Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: Dl8muONkGhsPA/FLMtJoYZhtSsID5l+dEMmucApY4jk=
Subject key identifier: 6E:04:A4:FE:44:C4:21:CF:7C:21:5F:52:7A:F1:46:C3:7B:1B:4B:BE
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 019F3784EDFFFCCCB8438D1E66192C9631B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 13A7
Signing time: Mon 06 Jul 2026 13:01:26 +0000
Manifest this update: Mon 06 Jul 2026 13:01:26 +0000
Manifest next update: Tue 07 Jul 2026 13:01:26 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: NMAEbWTc4ybvJIi+J9uQZfx5VfTUviM7nJDaG96lJyY=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:84:ed:ff:fc:cc:b8:43:8d:1e:66:19:2c:96:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Jul 6 13:01:26 2026 GMT
Not After : Jul 7 13:01:26 2026 GMT
Subject: CN=6e04a4fe44c421cf7c215f527af146c37b1b4bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:09:63:45:1d:92:29:53:a9:5f:ba:00:40:
bb:83:6d:fe:a7:44:5f:c8:46:0a:a1:a4:da:5a:9a:
72:35:86:01:01:d4:1f:1d:d2:f3:1b:d5:fc:5e:30:
58:7b:de:69:36:00:8e:ab:9f:1f:17:40:87:22:6a:
3b:c1:d5:43:e3:fc:f6:c6:7e:86:c1:c7:a0:53:50:
df:cb:3c:66:7b:73:07:74:a9:79:5b:1a:e9:ee:e8:
c7:cc:d1:cd:c3:29:e7:0a:06:d4:ff:b6:42:c9:89:
4b:08:6d:e9:7d:a6:75:ce:43:20:3c:0f:45:7a:23:
9f:01:d5:d2:ec:ac:df:ca:71:b8:1c:a7:e5:af:b3:
bc:60:bc:9c:41:fe:dd:c5:50:da:c0:bc:28:39:b1:
a9:56:df:90:66:57:64:30:aa:28:ea:fa:0f:d1:99:
3d:2b:55:e4:1e:6d:df:2c:97:38:9f:f7:8e:81:04:
a5:14:6b:ff:1e:22:38:de:cc:00:87:12:be:84:0c:
79:6f:a7:df:ec:72:5e:5c:3f:3c:61:03:57:87:1c:
39:67:1d:f5:0e:9c:35:3a:66:54:cd:68:a2:67:58:
ad:15:50:1a:3d:41:be:f9:af:5a:3e:15:04:e7:67:
39:cb:94:9f:1b:9c:e8:47:01:c9:bb:2b:0c:44:2e:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:A4:FE:44:C4:21:CF:7C:21:5F:52:7A:F1:46:C3:7B:1B:4B:BE
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:42:dd:88:ac:ce:18:9f:f1:22:de:60:de:3d:ef:ce:ad:c2:
b8:35:5a:aa:58:fa:66:18:2f:34:eb:20:e7:24:83:a8:8f:0f:
91:0e:bf:99:8e:bf:a5:d7:54:e8:b4:08:84:25:6e:30:e1:03:
96:45:42:8b:89:15:35:8b:cf:bb:2c:cf:52:0f:82:c6:1f:1a:
b5:98:5b:3f:b2:22:78:66:03:d9:74:84:77:b1:4e:c8:6b:fd:
ae:63:37:ef:35:ae:ae:b6:2b:d4:eb:bf:05:c5:0a:2b:81:0d:
16:70:34:3e:80:f1:68:67:21:83:a8:b3:23:7a:b5:5a:b9:15:
38:00:e0:ab:15:c6:ca:52:ed:f7:5c:2c:ed:60:c2:43:09:88:
36:d1:1c:4e:5e:a2:82:cf:eb:5c:b5:fe:cd:d9:6c:0d:f6:0f:
25:e6:0f:d7:a9:a8:76:47:ec:f0:5e:8b:ad:49:83:d7:65:ea:
72:c2:27:bd:cd:58:29:bb:4c:23:62:a9:ae:2b:60:4c:46:18:
4c:8f:88:e5:bc:00:c7:70:bc:82:c3:15:a9:67:d6:18:41:88:
12:20:dd:1a:4b:f1:ad:87:db:98:d9:38:06:81:46:98:f4:25:
7a:7c:2d:6b:1c:f9:70:72:ab:54:e9:33:d4:31:7e:be:87:2a:
e9:2f:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:19:29 2026 by rpki-client