Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
File: i7nJXujwyzU8HemSB5KjTTAkRhc.mft (raw, json)
Hash identifier: 7vXlMrbjfAAdkyWc2PvAfrI1wrqj7Odmqky4daodh1Q=
Subject key identifier: D9:54:1C:21:56:9A:7F:C4:8A:E3:8E:3C:F9:7A:AD:CE:05:6E:01:8A
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 01A1A6017516F112C62DECD502D55C5DCECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
Manifest number: 0157
Signing time: Wed 04 Nov 2026 10:01:15 +0000
Manifest this update: Wed 04 Nov 2026 10:01:15 +0000
Manifest next update: Thu 05 Nov 2026 10:01:15 +0000
Files and hashes: 1: i7nJXujwyzU8HemSB5KjTTAkRhc.crl (hash: RMIQIHas/1MTS9VPTk+lIByLA86/gvWAHataToPZwJQ=)
2: muClETW590rnAhhdFCIA-PKzx8Q.asa (hash: 36o5H1jwMvZNZc8onjj4S28x1eYQDO0IkGOM8Fu+qqc=)
3: xEyAi3SjwvGfzGwJumrRBhFlIMg.roa (hash: RnllkRsBF2Jf+lnWH4lFOC21D8DgvcE1VgArskA/XZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:01:75:16:f1:12:c6:2d:ec:d5:02:d5:5c:5d:ce:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Nov 4 10:01:15 2026 GMT
Not After : Nov 5 10:01:15 2026 GMT
Subject: CN=d9541c21569a7fc48ae38e3cf97aadce056e018a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:68:3a:d4:04:71:01:6e:2e:1b:71:df:f3:
75:ae:23:c1:3b:a3:51:94:ac:e2:64:6a:01:9e:d2:
52:2d:f7:00:b3:00:41:1b:63:af:0d:5c:eb:42:07:
91:39:18:ba:9d:a5:09:19:38:f7:f4:9c:dd:71:8d:
68:4b:53:b2:c2:8c:4d:9f:ea:24:69:0a:9d:3d:e9:
a5:ba:75:45:00:94:a7:16:9a:fb:dd:fc:47:48:ec:
f0:08:81:90:46:e5:47:ce:5a:3c:93:fa:49:cb:70:
53:a3:c8:f8:ed:05:44:31:9b:a0:5c:8f:b9:67:1d:
e6:c9:89:c9:64:ce:7d:4e:c1:71:85:1b:9e:d0:35:
77:14:d8:ce:a4:51:fc:0d:7f:6c:33:83:8e:6d:de:
37:9c:c4:c0:6e:a0:71:b4:54:ed:e9:4d:f5:1f:06:
f7:85:a3:5d:c4:48:97:96:22:ff:d7:5d:24:29:0c:
32:c3:19:d1:93:47:bc:e8:9d:6e:cd:06:0c:ed:dd:
04:f0:80:69:c0:0c:7b:1f:08:51:89:26:00:a5:65:
e4:00:ec:e2:8b:2e:f7:33:ba:9e:b3:33:0e:b0:b1:
d5:f3:72:44:83:6a:a6:83:a6:5b:02:29:10:6f:44:
85:9c:0a:93:b3:88:65:da:d1:0e:da:6a:a3:30:38:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:54:1C:21:56:9A:7F:C4:8A:E3:8E:3C:F9:7A:AD:CE:05:6E:01:8A
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:39:0b:c2:2c:9e:b8:9a:aa:c3:3c:68:4b:de:6d:26:91:39:
df:d6:af:73:cf:db:2d:5c:5b:2d:d8:e6:52:00:47:c2:3e:6a:
10:03:29:ce:a2:09:6f:36:37:a9:89:52:34:8e:5e:1a:9b:b7:
64:8b:bb:06:13:ee:13:ea:91:d2:72:ea:37:30:0a:de:89:a8:
7b:14:de:47:dd:d0:f8:64:0d:4e:83:53:8a:22:06:0e:d7:8b:
ff:19:2f:f8:a4:e0:3c:48:23:12:62:0a:60:b0:e6:bb:02:77:
80:ea:09:25:ab:34:d6:54:59:b7:ef:1b:5b:9c:2a:8a:28:fb:
28:93:28:85:ea:2c:b3:56:3d:33:e5:82:cb:dd:d0:1c:72:65:
b8:35:a0:66:14:4e:a1:a8:d5:f4:67:29:2a:3b:e4:be:31:ba:
bc:ae:29:53:40:52:2e:90:95:56:e8:ad:be:fe:3f:ff:c4:8f:
a3:2a:dc:11:1b:89:5a:df:27:82:50:a7:f7:3f:63:dd:3b:fe:
fd:7d:4a:32:77:5e:6b:2c:03:23:97:42:8d:34:39:a7:87:16:
3e:61:5a:5d:1d:7f:7b:86:85:70:b8:28:a3:d5:31:f2:21:1c:
63:a5:f8:d4:ff:01:41:67:3d:db:47:9a:9b:6e:86:44:33:d3:
25:c8:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:06 2026 by rpki-client