Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: kDIrzMv9QWhENHN/Lij7XYvkjNjPVrFNxx7sgDfoI48=
Subject key identifier: 57:43:89:BF:E4:16:9D:7E:A3:A4:46:DB:44:B4:DA:4B:FB:CF:39:3C
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 01A0024A91F93EDE91581FC2297379D7AE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0D92
Signing time: Fri 14 Aug 2026 22:00:36 +0000
Manifest this update: Fri 14 Aug 2026 22:00:36 +0000
Manifest next update: Sat 15 Aug 2026 22:00:36 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: xMFynHullnvtSfjvgSlorWEgTk7nP36JbyyKZp2B0r4=)
2: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (hash: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:91:f9:3e:de:91:58:1f:c2:29:73:79:d7:ae:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Aug 14 22:00:36 2026 GMT
Not After : Aug 15 22:00:36 2026 GMT
Subject: CN=574389bfe4169d7ea3a446db44b4da4bfbcf393c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:aa:ae:dd:41:a3:2f:a4:b7:13:e5:f8:6d:
a0:77:f8:4e:e5:e8:51:f2:79:7e:ce:a8:d0:7a:7e:
1b:ed:db:14:43:d9:27:58:57:82:71:8c:ce:c6:e3:
22:74:4c:c6:19:dd:36:00:0f:43:58:c1:e9:47:04:
b2:70:ff:f7:7d:4f:25:6f:33:87:00:6f:73:70:37:
74:4f:92:df:91:ae:0e:68:d0:67:05:02:93:44:30:
78:7b:72:28:09:7b:d5:5c:74:ee:33:19:1e:60:1e:
b0:17:de:a2:90:21:41:b3:75:8a:9e:81:eb:a2:24:
3d:0f:3f:dd:3d:eb:f6:97:75:f9:c9:fd:70:c5:f2:
b6:1e:ec:ee:7a:78:03:cb:96:3c:1d:df:ee:7b:2e:
0c:72:6a:c7:11:3a:be:0f:73:2a:a2:b2:8a:d5:bf:
59:39:3e:12:68:c8:dd:c6:5a:57:3c:10:cf:98:34:
ac:37:d3:4c:c5:d8:c8:60:28:bb:95:1b:57:4c:67:
0f:28:28:fe:be:d9:a3:87:0d:5a:c5:54:29:62:1d:
06:29:a6:75:53:cc:0a:c9:37:e4:e8:29:ea:fd:6a:
e2:bc:ad:5e:9a:f6:30:fc:35:df:5b:09:46:c7:90:
c1:e9:9c:1e:35:2d:43:35:e0:71:49:c5:a0:8a:2b:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:89:BF:E4:16:9D:7E:A3:A4:46:DB:44:B4:DA:4B:FB:CF:39:3C
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0f:19:0c:29:55:bb:75:0e:e7:04:98:0e:ea:08:9d:aa:21:
c1:e1:61:0d:c2:4c:38:d7:b6:99:1d:53:a0:05:6c:9e:17:af:
3c:b0:f0:9f:46:b5:6b:b1:38:8b:e0:ab:7b:d4:bc:04:69:73:
d5:5d:80:0c:76:37:87:50:94:6f:6b:85:f2:db:6e:ba:54:a7:
f7:42:8d:9d:f1:d4:05:d1:60:40:9f:10:8e:e8:1b:1c:42:dd:
97:cd:32:2a:de:3c:00:88:8a:0a:0e:3b:de:c2:15:d9:c2:0d:
bd:c3:f6:ce:26:8f:c3:e1:22:dd:d1:a8:ec:b5:f4:8e:44:f5:
b2:16:3b:ff:00:a5:7b:31:ec:2f:5e:24:70:ac:0c:76:ec:74:
57:1a:c6:25:00:2c:d4:23:54:8b:05:5c:70:2a:bd:63:c0:52:
54:65:0c:18:3a:8f:d9:a0:46:b5:78:7f:e7:45:ac:cf:e2:7a:
2a:d7:47:be:a8:51:c5:fc:6a:8c:fc:ec:64:f1:19:e1:6f:44:
b7:f5:17:1a:5b:5f:3f:97:ef:8c:86:bd:33:75:d8:67:a5:0b:
cf:c5:e6:35:3e:8d:3a:9f:70:35:27:a4:b0:e1:44:a3:ac:de:
cc:0d:16:c3:9d:4b:5c:e3:30:32:bd:88:c1:e9:b3:86:0c:91:
c5:c7:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:55:58 2026 by rpki-client