Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: PkJ9ClzgHfqij1ot5+dbx6POMXzmgUqFH/Hm2D3kX1M=
Subject key identifier: 16:23:55:A3:CF:4E:F6:7E:EB:69:D5:40:B9:4B:2D:5E:E7:36:19:D6
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 01A08D1FD072E96D54BE61B083ED5594F300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 21:01:07 +0000
Manifest this update: Thu 10 Sep 2026 21:01:07 +0000
Manifest next update: Fri 11 Sep 2026 21:01:07 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: L+OZepLvGoFEBepJHhzyqTt/txietA8jinsvjm2EHTo=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:d0:72:e9:6d:54:be:61:b0:83:ed:55:94:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Sep 10 21:01:07 2026 GMT
Not After : Sep 11 21:01:07 2026 GMT
Subject: CN=162355a3cf4ef67eeb69d540b94b2d5ee73619d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:22:44:25:53:b9:02:e6:52:d9:46:6e:e3:79:
5d:12:2e:cf:75:dc:c4:10:50:3b:4e:1d:b3:f2:1a:
e3:26:3a:70:00:e6:b4:f5:78:b7:be:75:fa:bd:4c:
e6:5c:d4:ca:3a:45:78:ee:86:64:1f:56:c3:b9:25:
fc:8e:d4:b2:8e:6c:fb:81:61:82:3b:95:b0:b9:5a:
52:17:1b:d1:e7:9c:f7:1f:ee:dc:49:66:9e:c8:31:
d2:5c:e8:8e:0d:1f:6d:4c:3f:d3:ff:bd:9e:3e:12:
0b:18:03:b1:98:20:78:c4:d6:d8:42:32:e3:fb:fa:
a3:8c:6a:79:fa:72:75:43:52:c4:f8:c4:b6:8e:8c:
0e:31:1d:4a:b2:8b:f2:2f:2b:c4:fa:2e:92:64:fc:
e4:ab:4b:08:ff:b1:a3:28:ec:b6:8b:e4:39:9a:8f:
2e:8c:a3:f1:87:b8:a6:c3:d6:0f:1c:71:cd:b4:90:
ac:26:9c:c8:21:f1:c0:42:a0:69:89:07:c5:e1:57:
e2:b4:4c:d3:48:a6:03:ad:86:a5:b8:88:6e:bd:64:
22:73:4a:b5:28:34:df:e4:41:8c:5b:1a:41:ae:94:
10:ab:51:cd:6a:2a:53:9a:ff:73:56:1a:90:60:03:
d7:87:6c:61:c5:74:26:cd:40:1a:16:c7:79:34:64:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:55:A3:CF:4E:F6:7E:EB:69:D5:40:B9:4B:2D:5E:E7:36:19:D6
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:89:41:5a:a1:7c:73:3d:5e:7c:2f:26:38:9e:31:a0:70:02:
8b:89:42:e0:7d:72:06:d7:a1:58:b9:fd:b9:12:49:66:8a:29:
66:fc:e4:65:12:ec:35:de:37:a1:db:24:29:f0:38:e0:d4:af:
3a:29:e0:b7:a8:39:82:fd:5d:a0:dc:02:53:a1:33:4a:6e:01:
78:ff:a8:e8:0d:25:38:05:99:c6:3e:da:18:b6:99:e0:ba:87:
65:9c:95:43:ec:6d:0e:02:62:c7:4d:29:b0:0f:09:84:0e:50:
c3:82:c1:74:71:9d:4c:7d:19:e6:af:0e:67:28:52:e9:d0:5a:
75:85:ab:26:9f:d1:48:b2:71:e9:1a:da:7a:f7:89:96:4d:8f:
2b:24:99:1f:ec:c2:be:5a:c3:c3:23:84:8d:e2:24:25:a4:70:
b1:a6:55:0b:3c:a3:34:da:9e:7b:56:41:69:07:51:51:28:7a:
0f:f9:5d:1a:74:39:cb:41:31:91:99:f6:ad:e7:6f:ef:de:67:
b5:cc:29:2d:3a:4c:ac:fe:6c:e3:30:9e:1c:1a:74:f4:98:29:
61:96:4e:63:e2:1a:ea:b1:d3:02:43:b7:2a:4b:cd:48:4c:5b:
c6:e7:a4:84:b1:21:8d:28:be:e6:82:cc:fa:72:74:03:19:76:
e8:b0:70:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNH9By6W1UvmGwg+1VlPMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGVhMmQ0YWIxMzgwZjBhM2I3ZmU3ZDRmYTc4MjhlMWM5
NDM1NTgwHhcNMjYwOTEwMjEwMTA3WhcNMjYwOTExMjEwMTA3WjAzMTEwLwYDVQQD
EygxNjIzNTVhM2NmNGVmNjdlZWI2OWQ1NDBiOTRiMmQ1ZWU3MzYxOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SJEJVO5AuZS2UZu43ldEi7PddzE
EFA7Th2z8hrjJjpwAOa09Xi3vnX6vUzmXNTKOkV47oZkH1bDuSX8jtSyjmz7gWGC
O5WwuVpSFxvR55z3H+7cSWaeyDHSXOiODR9tTD/T/72ePhILGAOxmCB4xNbYQjLj
+/qjjGp5+nJ1Q1LE+MS2jowOMR1KsovyLyvE+i6SZPzkq0sI/7GjKOy2i+Q5mo8u
jKPxh7imw9YPHHHNtJCsJpzIIfHAQqBpiQfF4VfitEzTSKYDrYaluIhuvWQic0q1
KDTf5EGMWxpBrpQQq1HNaipTmv9zVhqQYAPXh2xhxXQmzUAaFsd5NGRVBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYjVaPPTvZ+62nVQLlLLV7nNhnWMB8GA1UdIwQY
MBaAFIveotSrE4Dwo7f+fU+ngo4clDVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQt
MWUzMjZkZWJhNGQwLzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQtMWUzMjZkZWJhNGQw
LzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIlBWqF8
cz1efC8mOJ4xoHACi4lC4H1yBtehWLn9uRJJZoopZvzkZRLsNd43odskKfA44NSv
Oingt6g5gv1doNwCU6EzSm4BeP+o6A0lOAWZxj7aGLaZ4LqHZZyVQ+xtDgJix00p
sA8JhA5Qw4LBdHGdTH0Z5q8OZyhS6dBadYWrJp/RSLJx6RraeveJlk2PKySZH+zC
vlrDwyOEjeIkJaRwsaZVCzyjNNqee1ZBaQdRUSh6D/ldGnQ5y0ExkZn2redv795n
tcwpLTpMrP5s4zCeHBp09JgpYZZOY+Ia6rHTAkO3KkvNSExbxuekhLEhjSi+5oLM
+nJ0Axl26LBwMg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:54 2026 by rpki-client