Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: hESK54PTjg7h6Zdrohr3vKnltBoom27m5ZqIKtHVCgQ=
Subject key identifier: E0:85:B7:7B:EE:2C:61:D3:2E:F2:FB:C1:21:88:D6:87:EC:CD:69:E1
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 01A08B3100BD16E9D3D0949049D7C4FB9820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 12:00:39 +0000
Manifest this update: Thu 10 Sep 2026 12:00:39 +0000
Manifest next update: Fri 11 Sep 2026 12:00:39 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: hRdcHb2AWeaGNs1mnAifKDDFaFAYxsC2MoRkg8zaGhM=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:00:bd:16:e9:d3:d0:94:90:49:d7:c4:fb:98:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Sep 10 12:00:39 2026 GMT
Not After : Sep 11 12:00:39 2026 GMT
Subject: CN=e085b77bee2c61d32ef2fbc12188d687eccd69e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:be:dc:14:05:5f:3d:eb:5c:6f:ab:3a:3b:
2c:f1:d5:39:2a:ba:9b:4c:c1:5c:97:52:5f:e6:e4:
1e:79:2c:83:49:a9:a6:9d:85:b6:ce:8c:7b:b6:19:
cf:22:83:23:51:3c:88:dc:77:b5:ce:12:24:e0:10:
fd:30:b2:64:41:34:61:0d:bf:b5:f5:ae:d7:77:10:
a0:dc:4b:36:40:f7:55:94:c0:d1:ef:33:5a:87:06:
e2:12:fb:c2:ec:0c:c7:37:fa:7a:35:a5:48:bf:7c:
7d:27:83:86:e8:b5:5b:02:de:c8:e0:f1:c4:38:e4:
29:6c:68:9a:bf:43:83:a9:68:05:bf:9b:31:9e:e7:
cb:40:54:6f:0f:4c:7a:1a:54:80:44:a9:c7:6f:90:
fd:be:d1:d0:70:74:e2:bb:2a:38:43:d1:c3:76:22:
08:7e:c8:a7:e1:69:af:07:40:b3:57:8a:92:54:d5:
57:5f:ba:82:fe:99:c4:e5:ef:43:cd:c9:43:5c:09:
76:17:98:4e:3c:d0:fb:3c:17:2d:a1:1c:e0:a0:6f:
64:fc:de:87:42:9f:fb:0c:f9:9f:7d:07:66:8a:2c:
4f:f7:1f:89:db:f8:9f:82:41:ce:4b:46:ed:ca:6e:
6b:74:95:10:39:17:9a:6b:77:e6:9e:67:bf:78:72:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:85:B7:7B:EE:2C:61:D3:2E:F2:FB:C1:21:88:D6:87:EC:CD:69:E1
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:c4:d0:a0:bd:c0:bf:bc:e1:c4:ba:92:a7:b9:4b:70:a3:
98:0e:96:97:c2:34:d1:5a:31:6b:68:da:07:56:b9:3b:f3:f0:
2c:d4:e7:d5:f9:81:f8:d1:41:78:b2:1b:f0:12:d5:01:c3:2c:
49:97:90:d5:d2:d1:4e:c5:af:23:10:cd:fb:c6:3d:b8:3e:87:
da:f0:97:e5:15:fa:b5:41:d0:26:09:c5:65:fb:7b:5e:fb:59:
49:f5:b7:ac:1e:40:a6:08:de:79:74:ec:99:48:89:a8:0f:d3:
a8:3b:18:e5:ac:5e:4d:36:0b:1a:e0:fe:0f:e0:f8:fe:11:a7:
cf:53:5a:7b:df:b5:6a:69:b7:26:08:57:e0:fa:87:38:38:b9:
85:02:28:8a:66:f4:68:32:21:ca:59:c8:be:db:0a:19:cb:91:
8a:bf:17:27:5e:0d:a9:92:fc:21:3d:12:ed:ed:d5:35:6d:e3:
5f:e3:f2:2e:af:05:03:e9:30:fa:e9:08:28:84:cc:24:02:6b:
7b:0e:e2:4c:d0:ef:6c:9f:2e:e5:0e:d7:19:0c:6d:c6:8c:97:
8c:a8:9d:9e:30:7f:92:5f:aa:be:e9:8c:77:1a:71:6a:d5:0b:
00:e9:10:b0:ff:0b:18:21:69:78:24:5d:2d:68:37:10:45:d1:
a3:21:5d:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMQC9FunT0JSQSdfE+5ggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNmU2NWI4MmZlNDAwN2U4MmZkMmRiMTM0Y2Y0MmM2YWVj
NGUwYmMwHhcNMjYwOTEwMTIwMDM5WhcNMjYwOTExMTIwMDM5WjAzMTEwLwYDVQQD
EyhlMDg1Yjc3YmVlMmM2MWQzMmVmMmZiYzEyMTg4ZDY4N2VjY2Q2OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlG+3BQFXz3rXG+rOjss8dU5Krqb
TMFcl1Jf5uQeeSyDSammnYW2zox7thnPIoMjUTyI3He1zhIk4BD9MLJkQTRhDb+1
9a7XdxCg3Es2QPdVlMDR7zNahwbiEvvC7AzHN/p6NaVIv3x9J4OG6LVbAt7I4PHE
OOQpbGiav0ODqWgFv5sxnufLQFRvD0x6GlSARKnHb5D9vtHQcHTiuyo4Q9HDdiII
fsin4WmvB0CzV4qSVNVXX7qC/pnE5e9DzclDXAl2F5hOPND7PBctoRzgoG9k/N6H
Qp/7DPmffQdmiixP9x+J2/ifgkHOS0btym5rdJUQOReaa3fmnme/eHJzNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCFt3vuLGHTLvL7wSGI1ofszWnhMB8GA1UdIwQY
MBaAFItuZbgv5AB+gv0tsTTPQsauxOC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83YmQ2OGMtYTAzNi00Y2ZlLWI3NjMt
YWY5MDM2MmJkM2JhLzEvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83YmQ2OGMtYTAzNi00Y2ZlLWI3NjMtYWY5MDM2MmJkM2Jh
LzEvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+3E0KC9
wL+84cS6kqe5S3CjmA6Wl8I00Voxa2jaB1a5O/PwLNTn1fmB+NFBeLIb8BLVAcMs
SZeQ1dLRTsWvIxDN+8Y9uD6H2vCX5RX6tUHQJgnFZft7XvtZSfW3rB5ApgjeeXTs
mUiJqA/TqDsY5axeTTYLGuD+D+D4/hGnz1Nae9+1amm3JghX4PqHODi5hQIoimb0
aDIhylnIvtsKGcuRir8XJ14NqZL8IT0S7e3VNW3jX+PyLq8FA+kw+ukIKITMJAJr
ew7iTNDvbJ8u5Q7XGQxtxoyXjKidnjB/kl+qvumMdxpxatULAOkQsP8LGCFpeCRd
LWg3EEXRoyFdNg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:40:40 2026 by rpki-client