Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: bpPVw6jeuaO5jhSV8I9JAohpSRtUQxafRVlFxLk3oGk=
Subject key identifier: 9C:C6:11:26:6D:8F:30:1F:08:03:DF:12:29:05:B6:AA:0D:24:1A:CB
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019FA44E5926FA2709ADDADBC373DCA248FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 16:00:25 +0000
Manifest this update: Mon 27 Jul 2026 16:00:25 +0000
Manifest next update: Tue 28 Jul 2026 16:00:25 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: Pb1RI1U83LzSQNlKA64aO1aTOXcAi5oNA+078Qjuij4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:59:26:fa:27:09:ad:da:db:c3:73:dc:a2:48:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jul 27 16:00:25 2026 GMT
Not After : Jul 28 16:00:25 2026 GMT
Subject: CN=9cc611266d8f301f0803df122905b6aa0d241acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:cd:6f:34:c7:4f:14:58:37:85:af:14:d6:
a9:59:f2:ac:16:55:02:47:e8:17:a8:9c:6e:53:af:
61:d0:52:6e:52:eb:36:50:27:1e:7d:8d:c1:a8:28:
df:5f:80:fe:a4:7f:d9:0d:8d:72:0d:3f:98:2c:1e:
55:b5:e2:da:7c:57:fe:ea:27:4c:54:cb:81:2b:d2:
1e:e5:9e:fc:27:86:9f:5f:ff:df:1f:72:2d:17:75:
61:ae:40:fb:f2:44:05:b5:fa:02:fa:83:1c:33:1a:
00:b6:96:bf:64:89:15:ef:de:c0:45:b2:8f:f4:90:
ea:43:3a:5b:c9:4b:74:93:2f:5b:e3:ba:e1:cf:6b:
47:1a:ec:92:cd:27:21:84:a2:af:95:ab:e8:19:70:
34:69:89:50:a5:1c:a2:79:ac:59:dd:0c:91:21:eb:
54:a1:9b:f6:a4:03:27:c4:42:13:24:a8:96:dc:9e:
9b:0b:4c:b9:01:ec:55:b3:f1:33:ef:b2:a7:1d:81:
6c:5a:ca:76:2d:fd:89:1a:3a:82:8b:3e:bd:39:44:
d3:19:b9:6a:68:60:32:b1:47:a2:ad:2e:bb:a2:05:
c7:ec:7e:75:95:69:07:13:9b:7f:58:b3:3d:e8:3b:
14:93:aa:f9:68:98:7e:16:b4:e5:35:5d:24:3b:1e:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:11:26:6D:8F:30:1F:08:03:DF:12:29:05:B6:AA:0D:24:1A:CB
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6e:7c:78:f9:7a:09:76:a2:c7:b2:37:5d:99:d3:ef:53:0b:
a9:09:26:5d:70:0e:3b:8f:a2:d3:06:af:8d:3e:82:19:37:d8:
75:75:85:05:5f:91:11:9a:20:b3:6f:90:1d:79:bd:8b:b8:1c:
d0:31:02:d3:09:38:17:6b:1b:14:e9:13:1e:9b:41:4f:6f:a4:
17:d9:37:7f:3c:da:0b:8f:20:a4:80:87:00:f2:12:ab:50:9b:
d6:82:61:0e:76:fd:ab:8e:00:5b:fe:41:65:83:d4:d6:8f:28:
78:34:eb:1e:89:b9:05:8e:fe:8e:90:2d:f8:45:91:fe:ac:65:
32:36:b9:c5:54:6e:b9:d9:b9:45:13:0a:4a:4d:68:4e:e9:70:
44:a3:2a:6b:fc:9e:4c:67:c1:07:ab:33:7a:8d:a7:8f:33:f6:
30:8b:4e:3a:d9:cb:f3:17:9b:4d:06:7e:1c:23:c3:e4:29:1e:
86:ae:d1:44:14:12:7a:8a:f6:30:e1:e9:0c:f9:e5:6d:aa:57:
db:04:ee:e6:e6:b2:54:46:7d:0f:3d:24:20:38:80:d0:e5:5a:
b8:d0:d7:aa:b9:03:ad:ae:29:88:4e:7d:08:e8:ec:76:ba:10:
b5:57:b5:e3:f4:44:00:0f:ab:d2:89:12:ca:38:41:9f:d2:45:
84:2f:9f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:22:15 2026 by rpki-client