Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: HPHui1iIbbYA/ITs1x3s4ATN258dzB8y0owR8Ik2qY8=
Subject key identifier: 56:9D:CE:66:45:21:68:94:52:B4:9E:F3:B5:18:5D:7D:CF:9B:48:E5
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019EBB0FD002CD6825B2477E1722F277CFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 0786
Signing time: Fri 12 Jun 2026 09:00:36 +0000
Manifest this update: Fri 12 Jun 2026 09:00:36 +0000
Manifest next update: Sat 13 Jun 2026 09:00:36 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: PWTRyaf7SHWyasGskGcVkfE77TuPdKBwSnZ4aPZu6Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:0f:d0:02:cd:68:25:b2:47:7e:17:22:f2:77:cf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Jun 12 09:00:36 2026 GMT
Not After : Jun 13 09:00:36 2026 GMT
Subject: CN=569dce664521689452b49ef3b5185d7dcf9b48e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:4b:e8:26:0f:ca:3c:88:ae:d3:75:a7:35:
06:50:25:1f:e8:12:5a:9a:be:e3:c9:e5:a6:fc:89:
68:77:6d:94:df:94:99:83:33:19:18:42:17:54:6c:
29:0c:d1:c5:be:92:51:24:52:7d:c8:4b:36:09:26:
77:e2:83:ca:ef:51:65:6c:a0:01:ab:4a:22:f0:1e:
78:29:4d:38:8a:3f:75:7a:28:88:ae:d4:27:0c:d7:
b2:55:d6:31:35:7e:ba:17:a4:15:8e:b6:a7:09:69:
33:65:79:bb:ff:1c:aa:a2:d4:24:08:eb:dc:f5:34:
a2:94:f4:89:15:4a:b4:6f:99:9a:b9:4f:c7:cd:ff:
5a:e0:a3:d7:e2:f0:f1:71:a0:2f:bf:7c:c1:db:55:
2d:e2:1a:54:bd:79:1f:59:52:59:29:9a:c8:5b:48:
f4:be:25:d9:5b:4c:6c:e9:78:f6:fe:46:ee:1e:4d:
78:ee:3a:f9:be:dc:67:32:47:0f:44:0e:d6:5b:94:
01:fe:c8:8b:20:c9:c4:41:d9:8a:81:6e:7e:80:4c:
e5:b1:d0:87:e1:04:f9:a1:f4:40:21:6d:f5:bf:e4:
b8:a9:fe:72:4b:56:b2:0e:ad:2a:6a:81:37:64:ce:
31:08:a0:de:a6:1d:1a:8e:d0:b0:92:1f:f8:a7:0a:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9D:CE:66:45:21:68:94:52:B4:9E:F3:B5:18:5D:7D:CF:9B:48:E5
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:ba:f2:23:56:95:ca:76:c9:d7:36:14:51:0a:0e:be:85:
a1:6f:6e:77:b7:5d:4a:c9:5d:c6:29:3e:e1:6c:9f:e9:2d:fb:
51:26:3d:d2:c6:c6:58:56:56:e0:b1:38:93:e9:40:5f:49:39:
22:f2:f7:a1:1d:4b:3e:be:7f:1a:18:ff:a3:1b:98:cf:7a:b9:
2f:d0:2f:96:da:19:6b:37:db:11:9e:fe:0d:d5:5f:74:a6:ff:
49:be:46:fc:83:cf:2d:84:b4:38:10:ba:9a:3b:34:ff:47:d6:
42:97:60:ca:f7:33:99:d9:68:45:85:61:ed:0e:99:4b:3a:88:
f1:61:eb:47:9c:7e:70:99:c4:a1:f2:8b:fd:a4:f1:af:04:24:
9b:b0:5c:55:bf:96:ea:18:b3:8f:d1:08:5e:17:9f:13:e8:c2:
ff:df:d7:bd:f0:02:04:cc:dc:da:0b:02:a6:24:0f:0e:21:29:
40:94:dd:95:70:1e:0f:4a:07:be:2c:e0:91:6c:58:a1:ab:02:
13:6a:26:e5:7b:49:aa:16:c0:1c:12:e8:4c:4b:a2:9b:99:f7:
8b:77:e8:aa:69:52:69:20:01:06:55:07:75:33:2f:43:9b:dd:
8c:68:3b:76:c7:98:90:fc:f4:b1:14:28:57:6c:3e:73:7d:8e:
08:e0:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:25:05 2026 by rpki-client