Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: AcHM+Z8CXtRIp6LIGD+8dM0xEeo8/bUxe33t2fsHD1A=
Subject key identifier: EB:CB:64:67:9B:7D:94:E3:CA:DB:4B:65:3A:79:12:8D:4B:0E:F0:A3
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 01A17BF2448BF721FD929AB21C54BD0C86FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 0572
Signing time: Tue 27 Oct 2026 06:00:37 +0000
Manifest this update: Tue 27 Oct 2026 06:00:37 +0000
Manifest next update: Wed 28 Oct 2026 06:00:37 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: tgFa8Ru/apDjv3uRp5VmiD18w2gc8f8eS+7LMjirrxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:44:8b:f7:21:fd:92:9a:b2:1c:54:bd:0c:86:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Oct 27 06:00:37 2026 GMT
Not After : Oct 28 06:00:37 2026 GMT
Subject: CN=ebcb64679b7d94e3cadb4b653a79128d4b0ef0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:17:f0:87:de:10:14:90:7e:e1:c3:2f:c5:
01:a9:24:8c:a1:46:54:cd:a5:a0:2f:e5:a6:9d:a3:
fc:33:d7:4f:83:bd:16:a1:e6:85:3f:c7:24:f9:01:
b4:b2:2c:04:76:3d:0d:99:8d:14:40:68:68:cc:fd:
08:23:7c:62:15:54:d5:1f:12:97:f2:ac:9e:35:6b:
85:d8:fa:27:f9:8c:86:fb:96:c6:5b:75:80:6e:47:
29:5a:b3:46:f6:67:d4:78:31:10:1b:ce:df:42:ff:
e2:8d:c1:e0:4a:e2:59:7c:dd:22:64:8e:22:dd:e4:
c2:3c:c3:e8:74:ac:96:37:7d:b7:b2:2c:6c:c8:d6:
67:47:ed:0f:d2:bd:3c:68:8c:2e:cc:28:4d:a4:23:
fc:dc:9f:99:54:af:8c:0e:4d:f2:ff:31:77:7e:5b:
3a:fd:6e:26:20:f2:22:51:fd:5b:6b:64:d9:e5:ba:
1d:c7:85:87:5d:bc:40:86:0a:3b:ec:69:8b:72:4f:
4a:60:6a:df:14:06:04:39:d2:e7:7a:82:6a:9a:85:
0b:4c:08:40:82:cd:83:8d:26:6e:d0:4a:88:38:fe:
cc:c7:13:ea:12:ee:dc:a3:dc:b3:6d:d4:27:b0:9d:
11:f7:d5:9a:c0:7f:bb:4f:00:26:74:8e:be:fe:14:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CB:64:67:9B:7D:94:E3:CA:DB:4B:65:3A:79:12:8D:4B:0E:F0:A3
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:05:d7:74:f1:f8:9f:f4:0e:c2:aa:fe:35:0f:b5:5e:eb:
58:d3:a8:82:79:f5:d6:42:11:46:3f:58:fb:79:ec:6d:f7:cf:
f8:96:47:13:85:01:52:84:25:f0:d7:54:7f:44:89:50:5c:c1:
13:07:ee:95:fc:71:2b:cc:52:2a:cd:3d:e8:6a:c3:20:f1:88:
b0:8e:e2:57:0d:38:66:87:67:89:0a:63:3c:62:47:4f:d8:e5:
b2:a4:1a:61:f0:cb:85:2d:0a:0f:bf:b6:ee:62:a2:59:d2:e6:
a5:15:ea:2c:d6:3f:af:84:01:ad:3f:0b:b3:b6:6c:53:67:38:
7e:98:0b:1c:67:56:17:b9:66:51:92:a5:30:4f:18:b5:e3:c6:
e6:68:10:ea:da:cf:4d:04:62:ef:13:13:48:fd:9c:41:1e:0d:
39:f7:2f:08:80:e9:92:46:7c:6e:90:a2:05:62:2d:34:8a:ef:
34:9a:b7:67:18:af:64:58:10:30:2d:3f:f5:17:24:9f:12:4a:
34:cd:15:92:cd:70:dd:84:b7:70:64:d7:d1:b3:37:90:c0:67:
bd:0c:55:f0:4d:c3:14:ac:65:ee:56:38:3c:f8:f8:a8:a9:b7:
1d:85:4d:59:45:40:eb:96:e3:d6:8c:43:4f:24:4f:18:88:97:
4e:15:e8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:48:50 2026 by rpki-client