Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
File: i2H8DxZbRki3X9-jgNI3iblv61I.mft (raw, json)
Hash identifier: u9w6ZVMOElYfhiJWh+0zKIfPcVwv88tPJiaRg3VODK4=
Subject key identifier: DF:37:68:5F:13:30:8E:A7:AE:33:23:5B:0C:E3:E5:95:49:79:59:CD
Authority key identifier: 8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
Certificate issuer: /CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Certificate serial: 01A10CA6F650C3F4A9A50F50782F2A36DFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
Manifest number: 012E
Signing time: Mon 05 Oct 2026 15:20:30 +0000
Manifest this update: Mon 05 Oct 2026 15:20:30 +0000
Manifest next update: Tue 06 Oct 2026 15:20:30 +0000
Files and hashes: 1: 1Z0gHou-ynxGM9GYOa-zov0qgzA.asa (hash: jtfR814LdlSxFZRgys0rHTbiwVWqqrwEA763k+1BWpQ=)
2: i2H8DxZbRki3X9-jgNI3iblv61I.crl (hash: 1HPgQDA3AIiNzwzSBO6AwuAUv5gE20KMsgT6ECM+Dy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:a6:f6:50:c3:f4:a9:a5:0f:50:78:2f:2a:36:df:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Validity
Not Before: Oct 5 15:20:30 2026 GMT
Not After : Oct 6 15:20:30 2026 GMT
Subject: CN=df37685f13308ea7ae33235b0ce3e595497959cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:cf:94:78:92:71:57:d6:94:10:6f:85:55:
58:9a:42:7c:47:55:76:c9:53:0d:09:91:fb:58:96:
77:1a:3d:fd:9b:f9:35:06:15:44:8c:86:11:44:de:
e0:d9:81:67:3d:9e:69:a0:b7:f6:c0:a5:14:94:68:
57:06:3a:46:86:05:4c:4d:ef:50:c6:01:ee:28:43:
e6:4d:03:50:f4:9b:e2:f3:0b:4e:c1:f8:01:7a:3e:
9e:54:24:93:e1:d0:5a:30:2b:49:37:40:20:c6:73:
78:fc:a1:69:bc:94:f6:68:4e:d6:18:36:70:c2:be:
93:7f:74:87:87:86:63:80:c9:56:0a:db:ee:03:ae:
64:11:a9:f5:f3:44:fd:e8:7b:89:3a:3b:fe:93:59:
9a:14:44:87:f4:ed:a6:40:5c:e8:a3:52:ff:37:7a:
a1:a1:ca:a5:f6:ff:41:bc:5a:53:ab:f5:83:f6:6a:
98:cc:39:1a:35:5d:e6:ff:b1:8f:3d:13:ce:47:e3:
bf:b9:f7:2c:59:a3:b5:83:bb:12:61:86:0a:23:ec:
c3:5e:d8:ee:f6:6d:de:87:ef:8f:83:07:99:07:ac:
6f:3f:7d:d7:ed:34:c9:4f:f6:5f:76:17:03:88:3d:
a5:b2:a4:5c:6c:ff:e8:a2:e2:81:9a:a6:a3:40:6e:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:68:5F:13:30:8E:A7:AE:33:23:5B:0C:E3:E5:95:49:79:59:CD
X509v3 Authority Key Identifier:
keyid:8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:3f:8d:cc:a0:22:e0:be:80:ea:76:bb:61:2f:0a:9c:4f:
3c:92:db:12:f5:38:59:cb:a8:08:e3:81:1c:83:f6:44:63:0f:
c6:c0:94:7a:c3:c3:8c:71:92:5b:53:1c:2a:14:d2:e3:fd:e7:
ac:33:b5:14:37:82:b4:a7:3d:7b:36:74:c8:3d:1e:26:8c:6c:
68:16:e1:ab:ab:f3:65:6f:c0:27:5c:8b:a6:51:3a:2f:56:14:
67:14:15:be:a1:b7:67:f4:76:9a:60:f9:58:1e:5d:5e:6c:00:
7c:b5:e3:3d:b3:5e:7c:82:d2:ae:01:7b:d4:7e:6c:c7:47:81:
05:20:17:b7:44:c7:6a:c8:21:83:c7:19:fa:1c:ac:2b:f6:84:
71:ec:f9:41:5e:c4:a5:30:0b:2e:63:ff:05:22:6c:a3:26:49:
eb:ea:71:78:53:10:04:a1:d2:1c:93:43:00:b4:4f:a8:fd:81:
8e:54:ca:f9:c1:eb:4f:0c:67:6d:4b:ad:19:ed:68:b7:ee:cf:
f7:52:fb:41:90:78:c6:87:b2:98:86:90:e5:6c:af:ea:69:5d:
ab:6d:78:d2:05:fa:98:fd:24:96:20:7b:6a:f5:ec:26:44:84:
44:75:ba:a6:0b:61:e5:63:2f:fa:5f:5d:7c:dc:ea:28:68:2b:
7f:9f:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:22:51 2026 by rpki-client