Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: LCm1DvYCz35hrQNSpR1AxOTaUXmOgtH2h7wrAUe91hg=
Subject key identifier: 5D:3E:AA:05:A2:2A:C2:B4:19:42:96:1C:E3:FB:8F:39:6B:5E:29:CE
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 01A118623011933A097A503A15D7A8A06E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 14A0
Signing time: Wed 07 Oct 2026 22:00:50 +0000
Manifest this update: Wed 07 Oct 2026 22:00:50 +0000
Manifest next update: Thu 08 Oct 2026 22:00:50 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: BNnATpTZfYQ7tiENjRCaj7IP/wDFTqY1lYSw170lm0c=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:62:30:11:93:3a:09:7a:50:3a:15:d7:a8:a0:6e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Oct 7 22:00:50 2026 GMT
Not After : Oct 8 22:00:50 2026 GMT
Subject: CN=5d3eaa05a22ac2b41942961ce3fb8f396b5e29ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:b4:75:a4:ac:9d:00:e8:13:17:b9:27:c0:
42:c1:f6:8c:d6:bd:d3:72:74:8c:f2:fa:7a:45:50:
a9:3d:89:db:37:6d:06:9d:08:0d:44:b0:85:bb:90:
f1:bc:59:ea:0b:13:a6:09:42:79:f5:a9:70:c7:1c:
fc:0b:0b:67:17:d8:6e:6c:cd:36:d0:a1:fd:3a:29:
e5:89:22:fe:01:21:8a:93:e6:80:df:7c:5a:e7:f9:
89:2e:5c:ad:6d:b7:74:ed:27:a3:d3:35:96:90:b6:
56:13:42:77:c4:c7:1a:ff:14:6b:70:e6:a1:74:e7:
f7:95:68:0d:97:bc:50:f9:f9:ce:48:7a:bd:48:15:
6c:86:da:ff:e5:e7:a9:5b:48:84:ac:8c:36:db:2e:
0a:08:68:05:75:4b:8a:03:ba:41:76:4a:32:e2:4a:
de:79:87:c9:76:ab:bd:1d:a4:47:3f:16:59:0c:56:
2b:50:f0:2b:e0:d1:39:a1:e6:99:3f:88:79:66:88:
8a:ea:e0:93:00:65:ea:5b:d1:ae:fc:cd:8c:d4:bf:
1a:97:c9:8c:b2:68:03:5a:4e:a3:e2:55:f0:61:26:
26:42:a4:32:be:25:be:b4:64:e3:08:d0:47:fe:33:
29:e0:28:16:42:c9:13:cd:fb:19:cd:ff:d9:62:28:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3E:AA:05:A2:2A:C2:B4:19:42:96:1C:E3:FB:8F:39:6B:5E:29:CE
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:03:da:33:fb:45:4f:56:b0:24:a0:99:45:3a:ab:ea:10:52:
e7:2e:39:26:15:af:b1:ec:9b:77:8d:1b:82:c4:eb:a7:ed:da:
06:66:65:92:c5:e0:ce:f9:19:1a:93:9d:4a:38:d6:2c:a4:ac:
cb:3a:45:a7:0f:44:bd:61:81:0d:4c:00:57:11:61:5d:a0:43:
85:61:89:81:14:6e:49:ac:84:a9:e3:87:2d:10:b8:8e:46:7a:
38:7e:45:ca:c7:dd:43:db:d2:a8:8b:aa:64:e8:e5:54:7c:bd:
1e:df:67:45:c2:45:ba:8d:06:95:61:aa:c8:d0:f6:1c:46:f9:
b2:85:aa:23:2c:85:f2:0a:cf:9c:c8:f8:51:d0:e9:d6:3f:85:
e3:80:bc:1b:1d:1f:77:9f:81:9c:27:d4:08:ee:a6:94:3e:3c:
b2:65:06:48:c8:3c:b8:e3:2e:7d:1f:50:5b:17:ea:b7:45:93:
1a:11:c2:58:2e:5a:d6:ae:19:df:e8:e5:66:29:ef:1f:ba:d4:
33:13:39:90:02:03:de:7e:4f:54:da:c3:24:12:cb:5b:b8:f0:
e2:4d:7c:e6:d4:c7:53:89:a7:c6:5e:6c:b5:b6:da:96:de:4c:
3a:1e:3a:68:b7:50:e5:b0:79:19:0e:7a:83:48:14:0b:7d:ae:
24:0e:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:53:42 2026 by rpki-client