Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: cur9UeefeaxE6uzQfjo6Z6V7hEPaM09gRvxjsPgoN/g=
Subject key identifier: 74:EA:A7:CA:16:1F:E6:FD:C5:77:A7:16:91:F3:B3:9D:6C:2C:8C:4E
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 01A1133C0F8384113CEC36BC1D875DC3DC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1A20
Signing time: Tue 06 Oct 2026 22:01:05 +0000
Manifest this update: Tue 06 Oct 2026 22:01:05 +0000
Manifest next update: Wed 07 Oct 2026 22:01:05 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: VZNW2RxIxcAvQc7U34fF3oniOf5ee0BNQOrnP/9upsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:0f:83:84:11:3c:ec:36:bc:1d:87:5d:c3:dc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Oct 6 22:01:05 2026 GMT
Not After : Oct 7 22:01:05 2026 GMT
Subject: CN=74eaa7ca161fe6fdc577a71691f3b39d6c2c8c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:77:cb:52:8c:a8:b0:e3:40:66:46:f0:25:
f1:cf:23:fa:c2:4a:7a:a0:f2:a7:02:c9:a7:73:9e:
eb:82:95:18:c1:4b:46:1a:e5:37:c3:3d:8f:b0:4d:
71:d5:c1:66:17:c6:df:bd:73:45:49:16:3a:17:30:
c9:4b:9c:ec:98:67:18:7f:f5:30:28:22:60:96:a2:
71:dd:75:fb:48:90:71:60:f5:71:94:36:bb:04:0e:
45:cc:8b:51:16:bf:db:cd:a8:5c:a8:75:9c:9a:76:
25:5d:24:e2:8a:50:43:53:40:52:1a:5c:87:46:af:
d0:88:32:21:45:bc:b2:55:b8:92:f6:3c:b5:df:82:
91:46:1d:98:39:6c:18:16:e2:1a:41:d7:47:3d:16:
90:df:8e:48:3c:4c:c9:f5:35:a9:51:f0:3e:e4:23:
bd:b1:c8:a5:56:0e:b9:f6:f2:ef:11:02:f4:46:f8:
dc:1d:31:8b:32:48:c2:ed:56:20:0c:1b:6d:55:6b:
38:f1:a2:21:4c:62:98:a6:28:de:1a:a4:df:f9:98:
f8:19:ed:c8:7d:cc:97:fb:0e:17:7a:9c:e7:23:ec:
15:fe:58:99:19:ae:aa:c5:d1:ac:41:43:f8:e8:00:
26:af:fe:f8:ca:ff:08:69:d1:4b:da:b7:3d:f6:9f:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:A7:CA:16:1F:E6:FD:C5:77:A7:16:91:F3:B3:9D:6C:2C:8C:4E
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bb:fc:c5:90:32:58:47:74:e2:79:e2:37:b1:df:61:cd:5f:
59:65:65:c2:f5:07:31:bc:80:ab:25:9a:ea:f0:f3:0c:70:40:
ae:d3:16:d5:83:32:71:40:ad:d3:34:5f:a2:1b:b3:45:37:10:
6e:46:99:6c:cd:7e:37:a4:58:a8:b8:b4:bc:44:16:cb:dd:17:
c9:31:6a:74:3b:5d:c2:2f:a9:f6:d4:01:38:a4:55:b6:ec:c2:
81:fb:98:c1:3b:01:5c:f4:78:69:3a:ff:78:8a:e6:b0:16:74:
70:8e:42:a7:24:d3:10:d4:a7:7a:c2:cf:2b:f8:f4:68:2d:b2:
5e:20:9f:c7:42:1c:9d:19:28:66:5c:bd:cf:a8:70:92:0f:81:
8d:57:b1:76:74:c9:db:e8:8d:e3:ed:71:6f:7f:23:0f:71:56:
99:99:12:3f:8c:96:0e:85:23:cf:79:b5:fb:16:f5:b7:16:e7:
af:0d:5e:ac:6a:77:97:e5:a7:1c:c9:53:d9:d8:87:a6:c9:ed:
8a:df:9e:eb:e2:c7:86:79:bd:b6:32:c7:db:42:14:f1:c6:c4:
d3:7e:01:3d:6b:7f:46:56:26:b4:1b:3b:16:b4:1b:ad:9b:76:
32:10:6d:c7:8e:07:bc:f2:3b:fc:b5:9a:da:a8:cf:8c:b6:6e:
5f:8e:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:10:21 2026 by rpki-client