Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: W9k8DL8UgUfdVkwODo99v92McoKkSXs8Dd+2lyGgjno=
Subject key identifier: 17:C0:E4:61:39:BD:20:92:68:BE:A0:92:7C:6C:5B:EA:73:FF:4E:FA
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019F189E99B1C0569796BDF0FE29B75CDD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 1755
Signing time: Tue 30 Jun 2026 13:01:14 +0000
Manifest this update: Tue 30 Jun 2026 13:01:14 +0000
Manifest next update: Wed 01 Jul 2026 13:01:14 +0000
Files and hashes: 1: 2i-4ee2wP9JCOqgKECftxH61WUM.roa (hash: QQKwzJfgPGXePgVfTn1B7G5l+qkMGWhzUecnh31tn84=)
2: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: JZm2LXYNyFFcbGgbzzPKnCGkHFcYkuLz88xmYI+epWE=)
3: rwnmDRqOKZ4XobKPk7EfioXDUHU.roa (hash: XenrA46Tl2A6yQoz5IgLxyvlUvV4GMGTev0IO4loosw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:99:b1:c0:56:97:96:bd:f0:fe:29:b7:5c:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jun 30 13:01:14 2026 GMT
Not After : Jul 1 13:01:14 2026 GMT
Subject: CN=17c0e46139bd209268bea0927c6c5bea73ff4efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:a3:23:7c:b5:19:8e:c7:bc:f7:de:ce:15:
27:80:3c:a9:fd:89:06:9f:5a:c8:1a:e3:39:39:43:
92:15:02:a2:bd:9f:c1:f1:25:ad:a3:35:e5:3f:a4:
ea:b5:f6:82:24:fc:92:0a:aa:88:f6:7a:58:31:00:
0e:77:22:c3:f7:d0:f6:2e:72:6c:58:07:ab:9f:fe:
13:9c:67:62:fd:64:70:ac:12:6f:06:ef:53:6d:d5:
7d:aa:58:a0:49:3f:f9:de:b5:d7:e9:00:23:f6:5a:
28:90:08:54:d5:5d:0a:ef:36:d6:df:41:89:1f:ea:
7d:56:3e:d9:68:bb:08:d3:4b:c7:74:f5:18:44:e6:
69:9f:08:87:7a:6f:75:4e:9a:64:be:73:55:93:27:
84:09:c5:a0:d4:fb:0d:7c:60:a4:82:92:47:3d:91:
50:08:62:1b:8b:3b:fc:4a:7a:95:a5:c8:b2:e8:79:
4f:e1:cb:7d:45:46:f7:16:ab:0f:33:c5:f4:42:c8:
01:48:d1:fc:db:4c:3f:63:2b:f6:fa:c2:29:4c:ac:
9b:2b:65:c1:2a:ec:16:c3:5e:1f:93:18:a9:15:3d:
de:3d:9b:11:d0:f8:5a:2d:76:24:f0:42:19:a7:9e:
93:2b:fc:f5:af:b2:19:37:9a:9e:f4:2b:2e:52:56:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C0:E4:61:39:BD:20:92:68:BE:A0:92:7C:6C:5B:EA:73:FF:4E:FA
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:72:79:4e:d7:e5:a5:20:be:b5:b7:7a:39:3d:57:e9:21:81:
8e:51:35:6d:f5:f6:b3:ff:80:1e:36:21:31:d9:09:8d:05:d7:
79:5f:05:b0:4a:03:c1:d6:e2:15:88:20:36:1f:a8:6a:c3:94:
f7:76:2a:62:9f:89:4f:8d:b0:7d:8f:11:aa:71:65:e5:c4:80:
19:65:b2:1e:56:44:bd:1d:04:a8:2e:5e:76:61:54:f4:04:9e:
34:f0:a1:0e:57:6d:24:84:62:e1:32:55:83:85:9f:65:ff:ed:
4f:a0:8f:2a:ea:6e:dd:6b:49:b0:15:56:8a:50:99:b6:41:ed:
47:65:b0:7f:3c:19:60:1e:99:b0:5f:46:86:62:3d:78:8b:55:
c5:21:17:9c:94:cb:34:0e:98:5e:5c:ea:b7:ac:d2:bb:aa:d9:
a7:ed:1b:24:57:93:ef:fd:18:0c:e2:9a:c2:16:01:a6:ff:e2:
44:75:2b:cd:b5:35:b5:2e:01:d5:ba:92:c0:02:f5:fe:36:be:
01:28:46:d1:b6:2e:e0:28:70:b2:c9:c9:7e:13:5e:d0:ac:96:
9d:02:cc:b3:e5:2e:69:8a:98:c6:c7:6b:af:84:b6:41:52:e8:
46:b1:40:93:89:30:b5:40:f0:04:ec:2e:21:e4:69:df:5c:bd:
11:14:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:23 2026 by rpki-client