Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: BzXaRyUBszB3p3m6BSWYjdkFgTqzjuhMt5FEOECDZOo=
Subject key identifier: ED:E5:E7:0B:1C:C3:67:D5:3D:74:03:2E:49:6F:19:F8:29:07:4D:6A
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 01A1863F1CB99CE67C86460376D221494586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 1AC9
Signing time: Thu 29 Oct 2026 06:00:45 +0000
Manifest this update: Thu 29 Oct 2026 06:00:45 +0000
Manifest next update: Fri 30 Oct 2026 06:00:45 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: qXYIuht1CviPvYXcGjhIOBDMxRPADr1W4YJ369wLHmI=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:1c:b9:9c:e6:7c:86:46:03:76:d2:21:49:45:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Oct 29 06:00:45 2026 GMT
Not After : Oct 30 06:00:45 2026 GMT
Subject: CN=ede5e70b1cc367d53d74032e496f19f829074d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:f9:d9:9b:0a:0c:bc:45:fb:01:ba:e0:2f:
67:20:fd:33:37:b7:e6:a3:26:bd:dc:08:be:98:bf:
2d:59:f4:97:d7:16:8c:9e:87:d9:fc:86:3c:69:a6:
cf:b7:81:69:c0:a8:c8:d7:5f:6c:e0:23:72:ed:b0:
fa:fb:50:e8:5b:af:b2:fb:06:28:c9:2c:f7:34:d1:
44:44:4d:9b:ec:5a:a0:11:03:03:4e:f5:c9:1c:5b:
6b:57:aa:df:2d:05:a0:6a:48:12:4e:52:fc:cc:c2:
40:26:94:f0:09:7c:22:2f:94:ef:68:b3:65:47:cd:
d0:f4:6d:74:c1:c3:2b:d6:bf:0c:dd:49:3d:3f:83:
6c:f0:8d:2a:8f:f0:10:51:ce:50:97:d4:ab:38:ff:
30:8b:c0:ce:0a:d8:92:72:2a:5c:ba:16:43:09:3e:
bd:fa:a7:85:5d:36:de:73:cd:8c:a1:2f:ae:28:d6:
ea:fa:1d:e2:0f:0b:ff:ff:df:47:ce:5c:c3:5f:2c:
b2:4e:08:6d:1d:a3:83:50:ac:ad:2f:9d:5d:42:1d:
c0:2f:e0:f2:bf:4c:fb:69:f7:40:46:c9:79:1a:03:
1a:17:f2:53:79:e0:0c:e8:e7:b2:e9:a8:d1:00:8f:
3f:76:b7:3b:c3:21:32:7a:62:7a:dd:fa:f3:4e:50:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E5:E7:0B:1C:C3:67:D5:3D:74:03:2E:49:6F:19:F8:29:07:4D:6A
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:80:45:fc:90:34:5f:a4:66:5d:92:86:f4:a2:df:29:62:ce:
f6:2b:34:75:ca:1c:ff:05:00:94:ed:68:a1:97:68:32:35:dc:
1a:90:c3:23:30:a0:21:b5:68:7d:8a:7e:ff:f0:f3:57:7c:80:
aa:1e:b1:a5:47:29:2f:60:3b:b2:d7:6b:7c:07:09:05:62:bf:
05:fa:68:c1:f4:83:cf:30:08:3e:a3:68:2f:d0:0e:4a:b4:b4:
84:d4:79:86:96:8e:2e:ff:8c:10:57:db:35:ca:c6:f1:8b:0b:
5d:22:a8:a9:36:a7:b4:e2:58:f8:07:90:79:ac:03:dd:d9:73:
1a:37:c5:6f:bc:a6:d8:8e:39:10:17:63:19:2c:3f:c9:8a:2d:
99:01:90:af:35:a9:08:39:2b:1a:4a:2a:27:25:71:bd:5d:66:
77:f8:0f:00:87:85:1e:9a:c6:96:63:c5:23:d9:4a:b9:4c:98:
32:d8:96:e9:3c:37:9a:2c:b9:69:a7:83:6f:c4:b9:03:ff:8e:
2c:82:c1:0c:fa:33:1e:cb:68:c4:98:18:2b:4c:da:4b:53:97:
fd:10:74:64:a0:66:2a:d0:45:83:2b:45:b3:92:4b:d2:42:47:
08:0a:99:01:38:5f:ef:5f:82:72:61:35:cc:a8:65:d0:16:cc:
aa:9d:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:49:16 2026 by rpki-client