Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: SaikX2Dh6JBOhI/3xYYEiUSK6Jpy9stJ/FhgpjUAl4g=
Subject key identifier: 64:39:4F:AD:69:66:69:18:78:4B:3D:34:B9:95:5C:74:8D:54:D4:84
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 01A1126039FD9918A18486328F65910C85E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0FFB
Signing time: Tue 06 Oct 2026 18:00:58 +0000
Manifest this update: Tue 06 Oct 2026 18:00:58 +0000
Manifest next update: Wed 07 Oct 2026 18:00:58 +0000
Files and hashes: 1: Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa (hash: 6EGWa/823S4j3qzNZzVNi7+aLxh9oMMF178PdW3UF1g=)
2: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: 6pBgmNTwEec7dExaTBokbwK2a13Il0rSM/m9ltD1Xf0=)
3: uR6qk5DeglUWNbzyA8X_zxBn_Us.roa (hash: 7cX65e6MFwNlQSj+gYDD5WGRNzvo97dTNPuyxMqN7k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:60:39:fd:99:18:a1:84:86:32:8f:65:91:0c:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Oct 6 18:00:58 2026 GMT
Not After : Oct 7 18:00:58 2026 GMT
Subject: CN=64394fad69666918784b3d34b9955c748d54d484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:2c:02:c7:84:5a:b0:d9:2c:af:32:a3:eb:
f8:e8:6e:38:9c:10:59:11:21:4b:5d:18:21:a6:c6:
7d:15:79:70:94:6b:e1:69:37:1f:ae:21:67:eb:4e:
3a:c4:b2:ae:23:ea:54:77:c0:c3:2f:b4:5f:fe:dc:
aa:52:36:69:dd:0e:85:1d:13:75:b1:b1:55:48:07:
a3:e8:7a:69:e4:a9:86:9a:0a:94:ea:24:b0:51:ff:
c9:2b:04:9e:4a:58:e8:cb:ae:f9:d7:1d:b1:db:f8:
58:0a:d6:8a:19:b0:88:94:2c:1d:87:57:89:f4:a6:
d0:0f:94:60:16:c0:63:c6:06:02:13:02:0f:97:b6:
b4:c6:99:e5:dd:b7:ce:0b:12:c8:f0:55:d9:4a:a0:
20:e5:a0:b6:cb:d9:d2:77:a6:36:d5:5c:93:65:fc:
a5:ef:e8:94:f1:be:87:81:b9:14:06:f0:82:47:41:
b2:58:53:46:4d:98:15:86:22:f7:5b:03:ab:8f:67:
b2:c0:36:0a:bb:78:a2:b6:b6:76:a6:1d:35:e2:9d:
78:cb:72:84:59:e7:18:27:bb:61:e6:7c:49:82:83:
7f:59:26:ea:ff:7e:e3:db:63:18:e9:13:0d:cc:81:
da:24:4b:a2:41:3f:a9:c3:08:a8:90:f1:61:c6:6c:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:39:4F:AD:69:66:69:18:78:4B:3D:34:B9:95:5C:74:8D:54:D4:84
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:58:8d:e3:64:b7:b1:09:68:6c:62:e7:20:15:46:e1:a4:ba:
9a:41:23:21:42:1c:6c:b9:1c:ee:f8:1b:e8:0e:4c:01:d7:8e:
fe:ea:bb:85:df:bd:4f:2e:64:e4:4a:20:bb:60:c4:b8:de:a7:
eb:0a:7e:38:6f:88:30:cc:84:cf:ef:8d:c7:8a:38:2d:fd:c8:
a0:ef:fe:cc:50:3c:e5:01:30:d5:c0:d3:d2:e9:b7:6d:47:e6:
a0:65:bc:16:7f:46:f1:d4:6b:4e:90:45:6d:eb:68:f3:c8:12:
ce:7d:84:dd:68:9a:42:f4:d5:47:6b:48:27:b7:81:1c:c9:d8:
03:c6:53:11:ae:20:95:5a:4a:f1:24:6e:fa:66:24:cd:26:9d:
46:e3:62:ab:f0:95:ae:e2:36:fe:0c:56:7e:5e:cb:8e:32:a5:
6b:5a:66:79:b2:ce:2a:55:54:36:6d:47:28:cb:89:3d:d7:4c:
84:02:6e:1e:88:e5:18:26:51:2f:88:c6:33:06:05:a7:b6:29:
1e:d4:3a:93:86:36:a2:9b:76:62:bf:fa:f3:4f:d3:8c:1d:3e:
db:c5:14:fb:95:80:60:f6:94:ba:be:eb:51:df:70:a1:6c:a3:
9e:23:71:8b:89:54:99:58:73:bb:15:0b:29:0f:47:2d:37:50:
e5:ba:09:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:22:55 2026 by rpki-client