Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
File: I88dx_xD6BSDngDYBNPgRTEhqEI.mft (raw, json)
Hash identifier: KXvR8uKgaDTR0fXb29prZxojg7thNAqRd7hzRiecFOA=
Subject key identifier: D9:1D:0B:A1:30:16:CC:42:FE:37:70:CB:8D:DD:CA:5A:6F:A1:F4:74
Authority key identifier: 23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
Certificate issuer: /CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Certificate serial: 019FF835AD6AF7CE92C2741A6066CD8605B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
Manifest number: 76
Signing time: Wed 12 Aug 2026 23:01:35 +0000
Manifest this update: Wed 12 Aug 2026 23:01:35 +0000
Manifest next update: Thu 13 Aug 2026 23:01:35 +0000
Files and hashes: 1: I88dx_xD6BSDngDYBNPgRTEhqEI.crl (hash: JgwuZbM1K4Q9d65pgdM/DW5KkI7m4AELv5oKGW0mjzk=)
2: I8vS97tvtkNgegC1NkyYJZ9EbQM.roa (hash: 65Bo/mCQt2n4+sp0dAv/y7zwG2eGPWv7JSdd7Q3lwQA=)
3: wjFSWz7vhMciO3NWgq7EOeol478.asa (hash: JJd/1+R2h9nS2P/GXQBEhk+xRvz/fMCd/yGwQQm5K5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:ad:6a:f7:ce:92:c2:74:1a:60:66:cd:86:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Validity
Not Before: Aug 12 23:01:35 2026 GMT
Not After : Aug 13 23:01:35 2026 GMT
Subject: CN=d91d0ba13016cc42fe3770cb8dddca5a6fa1f474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:a5:b6:b4:0f:15:21:0c:18:b7:b1:1b:86:
66:de:b5:29:10:38:f6:b7:1a:98:c4:d0:83:38:2e:
ee:bc:87:cb:c9:88:12:15:d9:43:91:40:d0:98:8b:
9b:6f:d0:4f:37:38:a8:20:29:9a:34:5c:6e:11:61:
74:f3:88:6e:ae:35:4e:1b:15:84:31:7f:74:ce:33:
63:4e:72:3c:d9:a3:6d:cd:2f:53:9d:b1:db:4b:af:
61:d8:96:36:95:8b:32:23:c2:a5:d3:c1:12:75:a9:
41:d7:88:56:99:fd:7f:49:62:e4:38:a9:06:e5:0b:
d3:82:29:e4:e0:91:51:b5:5b:c4:7c:84:18:84:ed:
fe:9e:bb:a2:43:c2:b4:03:8e:64:15:77:0e:5c:c2:
15:5e:c7:d7:01:c2:65:6c:22:11:9d:9a:4e:17:43:
81:90:6f:c3:59:1f:da:cc:a9:fe:c7:b2:5b:db:f8:
15:62:c6:ba:d0:62:3e:bc:0e:95:50:32:1e:dc:8f:
13:9a:77:4c:d6:ea:af:68:24:5f:73:4c:fb:3f:c1:
8d:fa:9f:c2:6b:25:49:40:b1:64:6d:c6:ad:c3:d3:
70:61:ce:89:1c:f2:e4:09:8c:95:af:6c:3f:a8:88:
0c:8b:db:9f:f3:26:1b:a9:25:0c:73:84:25:b5:98:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:0B:A1:30:16:CC:42:FE:37:70:CB:8D:DD:CA:5A:6F:A1:F4:74
X509v3 Authority Key Identifier:
keyid:23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e5:0c:b2:0d:a9:f7:c5:cb:d0:14:43:5b:92:db:19:84:cc:
29:97:f8:53:23:32:b8:31:d8:36:34:9f:e7:47:12:6e:c1:86:
66:ac:fd:06:29:3a:d1:5e:d4:42:cf:77:ec:cb:aa:51:69:4e:
ce:76:22:52:db:62:97:b0:3d:a9:a1:ef:14:de:6d:aa:7a:83:
bd:e8:bf:a2:78:35:9e:3f:c3:c8:8e:be:b1:72:d6:1e:bf:6f:
16:7f:b8:a6:2d:c8:0d:3f:27:c9:88:1b:f6:99:05:fc:6f:64:
62:69:37:ff:b1:36:6c:60:88:82:05:8e:89:de:d4:63:05:00:
b6:d3:65:ba:39:1d:b5:8a:3c:6a:95:df:cc:26:c9:8e:ee:d1:
28:b3:11:ab:51:a9:b2:be:55:83:c7:cb:df:b0:de:d0:25:45:
79:56:82:53:92:be:26:47:95:9c:77:50:38:09:52:90:8b:f1:
95:94:b8:38:24:f3:99:fa:57:c6:94:71:c9:fe:e8:18:de:20:
1f:72:f5:ba:d6:41:31:3d:8a:ec:17:33:92:20:77:2f:d8:fd:
30:ea:d9:73:ca:e5:58:b4:78:cb:ac:4b:2b:33:bc:5b:ff:78:
f9:d5:e5:16:cf:f8:b3:bc:0d:16:6c:cb:f8:f7:18:ab:d1:84:
0e:41:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:12 2026 by rpki-client