Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: I/zfqblYK8HDstzQOjNk7hSSqYEQkHCCYf8RaC6l070=
Subject key identifier: 71:A5:4B:B2:83:85:48:CB:91:D9:30:BE:0E:F1:66:4F:D8:73:1F:B4
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019EB8B48A039FCA842EA8AF9A2E239A75C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 18E8
Signing time: Thu 11 Jun 2026 22:01:39 +0000
Manifest this update: Thu 11 Jun 2026 22:01:39 +0000
Manifest next update: Fri 12 Jun 2026 22:01:39 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: dxU/Mf3Wui7Xw61xve35idZNZVwMgzYKP9QhI1VZnvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:8a:03:9f:ca:84:2e:a8:af:9a:2e:23:9a:75:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jun 11 22:01:39 2026 GMT
Not After : Jun 12 22:01:39 2026 GMT
Subject: CN=71a54bb2838548cb91d930be0ef1664fd8731fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:b2:ea:e3:cd:51:d6:7e:aa:cd:51:9f:4b:
e1:ef:63:9d:81:3b:73:6f:5d:df:58:5e:5f:7d:9f:
1c:c6:df:47:67:49:38:24:51:ed:ec:f7:d3:19:a9:
63:5a:a4:b1:17:a8:1a:a0:df:d4:4d:e7:dd:f1:4e:
d3:5d:5d:3d:11:f9:5e:1f:f3:52:b7:a1:46:9a:43:
a4:e0:d2:cf:78:d5:2c:8f:27:8b:5f:79:85:eb:7d:
f9:42:61:78:b9:bb:81:2b:be:07:4d:66:32:90:16:
45:4e:75:7e:58:0c:9b:d8:4d:d6:d2:34:95:6b:5d:
4a:99:d9:01:6e:26:27:6d:5b:7d:ca:52:1d:ee:b2:
e3:f6:3e:32:43:14:05:97:4d:9d:b4:1c:28:76:20:
5b:00:e7:36:49:2d:7d:10:5b:9a:96:02:b7:20:b4:
33:df:58:9c:fe:28:b8:67:6e:1d:ea:cf:fb:01:20:
1c:bd:13:6a:07:23:c1:8e:ac:5b:28:16:b4:49:d6:
04:86:34:0f:1f:56:de:d0:11:28:f0:7b:f0:f2:42:
d2:bc:b3:f2:59:0e:ee:80:64:35:44:c0:31:62:0e:
74:33:5b:00:1a:95:46:6b:17:1c:68:06:6e:25:98:
58:35:ae:d6:bc:67:b9:82:cd:8b:60:af:a3:4d:5b:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:4B:B2:83:85:48:CB:91:D9:30:BE:0E:F1:66:4F:D8:73:1F:B4
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:64:f4:e0:57:ac:ad:3d:60:b0:1c:14:b7:6e:62:60:6c:57:
06:b7:85:8d:10:d3:1c:66:e8:3a:60:21:b5:63:23:ef:9f:51:
95:d3:7e:74:df:f0:65:9e:77:9f:8e:5f:08:b0:6e:dd:0f:35:
df:ce:0d:17:e3:7d:de:ea:b1:e7:ca:e8:6c:87:61:13:0a:09:
4c:95:06:6d:c9:62:d7:0f:8b:bc:19:35:66:f8:b3:fd:89:a7:
be:67:cf:20:1d:d7:71:e3:99:e2:0e:df:90:dc:57:2f:11:54:
7b:42:b0:8b:a8:06:e6:68:79:d3:c6:7b:d3:2c:b6:c4:ec:45:
e4:92:c9:37:45:23:53:57:2b:cd:48:fe:15:97:e3:ba:6b:ce:
fd:e7:0d:00:7b:dd:49:f3:c1:a1:4f:30:e3:a6:9d:13:07:9a:
91:c5:01:3a:09:11:b6:73:c2:bf:ea:67:3e:c3:79:45:53:9d:
26:9d:94:ff:0b:26:a3:be:11:7a:da:21:b9:90:4d:ac:f1:39:
66:d1:f8:9b:1a:7a:b5:e2:01:75:c3:d2:ef:6d:5c:89:71:bd:
42:c9:5d:06:d4:b0:4a:55:7d:5b:c9:80:4d:19:c0:2f:37:51:
e8:0f:5a:88:15:bf:7f:4a:02:a0:02:0d:81:e3:54:24:a3:d9:
96:34:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:05 2026 by rpki-client