Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: Irq8Q9otydEZM4wxL+SREBKwykeOoUjsfamads4JZ2Q=
Subject key identifier: 5D:07:8D:59:ED:2E:BE:98:FD:59:61:C3:25:49:9E:A0:94:5E:C1:79
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019CE55A6C4B6EC2327A2C3C05DB3E55675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 17F6
Signing time: Fri 13 Mar 2026 04:00:34 +0000
Manifest this update: Fri 13 Mar 2026 04:00:34 +0000
Manifest next update: Sat 14 Mar 2026 04:00:34 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: QUHZyeRcxHtaR43aC3dNQcOOpdOtdYJoI6DB8VEr3tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:6c:4b:6e:c2:32:7a:2c:3c:05:db:3e:55:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Mar 13 04:00:34 2026 GMT
Not After : Mar 14 04:00:34 2026 GMT
Subject: CN=5d078d59ed2ebe98fd5961c325499ea0945ec179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:df:8a:b0:8c:24:41:7f:2e:48:9c:c4:3d:
b2:de:77:48:fe:77:14:26:40:ca:9e:f0:70:e3:f3:
a3:30:f2:db:e1:ff:d2:58:5f:7a:fb:1a:a5:d2:23:
4e:19:c7:a9:bc:2e:61:a5:ba:00:ce:fc:7d:61:87:
40:fb:ae:c4:14:05:8a:5b:b8:d4:46:49:df:b0:db:
0c:e0:de:99:49:ee:66:fe:35:f5:f4:1f:96:82:e1:
c1:60:6e:4e:d3:f6:17:2d:6a:11:cb:23:cb:db:24:
18:e1:cf:fa:52:f9:80:6e:75:68:3a:96:36:10:b1:
b2:03:68:1a:61:37:14:6a:b5:f6:24:5f:4e:92:cf:
2f:54:b8:af:ba:d6:82:58:2b:3a:cc:75:83:95:f8:
6f:c1:87:81:f4:ec:43:a5:05:85:d3:38:ce:ce:88:
bc:1d:9d:16:42:55:b9:36:06:eb:b2:8d:41:76:80:
9c:6e:10:62:ab:1f:11:6e:ca:e8:9e:c0:32:20:9e:
22:f5:d4:2c:f3:80:6a:86:e4:92:d6:13:29:2d:bc:
ed:c5:82:fe:07:c5:6b:39:1e:0d:0d:fa:64:2e:f9:
0e:ce:86:f8:dc:c2:6d:97:ec:2c:34:31:6b:93:54:
53:a8:1c:27:8e:88:e4:3c:d3:f6:6b:60:e1:9c:97:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:8D:59:ED:2E:BE:98:FD:59:61:C3:25:49:9E:A0:94:5E:C1:79
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fb:a9:05:8a:1a:3c:c5:4e:15:23:a7:f9:54:c3:4c:e3:15:
c4:ef:9d:45:70:7c:3b:77:67:4f:37:0d:fa:84:b2:8d:ec:b6:
22:ae:68:63:92:bc:63:2a:cb:73:9c:a3:e2:00:3a:da:59:36:
3d:9e:59:7f:fa:2f:39:f9:02:62:67:9b:e1:8a:b1:66:58:6f:
d9:0c:9b:bd:d1:7a:10:1a:cd:54:f3:29:81:a1:20:09:69:14:
66:72:cf:be:12:8f:b2:d1:70:60:fc:b2:5e:8b:df:c6:7f:04:
ae:dc:b5:45:22:6a:c9:93:45:ed:ea:51:02:54:4c:2e:2d:a8:
9b:f5:ec:80:63:b0:a9:30:ee:81:7d:d7:f2:6a:94:44:39:6c:
6c:b7:a0:0d:cc:b0:fc:d4:36:e6:5d:02:37:eb:c9:0c:fe:cf:
41:89:39:48:49:01:6c:a1:87:d2:e1:bd:29:8d:af:ce:71:b6:
a0:88:2a:c9:f6:b7:f4:8f:b8:cc:2c:1a:4c:19:29:12:8e:a5:
b8:5a:3d:99:4e:ca:a8:a4:37:52:d0:19:76:4f:08:cf:1d:e2:
6f:99:64:58:38:9c:e2:4c:dd:da:d3:2f:a7:83:e1:3b:63:b5:
b9:5e:25:e7:72:92:90:e6:f0:60:35:e3:44:3b:ab:13:40:f5:
80:5d:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:59 2026 by rpki-client