Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: jW8f0yLFKAB1JEUQZxwJzYTDikxfzaSbF4scPiK7MkI=
Subject key identifier: 06:F7:5F:F7:00:93:B1:EB:C3:40:D7:B2:A1:20:01:AB:0A:F2:AE:C4
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019CE5C8BDF603D6934E92C2BD9B36205289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 0312
Signing time: Fri 13 Mar 2026 06:01:04 +0000
Manifest this update: Fri 13 Mar 2026 06:01:04 +0000
Manifest next update: Sat 14 Mar 2026 06:01:04 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: u/JWjlu7B4YO3HT6wDl8h+F9PSWAvhnnz6+AwaNnCNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:bd:f6:03:d6:93:4e:92:c2:bd:9b:36:20:52:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Mar 13 06:01:04 2026 GMT
Not After : Mar 14 06:01:04 2026 GMT
Subject: CN=06f75ff70093b1ebc340d7b2a12001ab0af2aec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:0d:6d:3d:f2:d7:ae:1f:b2:6a:f7:da:ba:
63:db:13:2f:f4:35:7d:aa:c9:fc:d8:f4:76:4e:57:
9a:84:d1:d5:4f:97:8b:71:98:aa:6c:8c:93:3e:3e:
2b:1c:0b:96:30:87:e5:72:ae:9c:15:7b:82:25:94:
cc:07:bd:b9:f1:69:b4:0c:7a:2c:88:04:a8:ef:f0:
ed:47:f0:66:23:71:46:fa:0d:3e:e7:e9:2d:14:41:
46:8a:1b:c1:21:58:2c:0e:97:78:95:68:ab:86:3b:
1f:bb:72:78:ef:ea:d1:84:7a:0c:32:10:53:77:8e:
08:ec:aa:9f:e5:44:0c:e4:61:96:18:ee:2d:f0:80:
30:a2:52:f8:19:40:fe:cf:4b:53:1d:17:8b:85:61:
2d:87:f0:07:d1:a2:14:e8:9d:c7:9b:f6:a0:1f:f2:
1c:5d:a0:87:fc:16:40:0b:65:90:e4:da:60:5c:68:
1d:1a:90:d9:c7:93:ac:bc:86:a4:9e:5f:20:1f:7f:
b8:39:be:64:00:36:b1:c1:4a:b8:fe:a2:8d:d6:bb:
cd:83:f8:52:82:23:26:51:75:f5:01:5f:ea:e2:fe:
39:95:b2:b5:27:98:e7:50:e3:7a:f4:21:b1:c4:4f:
45:0b:25:06:58:c3:1e:fe:86:10:ac:25:8d:fc:f4:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F7:5F:F7:00:93:B1:EB:C3:40:D7:B2:A1:20:01:AB:0A:F2:AE:C4
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4f:63:67:ab:5b:a6:fa:77:a2:1b:a5:f3:36:15:ee:31:35:
0a:34:de:82:2e:ad:78:9a:61:a9:70:a4:97:59:45:30:c4:cf:
e1:d4:f0:b2:09:90:1a:2c:90:83:1c:90:d5:a8:ae:18:18:50:
e7:f7:1b:82:db:9e:a1:a3:3d:08:98:fa:96:ad:5b:32:6c:aa:
d6:85:e6:99:32:aa:30:65:28:3f:be:1f:60:32:95:a0:d7:86:
3b:a5:a5:1e:82:40:ee:88:e7:ce:d5:dc:5d:4e:1d:d6:5e:67:
20:7a:4e:aa:77:71:b3:3a:0f:78:21:95:cc:b6:39:9c:ae:5f:
9b:3f:f5:9d:70:5a:92:cc:df:ef:32:81:81:0d:f9:f2:c0:65:
fb:a3:df:3e:a2:80:55:a9:8d:68:d3:71:92:09:ba:79:bd:7a:
f4:01:25:b4:e0:ed:24:4b:2e:d6:a9:ff:a3:f9:26:ae:cb:19:
13:dc:dc:ff:3e:5e:c2:21:fe:4a:35:14:da:fd:9f:c5:ed:05:
84:2b:25:bc:5f:d2:29:3b:8c:e8:07:a1:1e:0e:a6:be:8d:88:
27:40:99:90:f8:59:a7:5a:fd:14:20:ac:60:a8:d7:1d:3d:4c:
1f:be:e1:8f:53:69:c5:88:5a:30:29:86:98:2e:c8:36:f8:cd:
28:da:55:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:55:49 2026 by rpki-client