Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: /xYIaylYaDqN+9APrOGY8NPYotyPfj+37YA1b7R+wXY=
Subject key identifier: 30:27:D2:6B:B2:2F:20:61:46:EA:21:8A:A1:F4:72:9B:8D:24:34:C4
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019FA0E04E0085C1B437358026DE24AEC058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 047C
Signing time: Mon 27 Jul 2026 00:01:22 +0000
Manifest this update: Mon 27 Jul 2026 00:01:22 +0000
Manifest next update: Tue 28 Jul 2026 00:01:22 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: lBxxc2s0agzvidISjwuevniLdxrIcTG4kkcuWo64DkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:4e:00:85:c1:b4:37:35:80:26:de:24:ae:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Jul 27 00:01:22 2026 GMT
Not After : Jul 28 00:01:22 2026 GMT
Subject: CN=3027d26bb22f206146ea218aa1f4729b8d2434c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:7f:7b:0d:4e:0d:43:a0:87:d5:0d:76:26:
9b:10:8f:41:73:e9:8a:0b:12:39:31:ea:09:f7:39:
84:b0:24:bd:7c:9e:11:ca:38:af:18:d3:33:d6:8f:
bb:83:93:9e:d8:03:d8:6f:07:e0:16:85:b9:3b:07:
a2:00:7b:a9:39:4d:23:6c:a5:1c:42:af:de:68:42:
98:3a:ca:89:e7:6f:04:e8:3f:a9:5c:d7:c2:aa:7f:
3f:c5:ca:93:55:73:1e:07:43:fb:74:1b:1e:15:4f:
e0:60:a3:2c:a4:30:ce:01:4f:83:01:35:a0:41:3d:
57:fa:70:87:9d:10:07:66:80:29:74:ee:ed:e5:c2:
38:b8:35:aa:d1:e7:1b:c1:81:85:53:c5:ab:47:fc:
41:3e:9e:ab:17:f6:62:ef:99:53:2e:b0:53:27:cd:
7d:45:e0:fe:7a:d6:65:e9:a1:9b:21:bf:64:7d:ef:
90:2e:d2:14:cb:64:83:38:5a:c3:31:c1:50:22:00:
50:7c:df:d1:2d:3a:39:10:9b:38:3d:10:84:cf:64:
a2:b9:bc:73:95:68:af:5e:14:06:96:b4:ae:d9:a9:
d0:f1:09:10:86:e5:5a:ef:7f:a4:3f:e1:01:ce:1d:
31:11:fb:fc:e0:b3:2c:9b:f4:12:dd:54:1d:be:f1:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:27:D2:6B:B2:2F:20:61:46:EA:21:8A:A1:F4:72:9B:8D:24:34:C4
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:90:d7:76:bd:4d:9a:1e:99:f7:6d:e7:31:75:27:bd:b1:f2:
e4:20:69:32:30:cc:14:96:ec:94:d3:4a:35:77:58:ce:1c:27:
19:0e:32:dd:10:c2:a4:79:20:65:65:08:1c:88:50:0d:93:d8:
67:99:93:54:0d:94:4d:2d:ea:48:91:5c:0a:6f:f8:4b:8c:e7:
79:14:15:69:4d:c9:28:68:0b:3c:03:2b:9b:b2:83:51:71:1a:
26:45:ab:e3:fc:17:aa:62:ac:13:f9:36:4a:3c:a7:cd:24:bb:
7a:47:d5:38:9f:ba:7d:3e:f0:3b:08:57:12:7c:cf:ee:65:5f:
94:ef:fa:a6:c0:fa:a2:fe:dc:ec:e4:27:98:83:13:8d:07:3f:
1a:1a:ae:0a:69:4b:4a:97:47:98:28:70:31:b8:60:49:f9:f2:
9f:bc:e4:37:d4:e0:8b:9f:b9:5b:79:11:5d:d3:c5:a5:65:a9:
f9:f0:13:f0:cc:e1:65:dc:af:7c:4e:d0:d8:15:36:58:86:ec:
e0:34:7a:5e:72:30:f1:aa:54:1e:4b:92:2f:e3:e7:eb:2d:92:
95:9f:82:ce:6e:97:62:c9:ed:99:0f:be:c1:49:91:a6:67:23:
a6:88:96:cd:af:0b:99:30:e6:a6:35:30:b6:a9:e4:1c:94:10:
1a:eb:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:32 2026 by rpki-client