Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier: Bzf74ePE5YhQ1lqji9dw/hLiT+afIYSBngaw/5AcNUo=
Subject key identifier: 8E:45:90:ED:72:AC:54:F5:07:31:CB:17:87:D0:8D:AC:66:CE:68:2A
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 019CE5C91A3074F72CEFE27D027900CA3BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number: 17F8
Signing time: Fri 13 Mar 2026 06:01:27 +0000
Manifest this update: Fri 13 Mar 2026 06:01:27 +0000
Manifest next update: Sat 14 Mar 2026 06:01:27 +0000
Files and hashes: 1: _96Euvo05bQiTFxZBzxImx3S1Qo.roa (hash: 8USkhhFs2laMuIgluBHy8qGwUIcnnc8iCXVDlvT0OTc=)
2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: PSG9uzhiPyI9L7wnENjtbxxyU8EEzsJtE2N8rQHvdg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:1a:30:74:f7:2c:ef:e2:7d:02:79:00:ca:3b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Mar 13 06:01:27 2026 GMT
Not After : Mar 14 06:01:27 2026 GMT
Subject: CN=8e4590ed72ac54f50731cb1787d08dac66ce682a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:60:4e:ff:16:34:6f:51:70:41:2e:e0:8d:8b:
94:3a:96:dd:c8:6e:31:da:a0:1b:0e:94:d8:6f:eb:
9f:0e:06:39:07:05:bd:9c:0a:01:38:9c:ee:64:c4:
58:e4:e9:a0:64:c8:fa:e5:a0:6b:b7:07:4c:cc:54:
84:4f:e5:d6:37:7a:bc:92:23:b5:bb:c3:34:98:62:
91:e5:b0:6a:c6:a7:33:67:e0:e9:5c:cf:9e:db:1c:
88:54:10:07:43:b9:88:65:59:e1:2d:ec:33:28:9b:
2a:53:0b:84:f7:9a:5a:2c:20:ab:cd:0d:62:0c:47:
61:b1:63:90:9c:60:96:e2:4c:be:12:90:5c:4a:f6:
f2:5c:75:78:75:53:22:e8:81:d6:61:ab:b3:a7:01:
df:bf:9d:6e:52:b0:4e:df:54:04:0c:40:33:12:05:
67:e5:84:b5:67:5e:a2:9b:c5:a3:aa:45:6e:c7:65:
32:b9:70:11:b6:61:b1:ce:e2:99:0a:e1:be:19:12:
ea:6c:4e:b7:f5:b1:a0:36:12:f3:10:01:b4:b1:cf:
e0:ae:e1:1d:26:60:75:76:37:e3:6a:e0:89:9c:7e:
3a:7c:64:a0:06:a4:6c:09:17:c6:2e:d6:cc:97:e2:
bc:77:20:eb:ae:84:7b:39:34:9c:e7:de:34:06:4e:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:45:90:ED:72:AC:54:F5:07:31:CB:17:87:D0:8D:AC:66:CE:68:2A
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:37:6d:5b:e8:9d:9f:cb:34:eb:25:9c:85:bc:de:b9:d1:3f:
e1:07:bb:ce:ab:ea:b8:03:cf:92:f1:7a:8d:ec:eb:ad:e6:f3:
76:43:8c:d7:5d:20:0b:94:38:64:59:e4:4d:ce:b7:8a:15:54:
29:dc:58:ea:f9:34:75:08:28:0c:ac:ba:be:d8:d4:d4:21:1e:
c3:73:34:cb:2d:96:89:5f:4d:c9:6d:b5:87:f7:04:a9:8f:a6:
ac:66:32:3f:2e:56:d9:90:df:3c:3d:ad:cc:12:4e:f2:35:17:
76:6b:47:a3:2b:22:85:1b:3c:e6:f8:f9:90:4d:fd:5f:63:a4:
1f:56:70:65:8e:d8:63:ee:19:bb:a6:35:42:8b:34:8f:43:07:
0c:62:a1:a0:37:79:e2:73:31:9f:fa:55:a3:32:0b:74:b9:6a:
dc:13:63:b4:bb:79:74:00:bb:de:29:e8:94:5e:f5:e6:83:70:
6d:b2:9b:23:35:e5:7f:76:41:35:87:08:aa:a1:49:65:d0:0d:
92:6b:02:ec:61:32:58:1a:27:f5:2d:ab:4d:95:78:7f:9c:aa:
f9:23:5b:c8:94:53:cf:48:1c:63:fa:7b:0d:4f:98:b1:49:4b:
3b:2e:f3:a4:e2:67:80:f6:c4:29:d5:3e:de:21:a9:4b:18:d1:
be:1c:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:20 2026 by rpki-client