Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
File: i9rBinrVAbp-oTVnkJ8X5PcydBM.mft (raw, json)
Hash identifier: mZ0fRSK/ZR2UucG0gQZpt2f92SNsVzJGsaiu4raE5do=
Subject key identifier: 9E:95:E3:BD:80:4C:65:42:92:14:1D:35:0E:6D:F3:7A:B2:A3:D3:82
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 01A17EF3D564F75070BE889138B71A26AC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
Manifest number: 1A38
Signing time: Tue 27 Oct 2026 20:01:11 +0000
Manifest this update: Tue 27 Oct 2026 20:01:11 +0000
Manifest next update: Wed 28 Oct 2026 20:01:11 +0000
Files and hashes: 1: 4-tdlG2H4yBGqlSyw9Pu1K8cSFM.roa (hash: aYm6mACp3V5w1VX6NUY2tfvQ4noQ/SNCf/QrDURJoS4=)
2: 4UxPVNMUTbdWoU8-6H-YrNd5L28.roa (hash: jqtK72novEhOqpQ7V6Nc1EKSI7gynpMCdZyxZfD+XSA=)
3: H3KtWg1abQ9XAu3Q4e3HFpmO7nE.roa (hash: Am3ACwgnl6lBOPlF3rjG4VqJ7Omf1eSvcQtD/tgT9KM=)
4: bsBKeV9TKKB0T6Q5bAGtAobZQpM.roa (hash: lHXTNkiHwNjphOmxd7u1esiqM8zHkBlYPkOwTiTiW48=)
5: fJBYOrLyzk14UTEo1zFCG7NWE2o.roa (hash: zOjZk7XtL8k8a26MB1UedbKFLjYjzmbLPnFplVavzVo=)
6: i9rBinrVAbp-oTVnkJ8X5PcydBM.crl (hash: 4o0O9eYr5F7Wv3c387uO1jLIM9vQ63eXh4B2K/MtL8Q=)
7: mr0C8N8KBsyLajcjyb0LeLTUSOw.roa (hash: pjpnLVm72B9KKrhRvM3BuG5BE9uOdhz0t9cdxfE/7K0=)
8: ni4mPYuoaTogEfEJMt8yjWc5Tf0.roa (hash: Q6g49JAZW87R0XAWR4NV0IhoFs9MZeADZgnGT94oHSc=)
9: xhdaDTn7Jtw39GRdHSy9qt9h2p8.roa (hash: 8mWlGeXePwMMWJjjNhLSfXvR/3bdxGlVtOz7wI4ajOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:d5:64:f7:50:70:be:88:91:38:b7:1a:26:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Oct 27 20:01:11 2026 GMT
Not After : Oct 28 20:01:11 2026 GMT
Subject: CN=9e95e3bd804c654292141d350e6df37ab2a3d382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:2e:27:97:db:ea:fc:03:73:8a:78:0e:64:
0b:b6:52:d7:b6:54:f5:0f:19:c6:ef:0d:ad:40:9a:
a4:9b:c6:79:df:1d:f1:c4:61:fd:07:3d:29:25:89:
6e:13:e1:62:69:35:e0:c0:c1:b0:93:a9:a4:36:02:
2e:8c:5a:d1:3e:71:ce:52:c4:95:39:2b:8d:c1:bc:
33:7c:78:52:be:6d:c4:1e:b5:5d:19:0e:49:34:82:
74:01:3a:e0:33:aa:4a:dd:8d:65:45:89:b8:ce:77:
40:ee:54:4f:79:80:b6:ac:1a:c1:9d:6e:2b:06:d0:
c3:78:fd:79:91:fb:1a:95:88:09:84:d9:de:0c:7a:
ad:f4:88:b3:95:dd:a0:d2:4e:5e:11:86:4e:d7:a2:
b0:70:05:30:88:44:3e:0a:74:c0:18:7f:7c:f1:d4:
3e:e0:24:2f:d2:40:c6:26:60:18:f9:8b:c7:d2:11:
24:33:0a:f9:8a:ad:15:fa:a2:13:02:5e:16:fa:84:
ef:06:aa:fc:e6:a9:e7:ce:9d:53:13:84:31:91:f4:
ae:13:58:ac:bb:32:ac:de:d0:b4:a3:22:76:a3:0f:
af:fc:c1:e6:df:20:27:31:0a:68:f1:d0:2d:a8:99:
15:1f:ed:78:6b:cf:8e:ce:5a:6c:31:1d:d6:40:dd:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:E3:BD:80:4C:65:42:92:14:1D:35:0E:6D:F3:7A:B2:A3:D3:82
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1e:1f:70:92:b1:b4:94:1f:3a:6d:aa:b1:d2:f7:04:e1:d9:
0f:5f:fe:73:6c:1b:29:40:0c:7b:60:35:f3:0e:f2:d2:03:83:
d1:9b:b7:58:a0:49:d4:34:8f:cf:fa:e6:7c:18:cb:3d:ab:bd:
a0:58:bc:2b:ab:4d:1d:9c:c0:13:f0:46:57:e0:65:10:da:1a:
ac:91:ea:1f:15:72:3e:76:c0:3a:2b:3c:b7:81:92:3a:0d:6b:
b9:52:1e:ae:54:0e:8d:c8:ab:40:73:11:01:28:54:24:b5:ce:
39:65:2f:68:ea:9b:fd:33:3f:8f:92:c7:c1:6e:62:8f:37:2f:
1a:73:13:23:43:69:b5:41:0f:4a:91:4e:6d:e9:5d:5e:6b:b6:
9c:67:a7:f1:ca:ef:6e:51:c6:98:bc:49:bb:4e:71:1e:c0:63:
1e:e7:74:53:9e:a8:5b:5a:ef:77:2d:d6:fd:86:49:f0:76:12:
27:7d:b8:c5:47:fc:30:d2:ad:3b:1b:2d:70:14:60:72:92:a4:
75:ed:b7:b7:3d:d4:a7:de:9e:cd:3d:36:07:ea:8e:cf:19:30:
b7:45:48:12:77:ae:b1:82:9d:94:d3:24:f4:8d:ad:9f:f4:e4:
49:84:b7:0a:18:6b:5f:95:55:97:1a:dd:e4:b6:1f:8b:79:03:
74:e3:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:02:39 2026 by rpki-client