Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: DrM1J5p/T8C/wI8Tv9IFoQBhkt0SCxQkopu89FBRoaA=
Subject key identifier: 8C:06:BC:8E:A5:4B:32:EE:C5:FF:AB:DF:8D:23:B6:3D:0B:AC:A1:DA
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 01A06FBA6B9EE367304A5EE14C741E30B831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1A40
Signing time: Sat 05 Sep 2026 04:01:23 +0000
Manifest this update: Sat 05 Sep 2026 04:01:23 +0000
Manifest next update: Sun 06 Sep 2026 04:01:23 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: k3nbGkueBbtCELNm2QSuCdTchbJaaNWdJZB8ubkBHQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:ba:6b:9e:e3:67:30:4a:5e:e1:4c:74:1e:30:b8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Sep 5 04:01:23 2026 GMT
Not After : Sep 6 04:01:23 2026 GMT
Subject: CN=8c06bc8ea54b32eec5ffabdf8d23b63d0baca1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:84:fb:70:93:ee:8b:23:e0:a7:ae:c3:24:
75:b0:69:0d:a2:96:cc:4a:84:95:3f:52:60:17:e8:
3d:06:ae:d1:ff:f7:78:52:9d:12:8c:3b:e4:86:0d:
72:41:a6:0a:c7:5c:5f:a9:00:b3:8e:35:b9:dc:58:
f6:82:a3:f6:f5:92:52:f6:2f:cc:15:d2:64:7a:9e:
78:96:dc:29:72:c8:a6:dd:f1:64:e3:64:2b:2c:e5:
d8:57:90:4e:f9:52:d5:79:d0:18:72:a6:89:17:43:
15:0e:4f:d1:f9:36:0f:44:04:be:93:16:ea:6a:f8:
a4:e3:a7:3e:30:9c:7b:f4:bf:d2:f8:11:69:be:fe:
e7:b8:0a:66:8d:d7:ef:84:4c:b1:4f:68:07:a8:d1:
87:73:a7:d1:16:a8:e8:b9:3b:53:b6:87:27:ed:ea:
6a:94:65:1a:0a:2f:81:69:bd:9e:c1:68:2c:a5:dd:
03:41:62:d6:4f:b9:a3:eb:99:e4:7f:fe:d2:3e:29:
16:33:d7:73:b7:e0:bf:41:9b:c7:fe:b8:5d:9e:cc:
19:d8:c3:dd:02:4b:9e:35:07:d3:ae:4e:8d:e4:8d:
a4:e8:33:9a:20:fe:37:97:28:c0:de:a2:1f:e1:45:
a8:bc:1b:ec:77:72:da:54:dd:78:68:c0:05:d9:ff:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:BC:8E:A5:4B:32:EE:C5:FF:AB:DF:8D:23:B6:3D:0B:AC:A1:DA
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:92:32:2a:ed:ba:35:87:b6:9f:95:e8:23:c7:2a:e2:2c:61:
03:cf:5d:4d:41:4c:64:de:ce:ab:ae:3a:0f:33:0f:03:8e:9e:
0a:51:ce:98:3f:a1:33:4b:03:bb:37:4a:e0:11:31:69:7c:f3:
95:5c:bf:ed:a8:7f:78:d4:66:83:b4:09:c6:c7:c5:4e:9c:0f:
ab:9e:61:8a:fe:8f:84:31:2f:f9:b0:ee:99:1f:a6:5d:14:77:
86:a5:20:77:b2:80:83:29:00:fd:51:2f:5e:03:41:83:be:24:
60:ba:5e:b3:00:14:f2:f5:42:8f:7b:fb:2a:52:1b:f0:7c:66:
5a:0d:e9:71:23:a5:0f:5f:5c:b2:d5:bb:8f:7c:9b:10:ac:e1:
13:56:bd:43:4c:df:75:c8:3e:cd:30:46:30:2b:6b:43:e3:69:
a2:d9:16:c6:1b:d6:c0:79:83:16:ff:56:20:26:fd:72:e6:d7:
9c:7f:b1:96:5b:de:68:42:b8:39:76:19:30:ae:27:f1:56:b9:
26:a1:28:86:2b:a6:63:4b:bb:55:67:85:f7:4f:91:a9:35:3d:
81:b8:42:a5:80:e3:e5:05:a9:b1:0c:19:63:85:63:78:cc:73:
00:45:ae:8a:3c:97:29:07:b6:5e:1e:85:78:d6:e4:2d:0a:1d:
3a:57:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:35:23 2026 by rpki-client