Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
File: I8-ih96iNF6mFxqkd9aO4tu0leE.mft (raw, json)
Hash identifier: Y4P6O2tso2hHruMIw1t5rMSEif2N+tIMvKc4YDmWY6s=
Subject key identifier: C8:73:A2:65:A5:03:65:C3:C3:00:BA:2D:E6:A0:78:E8:FE:07:FE:40
Authority key identifier: 23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
Certificate issuer: /CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Certificate serial: 01A06EA7FDC8FAA43A7B18C36222553CFC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
Manifest number: 89
Signing time: Fri 04 Sep 2026 23:01:38 +0000
Manifest this update: Fri 04 Sep 2026 23:01:38 +0000
Manifest next update: Sat 05 Sep 2026 23:01:38 +0000
Files and hashes: 1: I8-ih96iNF6mFxqkd9aO4tu0leE.crl (hash: 36Hsg0CILlMeZ/ZBXQw4f/3IhdM2y3ZdPfPy+FiXMqU=)
2: nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa (hash: 2xC+OBt7tpzzZYodQEHxjgbtCV8j6Hf0yChdWEZU97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 23:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:fd:c8:fa:a4:3a:7b:18:c3:62:22:55:3c:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Validity
Not Before: Sep 4 23:01:38 2026 GMT
Not After : Sep 5 23:01:38 2026 GMT
Subject: CN=c873a265a50365c3c300ba2de6a078e8fe07fe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:06:3c:23:c4:80:e5:cc:b1:86:e7:19:6b:
c2:ef:eb:a3:67:53:01:b3:a7:aa:64:dd:4c:b4:fe:
bb:fc:9a:5e:01:fc:6f:d5:0d:05:e1:98:46:41:78:
37:81:2a:4a:a2:fb:20:a8:62:f0:55:fe:92:90:4b:
40:35:ca:78:0c:93:84:3e:5c:00:b5:89:34:ad:93:
13:32:bb:b5:49:1a:57:59:7f:93:7d:77:a3:b4:95:
9f:3e:23:c6:f4:d6:6b:07:a6:ad:4b:b7:8c:81:f5:
d2:36:4b:6e:ff:a8:15:35:e6:5f:49:18:1e:23:f6:
97:b4:4b:bb:c0:bb:fc:6f:ba:c5:3b:21:a6:f1:6b:
39:ef:56:e5:c1:86:78:17:fc:11:65:b3:d4:7f:5d:
bf:60:b5:af:ab:14:71:fb:9b:e2:7c:57:b0:16:86:
4c:ba:e4:5b:cb:21:bc:3b:c5:1f:f4:dd:14:63:79:
98:22:11:f1:fd:68:86:8e:98:2e:55:eb:cc:03:84:
1e:28:6f:0d:e5:91:f4:3e:04:67:5f:ed:bc:42:47:
fd:39:cd:dd:26:26:cb:f1:de:c6:fd:d4:1d:75:1d:
38:2a:ad:6e:68:af:60:22:ca:7b:55:f6:b1:13:e1:
c5:b9:e6:c2:0c:8f:4a:cc:6b:65:47:e0:17:93:67:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:A2:65:A5:03:65:C3:C3:00:BA:2D:E6:A0:78:E8:FE:07:FE:40
X509v3 Authority Key Identifier:
keyid:23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8d:d2:db:a7:4c:33:46:85:6d:b6:3e:27:4c:62:10:07:e8:
5b:f9:77:15:d4:58:79:31:c1:28:ff:28:60:3b:3e:04:6b:89:
3b:33:2f:a3:66:82:b7:c3:8b:3c:7c:ea:99:04:7e:31:0a:af:
46:50:62:46:19:d8:0c:50:71:74:b6:a1:62:c7:3b:bb:d0:7d:
a2:67:44:56:d0:10:bf:3c:f6:0d:c0:e7:84:19:5f:3e:97:8a:
29:d4:1d:db:61:b2:c5:bc:33:b1:d8:f2:f2:fe:3d:db:b0:00:
41:05:46:d7:4a:66:8b:24:64:74:7d:e2:49:cc:e0:89:df:52:
3f:a9:37:e4:58:2d:18:0d:0c:1e:5a:59:e4:a1:46:af:55:ee:
20:89:2c:1d:6f:24:c5:2e:bd:1b:10:02:17:24:d1:06:3b:ff:
d8:a2:1e:03:e3:09:4b:e2:d1:bd:8f:db:7e:94:12:19:c0:04:
51:b6:8f:1b:e9:44:6f:9a:07:ff:b5:77:b2:4b:56:87:31:fe:
c3:ec:be:ce:63:77:8e:a0:b9:88:7c:7f:a3:d2:51:ae:7b:00:
7c:87:70:0d:3b:11:4b:5e:75:fe:b6:d2:17:5e:86:57:d9:b4:
5d:74:45:ee:9f:5e:81:9b:e7:1b:67:c8:6f:0c:1f:e5:92:5d:
46:75:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:44:58 2026 by rpki-client