Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
File: I8-ih96iNF6mFxqkd9aO4tu0leE.mft (raw, json)
Hash identifier: pkICNB3G3FmcZN27+QYRO2ySKE7VLJ9ZYRrE9h7j07M=
Subject key identifier: 4C:FA:95:EC:9E:1C:53:B8:58:07:0A:12:39:37:E4:6F:06:E5:88:9D
Authority key identifier: 23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
Certificate issuer: /CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Certificate serial: 01A17B1617E711BE4234E029D6F6F2FF62A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
Manifest number: 0114
Signing time: Tue 27 Oct 2026 02:00:07 +0000
Manifest this update: Tue 27 Oct 2026 02:00:07 +0000
Manifest next update: Wed 28 Oct 2026 02:00:07 +0000
Files and hashes: 1: I8-ih96iNF6mFxqkd9aO4tu0leE.crl (hash: gkBGDuckJy9SgwAiwa2Ny4afi0irC5oqI6Mz71enhQE=)
2: nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa (hash: 2xC+OBt7tpzzZYodQEHxjgbtCV8j6Hf0yChdWEZU97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:17:e7:11:be:42:34:e0:29:d6:f6:f2:ff:62:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Validity
Not Before: Oct 27 02:00:07 2026 GMT
Not After : Oct 28 02:00:07 2026 GMT
Subject: CN=4cfa95ec9e1c53b858070a123937e46f06e5889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:f8:92:a6:65:e9:bc:fe:24:65:e8:de:b1:
e3:d2:35:ab:77:fa:2d:03:ef:10:5b:b7:b9:4d:06:
f4:7f:dc:db:f1:01:34:c8:36:b9:e7:55:51:96:fb:
c6:80:68:81:4a:50:87:04:90:b1:30:43:2c:99:24:
fe:ef:73:14:01:64:9d:fd:3b:3d:29:19:e6:4b:f0:
9c:7d:40:da:32:f9:f4:07:de:a8:2a:65:32:e2:ef:
17:e3:8f:09:84:0f:0a:81:3f:b6:84:bb:70:ce:dc:
1c:22:51:4a:22:54:34:2f:21:f6:12:22:6a:5e:3f:
0f:24:b1:4b:c4:53:99:16:30:85:51:5a:1a:58:23:
3f:4c:00:bf:43:29:6f:39:e0:04:94:00:10:18:38:
ad:c5:93:15:a7:47:0c:9c:2f:34:8c:0e:08:90:30:
3f:81:64:93:40:0e:fe:ed:b2:41:ac:6f:46:f7:47:
b5:be:b0:12:b5:af:66:bd:2b:25:1d:bb:de:28:c7:
bc:26:a9:dd:82:d0:04:3c:ba:16:27:02:7b:2a:e2:
bd:9d:e3:54:a4:5b:27:05:ac:aa:3e:3c:cc:fe:fc:
29:11:d2:38:d2:83:54:e5:32:c0:ed:ec:33:f5:7e:
a6:4b:29:ec:6c:52:b9:80:0f:ab:ff:a9:e0:a8:55:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FA:95:EC:9E:1C:53:B8:58:07:0A:12:39:37:E4:6F:06:E5:88:9D
X509v3 Authority Key Identifier:
keyid:23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b5:0b:7a:7b:f0:cb:8f:4d:46:c7:2d:2a:91:28:83:c8:4d:
85:9d:86:c9:82:5d:2b:31:2d:b3:fe:e9:71:de:8f:d9:1b:af:
