97:9a:66:cf:dd:86:16:92:68:d8:ea:95:63:aa:00:76:9c:cd:
4a:b0:6f:1a:c7:4f:a2:86:13:7a:f6:1c:e8:3d:76:68:ce:1e:
a6:c1:73:db:46:ff:b0:d5:97:8f:db:ea:16:c7:c0:e2:c3:e8:
48:3c:10:d3:e8:3c:36:4c:e8:be:a3:89:8b:9b:15:ab:5b:ab:
58:e7:15:26:4f:8e:d2:d6:92:c0:8a:4d:f3:69:73:fa:86:9e:
aa:1c:3b:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaUHloNNWGMwV35mtpt0KMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTFlMGExMDRiNWIzZGRmMWY1ZDA4ZTdhY2IyYjc5ZTBk
NTY2ZjkwHhcNMjYxMDA4MDcwMDQzWhcNMjYxMDA5MDcwMDQzWjAzMTEwLwYDVQQD
EygyMThhYjk5ZmQxYWE4ZGExZDI0ODk4YzE4MjFlNGMxYzc5MmY2Yzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9SCrSwV2RP5Pjt3sKI6Uai43K5Y
JnTEGpdMxiM3rgW4oRv3wFAAgIHBhmANq09Bf+MbPlAhm3v67S+dslhRiAqAzsfX
QHCjnGv9B7t4Syu/gtHIfYhURIG6SdAaGhuPq5T/Ik4RkqwY0Gbq+lpIS1Asa9Nx
k3FX2G4rNKwDX67wbAIwOaTRVMIrQo0exTnRbQ3WsVxIrJoPolgiONBhpStbQArT
goOAfhYLGzzdH1TVB5UJHqxEI8CREBrkV2a3sF3yjid9uW0jv+Pu7YbRWelSG36Q
jclmQjUZEpPKQBYgXpHX37YXHiKgujJC1zZSeLSwdUkLt/XH9w03zdNlFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGKuZ/Rqo2h0kiYwYIeTBx5L2yUMB8GA1UdIwQY
MBaAFIuR4KEEtbPd8fXQjnrLK3ng1Wb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYt
YThjNTc2MjI0YmEyLzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYtYThjNTc2MjI0YmEy
LzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVIufl5h
g/xVUGi8XTUDgo+zcczYSexu4JJuoElEtgy+VSglNF1mEpHWn17J/r/shrIpf5dU
Mej4mc3c6cXjhXLfLJV8Q0BsC742OOrfLvYH9QR+p3Gw3aMFskoUXoEBSU24xkcG
Eknn08RkRttYqr5tnDDXXlCcMrACUqEPrA5vORDFUFSAD5KjLpn5qzdkXFzHsF5V
bz6cyrpDMX8IUKYkl5pmz92GFpJo2OqVY6oAdpzNSrBvGsdPooYTevYc6D12aM4e
psFz20b/sNWXj9vqFsfA4sPoSDwQ0+g8NkzovqOJi5sVq1urWOcVJk+O0taSwIpN
82lz+oaeqhw7Sw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:57:56 2026 by rpki-client