Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: OCIQFTq7HPk2bH0m7Yoi4aI4r3vKwczXj4YfjmYEzVY=
Subject key identifier: DF:8E:45:1D:39:2A:39:C0:47:AF:A5:D8:07:44:E6:C2:09:D4:15:87
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01A06FB9DEF1FF04F6A029F8127194BE3A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0E00
Signing time: Sat 05 Sep 2026 04:00:47 +0000
Manifest this update: Sat 05 Sep 2026 04:00:47 +0000
Manifest next update: Sun 06 Sep 2026 04:00:47 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: 8dWPtfmT3g7ynasoOrfYVR83P8ivzpXnY37/6pLfw94=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:b9:de:f1:ff:04:f6:a0:29:f8:12:71:94:be:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Sep 5 04:00:47 2026 GMT
Not After : Sep 6 04:00:47 2026 GMT
Subject: CN=df8e451d392a39c047afa5d80744e6c209d41587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:da:9b:a3:b9:a6:52:60:dc:26:81:7f:a3:
23:d6:84:09:57:6b:eb:11:a3:a7:b4:ad:82:81:f7:
ca:11:eb:5f:08:e8:21:94:d0:10:84:ae:fd:e1:4e:
32:09:33:1a:60:6d:7a:cd:ac:e1:c1:8f:eb:50:d9:
94:e1:f1:83:58:79:88:88:a8:87:18:e9:76:81:8a:
53:1f:03:38:7e:46:bb:e2:aa:5e:9c:df:69:29:a7:
d9:d9:bc:79:06:e7:b1:d9:cc:af:60:e0:97:33:41:
4d:d0:e3:f0:59:9d:c7:a5:21:20:79:95:89:40:0c:
a5:64:4e:92:d6:33:b2:73:ef:95:df:7a:fa:01:da:
ed:d3:00:d9:88:6c:0a:96:8c:95:ea:2c:e7:ba:fa:
89:8c:1a:50:77:85:70:c6:06:79:cb:b9:26:45:f9:
df:9e:0b:35:ff:14:e7:28:31:f5:f5:93:ec:1f:fd:
9a:e2:92:6a:58:22:2c:dc:52:9e:e9:27:fe:ec:36:
5f:42:05:ce:7c:0a:4b:3a:9b:b3:a8:fd:42:14:61:
ee:1b:e1:7e:18:04:9e:71:e7:53:3d:df:e4:8b:50:
ac:1b:d1:90:bb:f3:24:f6:60:cb:e1:c0:b6:72:28:
59:82:58:88:0f:63:99:b0:d0:0a:dc:ad:e4:11:b9:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:45:1D:39:2A:39:C0:47:AF:A5:D8:07:44:E6:C2:09:D4:15:87
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:64:10:10:f9:ba:5c:01:f6:ec:33:e0:68:c8:46:34:46:b6:
12:f8:06:e5:26:cf:87:69:65:b7:e6:ec:fb:3d:4a:3c:7e:f4:
84:9c:bb:bd:3f:c2:25:54:b1:d2:3e:9b:16:f9:54:3b:1c:44:
c9:fb:ed:4a:df:42:5d:06:e0:61:bc:16:38:e6:c2:e3:2f:ae:
1e:19:6b:94:a4:1e:75:e8:ae:5c:65:9e:54:d4:3f:f3:c9:d3:
ba:4f:1c:71:2c:3b:ad:2c:0d:e7:f3:35:5a:52:72:c7:51:13:
20:82:f6:66:c9:47:6d:9c:b0:04:da:b3:d5:68:c2:8a:a9:e2:
55:3c:d4:2d:30:4a:11:57:21:14:0a:01:ac:f3:b3:5d:65:c7:
2e:e6:50:9d:39:c0:e8:6b:a4:a9:e2:76:54:01:ae:e9:59:f1:
b1:78:81:0b:fe:17:15:d2:9d:21:0c:6e:8f:10:f6:82:6b:9f:
12:bf:d2:2b:42:14:25:1b:c6:14:7e:af:46:0b:d7:9f:64:29:
77:ca:5e:82:78:e0:e6:b7:2d:72:6b:d9:4e:70:47:07:4b:47:
9f:0c:7c:a6:ff:df:50:5a:c4:fe:3b:91:22:52:ea:8e:e4:de:
61:89:98:cd:17:a2:97:65:46:8e:47:e7:b1:83:c5:da:ee:d9:
8a:7d:ed:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvud7x/wT2oCn4EnGUvjqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODkzNDFlMTBlNmIwMjFmYTg0N2Y1NTVlNTYwM2RlZjg1
ZDJjMmIwHhcNMjYwOTA1MDQwMDQ3WhcNMjYwOTA2MDQwMDQ3WjAzMTEwLwYDVQQD
EyhkZjhlNDUxZDM5MmEzOWMwNDdhZmE1ZDgwNzQ0ZTZjMjA5ZDQxNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmjam6O5plJg3CaBf6Mj1oQJV2vr
EaOntK2CgffKEetfCOghlNAQhK794U4yCTMaYG16zazhwY/rUNmU4fGDWHmIiKiH
GOl2gYpTHwM4fka74qpenN9pKafZ2bx5Buex2cyvYOCXM0FN0OPwWZ3HpSEgeZWJ
QAylZE6S1jOyc++V33r6Adrt0wDZiGwKloyV6iznuvqJjBpQd4VwxgZ5y7kmRfnf
ngs1/xTnKDH19ZPsH/2a4pJqWCIs3FKe6Sf+7DZfQgXOfApLOpuzqP1CFGHuG+F+
GASecedTPd/ki1CsG9GQu/Mk9mDL4cC2cihZgliID2OZsNAK3K3kEbmV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+ORR05KjnAR6+l2AdE5sIJ1BWHMB8GA1UdIwQY
MBaAFCOJNB4Q5rAh+oR/VV5WA974XSwrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUt
OGMwMDNjNGE1NDU2LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUtOGMwMDNjNGE1NDU2
LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWQQEPm6
XAH27DPgaMhGNEa2EvgG5SbPh2llt+bs+z1KPH70hJy7vT/CJVSx0j6bFvlUOxxE
yfvtSt9CXQbgYbwWOObC4y+uHhlrlKQedeiuXGWeVNQ/88nTuk8ccSw7rSwN5/M1
WlJyx1ETIIL2ZslHbZywBNqz1WjCiqniVTzULTBKEVchFAoBrPOzXWXHLuZQnTnA
6GukqeJ2VAGu6VnxsXiBC/4XFdKdIQxujxD2gmufEr/SK0IUJRvGFH6vRgvXn2Qp
d8pegnjg5rctcmvZTnBHB0tHnwx8pv/fUFrE/juRIlLqjuTeYYmYzReil2VGjkfn
sYPF2u7Zin3t8w==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:09:15 2026 by rpki-client