e6:40:02:e6:86:c1:7e:b7:eb:80:51:70:25:63:ac:88:1d:8b:
8b:14:51:3a:91:b2:61:91:ac:5d:64:af:7a:6b:f2:d6:71:cd:
3e:e9:ef:c9:5a:f5:de:18:2a:f0:84:f1:97:d6:70:91:ad:ae:
41:ec:8e:ee:40:b7:77:bf:b5:7e:f8:af:c6:72:51:39:c7:9b:
88:9a:9d:90:43:34:ea:d4:00:7a:51:53:4c:02:83:dd:dc:3e:
8f:5e:6e:75:7f:ae:2f:34:c3:b9:a3:6c:e7:d4:ba:91:8e:7a:
fe:39:51:ef:fd:db:d4:e3:74:e5:34:ef:d2:49:ff:5e:84:39:
5b:83:1a:98:c7:a7:4a:6e:27:b7:a0:3f:fa:2d:13:14:79:b3:
e3:cc:a0:09:e7:34:4d:f5:33:d2:80:00:50:0c:60:77:81:5f:
6d:82:b3:ae:56:2e:78:67:2a:d2:58:99:99:5d:cc:c6:93:39:
9a:14:07:60:a6:53:fb:48:68:00:62:ac:1c:62:ab:64:29:7e:
ec:9c:14:31:b3:aa:c1:b8:60:5a:1f:d7:7e:e2:b1:f9:c8:05:
bf:c7:22:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7FhfnEb5CNOAp1vby/2KlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2ZhMjg3ZGVhMjM0NWVhNjE3MWFhNDc3ZDY4ZWUyZGJi
NDk1ZTEwHhcNMjYxMDI3MDIwMDA3WhcNMjYxMDI4MDIwMDA3WjAzMTEwLwYDVQQD
Eyg0Y2ZhOTVlYzllMWM1M2I4NTgwNzBhMTIzOTM3ZTQ2ZjA2ZTU4ODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuH4kqZl6bz+JGXo3rHj0jWrd/ot
A+8QW7e5TQb0f9zb8QE0yDa551VRlvvGgGiBSlCHBJCxMEMsmST+73MUAWSd/Ts9
KRnmS/CcfUDaMvn0B96oKmUy4u8X448JhA8KgT+2hLtwztwcIlFKIlQ0LyH2EiJq
Xj8PJLFLxFOZFjCFUVoaWCM/TAC/QylvOeAElAAQGDitxZMVp0cMnC80jA4IkDA/
gWSTQA7+7bJBrG9G90e1vrASta9mvSslHbveKMe8JqndgtAEPLoWJwJ7KuK9neNU
pFsnBayqPjzM/vwpEdI40oNU5TLA7ewz9X6mSynsbFK5gA+r/6ngqFUsIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz6leyeHFO4WAcKEjk35G8G5YidMB8GA1UdIwQY
MBaAFCPPoofeojRephcapHfWjuLbtJXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTgtaWg5NmlORjZtRnhxa2Q5YU80dHUwbGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xY2MwYzctYTA5Yy00MTBlLTg2NTQt
MDgwMmM2ODkwZmMyLzEvSTgtaWg5NmlORjZtRnhxa2Q5YU80dHUwbGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xY2MwYzctYTA5Yy00MTBlLTg2NTQtMDgwMmM2ODkwZmMy
LzEvSTgtaWg5NmlORjZtRnhxa2Q5YU80dHUwbGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLULenvw
y49NRsctKpEog8hNhZ2GyYJdKzEts/7pcd6P2Ruv5kAC5obBfrfrgFFwJWOsiB2L
ixRROpGyYZGsXWSvemvy1nHNPunvyVr13hgq8ITxl9Zwka2uQeyO7kC3d7+1fviv
xnJROcebiJqdkEM06tQAelFTTAKD3dw+j15udX+uLzTDuaNs59S6kY56/jlR7/3b
1ON05TTv0kn/XoQ5W4MamMenSm4nt6A/+i0TFHmz48ygCec0TfUz0oAAUAxgd4Ff
bYKzrlYueGcq0liZmV3MxpM5mhQHYKZT+0hoAGKsHGKrZCl+7JwUMbOqwbhgWh/X
fuKx+cgFv8cizg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:18:57 2026 by rpki-client