Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: 1kEEjs0NWvb5CYPXnlzwJRiRL2TjEIcrRq7hGwTTzAI=
Subject key identifier: 62:84:09:72:93:BB:9C:96:A6:B7:51:B9:B5:2F:80:D0:33:BD:14:3A
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 01A0889E079DB08EC4B9907B50B2D5F47A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 04F4
Signing time: Thu 10 Sep 2026 00:00:53 +0000
Manifest this update: Thu 10 Sep 2026 00:00:53 +0000
Manifest next update: Fri 11 Sep 2026 00:00:53 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: XPyaKaeXKsU5aD4NN9+IhiHEiS6ElVheDtLH942+gGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:07:9d:b0:8e:c4:b9:90:7b:50:b2:d5:f4:7a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Sep 10 00:00:53 2026 GMT
Not After : Sep 11 00:00:53 2026 GMT
Subject: CN=6284097293bb9c96a6b751b9b52f80d033bd143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:23:3d:af:f2:69:53:83:c8:e4:ce:2a:16:
3a:d3:8e:6e:c8:58:24:e5:0f:7d:22:8b:48:6a:ee:
e1:a1:f9:a1:e1:02:08:5e:23:b9:2c:98:20:4f:12:
9e:6d:9f:55:c0:e7:40:4c:26:12:64:cf:2d:6b:33:
76:dd:15:37:ef:da:55:af:06:09:b4:40:cb:dd:c4:
b2:2c:22:1c:02:af:bb:5e:fb:a4:30:b2:a4:56:c2:
64:ff:0b:55:09:82:ce:74:89:02:cb:ad:64:97:c0:
b5:b6:89:49:53:94:73:bf:57:df:2d:48:70:e7:e6:
4a:e2:17:5b:3f:66:1f:9d:34:ea:82:80:e8:bb:df:
a2:91:70:fb:23:f7:c5:a9:49:cd:12:d1:7f:03:3d:
13:ba:06:00:98:a0:b8:77:82:12:70:cf:a9:71:ea:
0a:d5:56:ba:2c:2b:62:2e:23:5b:c1:50:e8:4c:86:
a9:d7:c2:af:5a:8a:14:cb:33:76:e9:9a:14:9e:89:
1b:59:1d:07:6f:a4:1f:1f:94:8e:6d:c3:82:b3:9d:
81:bd:ad:17:9f:81:5a:e8:35:81:a6:d4:de:08:8e:
e0:46:cd:71:3d:e4:bc:6b:c9:34:35:0d:16:b7:93:
9d:5a:8a:d1:59:76:ef:6f:dd:7d:32:7f:41:d4:7d:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:84:09:72:93:BB:9C:96:A6:B7:51:B9:B5:2F:80:D0:33:BD:14:3A
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:98:5d:8b:51:a6:29:c5:d0:4d:a9:5d:b9:94:0c:df:20:8a:
dc:66:b5:e2:b7:2e:24:17:9b:60:2c:1b:81:cf:48:0d:6a:c3:
09:b5:18:ab:22:1b:f7:a1:8d:18:3b:43:c2:25:74:aa:22:cf:
00:4e:1f:9b:93:65:35:53:4c:76:a5:bc:e9:8d:3c:aa:6c:0e:
a2:33:c8:38:cb:74:08:77:16:ef:c3:6a:69:ed:46:7f:c9:ff:
ed:8b:57:3e:b2:df:20:7b:74:1c:86:3b:89:07:08:ba:18:c9:
78:0f:c1:30:ed:d7:17:49:b8:49:b6:15:44:61:e8:d2:b8:43:
6f:34:77:05:15:0b:12:54:4c:e1:d4:0a:b8:ad:6c:c7:b2:6f:
1b:4d:ee:5b:8b:9b:d4:05:3f:07:2d:e3:16:c3:c4:18:c3:db:
b1:61:9c:93:3f:9b:01:de:d2:28:73:bb:e2:95:df:80:56:73:
2b:0c:dd:9a:d4:5f:3f:e8:2d:c2:1d:08:7b:29:9d:01:49:ac:
9b:fa:de:9e:6a:41:eb:bd:4f:67:75:64:33:44:dd:c3:2b:3a:
00:ce:84:6e:38:08:fa:3f:db:15:2b:cb:36:bb:16:db:ed:9e:
6f:b3:4c:10:29:f5:75:a1:7d:a7:63:4e:0f:2f:f9:a0:5e:5b:
ce:32:de:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCIngedsI7EuZB7ULLV9HpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNGRiODdhNDk3YTE1YmE3OWE3MDZkMTJlZTkwNGM0NDQ5
ZDFiNTUwHhcNMjYwOTEwMDAwMDUzWhcNMjYwOTExMDAwMDUzWjAzMTEwLwYDVQQD
Eyg2Mjg0MDk3MjkzYmI5Yzk2YTZiNzUxYjliNTJmODBkMDMzYmQxNDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7IjPa/yaVODyOTOKhY6045uyFgk
5Q99IotIau7hofmh4QIIXiO5LJggTxKebZ9VwOdATCYSZM8tazN23RU379pVrwYJ
tEDL3cSyLCIcAq+7XvukMLKkVsJk/wtVCYLOdIkCy61kl8C1tolJU5Rzv1ffLUhw
5+ZK4hdbP2YfnTTqgoDou9+ikXD7I/fFqUnNEtF/Az0TugYAmKC4d4IScM+pceoK
1Va6LCtiLiNbwVDoTIap18KvWooUyzN26ZoUnokbWR0Hb6QfH5SObcOCs52Bva0X
n4Fa6DWBptTeCI7gRs1xPeS8a8k0NQ0Wt5OdWorRWXbvb919Mn9B1H2CpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKECXKTu5yWprdRubUvgNAzvRQ6MB8GA1UdIwQY
MBaAFItNuHpJehW6eacG0S7pBMREnRtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYt
MTYwMWQ0MWZkYzFmLzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYtMTYwMWQ0MWZkYzFm
LzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfphdi1Gm
KcXQTalduZQM3yCK3Ga14rcuJBebYCwbgc9IDWrDCbUYqyIb96GNGDtDwiV0qiLP
AE4fm5NlNVNMdqW86Y08qmwOojPIOMt0CHcW78Nqae1Gf8n/7YtXPrLfIHt0HIY7
iQcIuhjJeA/BMO3XF0m4SbYVRGHo0rhDbzR3BRULElRM4dQKuK1sx7JvG03uW4ub
1AU/By3jFsPEGMPbsWGckz+bAd7SKHO74pXfgFZzKwzdmtRfP+gtwh0IeymdAUms
m/renmpB671PZ3VkM0Tdwys6AM6EbjgI+j/bFSvLNrsW2+2eb7NMECn1daF9p2NO
Dy/5oF5bzjLejQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:50:20 2026 by rpki-client