Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
File: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft (raw, json)
Hash identifier: M2x5dAZPB2Gr+1ag/DSWAcy361oZUcX/MwaFLXN2kx0=
Subject key identifier: 64:80:C3:CB:FC:DF:E2:67:F5:09:36:98:98:1B:7E:27:90:4D:F7:BB
Authority key identifier: 8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
Certificate issuer: /CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Certificate serial: 01A0D237B0F547DA50856BDB795B3ACE6464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
Manifest number: 9C
Signing time: Thu 24 Sep 2026 07:01:00 +0000
Manifest this update: Thu 24 Sep 2026 07:01:00 +0000
Manifest next update: Fri 25 Sep 2026 07:01:00 +0000
Files and hashes: 1: IOGuoiGHLJAwbi5pEcAAvhgCSXA.roa (hash: QEfBl0X5W4QlD56u3JPPsSJ9EOc7Fk9l1CYCpj33Vcg=)
2: ZNjBbJJhYFUjEtTGh7JC0wy2zdE.asa (hash: Dy1YZG8ZdOicfaxVr2xJvKZTph/YTekn7sgLkepqLbY=)
3: i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl (hash: 10JzhAPBNx48OSvr9hf8ErQ5elTCLR4W3B2U6bTduFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:b0:f5:47:da:50:85:6b:db:79:5b:3a:ce:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba17c051a0285b77c8d927fcfd24b7f88b53ece
Validity
Not Before: Sep 24 07:01:00 2026 GMT
Not After : Sep 25 07:01:00 2026 GMT
Subject: CN=6480c3cbfcdfe267f5093698981b7e27904df7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:5f:1a:47:e5:7d:2f:1d:86:0a:b8:e3:94:
dd:59:d9:2d:43:bb:41:11:30:75:71:e6:dc:9a:13:
24:5c:07:03:b5:1d:90:48:7b:16:3e:6b:bf:81:a8:
4b:21:a3:3a:b2:f4:fa:06:39:4f:e5:86:ea:01:c1:
46:b6:43:53:da:64:86:4a:fb:3c:dc:c2:df:2d:dc:
56:47:8c:08:6b:59:b4:a2:ac:3c:41:0c:0b:5f:f2:
d2:5e:56:74:80:62:21:ea:f9:e5:89:1b:fc:9d:41:
e8:b9:c6:91:17:cd:8c:d2:7e:16:cd:8e:09:ea:94:
ab:c4:5e:25:4d:57:41:47:f5:bd:65:fc:d9:bd:ec:
62:99:f3:de:69:14:3c:9c:18:42:ec:56:5c:8c:af:
eb:f9:54:d4:e1:21:ba:d9:02:47:9f:4c:a9:bd:7a:
8e:b0:f4:e2:6b:a8:af:f1:1c:93:df:ed:fb:f2:63:
2a:78:15:20:7b:5a:c4:fb:ca:2f:d5:59:d9:5a:f2:
c8:01:21:3f:8f:7d:2b:29:87:57:3e:7f:33:9c:0f:
72:8b:3b:9a:02:72:e5:c1:7d:c9:7f:3a:43:da:79:
e2:fd:b5:2a:9c:92:f7:ef:fe:10:41:b1:e8:66:10:
fa:81:dd:34:0d:fe:a0:15:dd:0e:cb:30:c7:59:5e:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:C3:CB:FC:DF:E2:67:F5:09:36:98:98:1B:7E:27:90:4D:F7:BB
X509v3 Authority Key Identifier:
keyid:8B:A1:7C:05:1A:02:85:B7:7C:8D:92:7F:CF:D2:4B:7F:88:B5:3E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/777c74-54e8-46a1-8492-5869bbf911e8/1/i6F8BRoChbd8jZJ_z9JLf4i1Ps4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cd:9c:97:ff:0d:9f:22:26:a0:f8:b4:e8:20:0d:92:ff:de:
08:94:df:b3:2c:52:44:37:6c:cf:30:65:1e:01:a2:eb:59:55:
98:69:f1:9b:40:8a:06:a7:a2:d8:a2:58:48:78:2e:2b:d6:cb:
c0:6a:aa:c3:67:0a:47:83:09:d1:c9:fb:39:dc:e4:5c:5f:25:
c8:14:ca:c8:c0:86:4d:aa:4f:e4:57:2c:73:24:eb:67:9c:10:
03:86:dc:0e:32:7f:62:3a:cb:8a:9f:60:f6:47:e8:d3:e1:e2:
65:ee:55:b0:b2:67:73:95:10:32:a3:35:47:f0:73:30:23:d9:
db:a4:5d:fe:91:f2:8b:30:fd:5b:3a:5a:42:bf:11:07:18:25:
ea:45:90:b2:29:14:d0:eb:54:3b:d1:67:20:02:70:9d:c0:36:
69:16:67:05:b4:e7:7a:18:2f:74:d6:24:80:db:0a:22:1e:84:
b6:96:32:c5:96:bd:11:1a:77:59:10:ec:90:d2:53:97:31:0a:
41:f7:67:69:77:81:59:7f:fa:3b:f5:fd:a3:0e:12:f1:2f:a0:
e2:0b:2b:45:0f:c5:94:6d:9f:99:c2:b6:e5:f7:bf:3e:4f:da:
61:3d:9e:f8:ac:c1:01:2c:c9:25:c5:44:38:c0:a1:61:57:d5:
48:b1:64:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSN7D1R9pQhWvbeVs6zmRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYTE3YzA1MWEwMjg1Yjc3YzhkOTI3ZmNmZDI0YjdmODhi
NTNlY2UwHhcNMjYwOTI0MDcwMTAwWhcNMjYwOTI1MDcwMTAwWjAzMTEwLwYDVQQD
Eyg2NDgwYzNjYmZjZGZlMjY3ZjUwOTM2OTg5ODFiN2UyNzkwNGRmN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV5fGkflfS8dhgq445TdWdktQ7tB
ETB1cebcmhMkXAcDtR2QSHsWPmu/gahLIaM6svT6BjlP5YbqAcFGtkNT2mSGSvs8
3MLfLdxWR4wIa1m0oqw8QQwLX/LSXlZ0gGIh6vnliRv8nUHoucaRF82M0n4WzY4J
6pSrxF4lTVdBR/W9ZfzZveximfPeaRQ8nBhC7FZcjK/r+VTU4SG62QJHn0ypvXqO
sPTia6iv8RyT3+378mMqeBUge1rE+8ov1VnZWvLIASE/j30rKYdXPn8znA9yizua
AnLlwX3JfzpD2nni/bUqnJL37/4QQbHoZhD6gd00Df6gFd0OyzDHWV6m/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSAw8v83+Jn9Qk2mJgbfieQTfe7MB8GA1UdIwQY
MBaAFIuhfAUaAoW3fI2Sf8/SS3+ItT7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZGOEJSb0NoYmQ4alpKX3o5SkxmNGkxUHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NzdjNzQtNTRlOC00NmExLTg0OTIt
NTg2OWJiZjkxMWU4LzEvaTZGOEJSb0NoYmQ4alpKX3o5SkxmNGkxUHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83NzdjNzQtNTRlOC00NmExLTg0OTItNTg2OWJiZjkxMWU4
LzEvaTZGOEJSb0NoYmQ4alpKX3o5SkxmNGkxUHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ82cl/8N
nyImoPi06CANkv/eCJTfsyxSRDdszzBlHgGi61lVmGnxm0CKBqei2KJYSHguK9bL
wGqqw2cKR4MJ0cn7OdzkXF8lyBTKyMCGTapP5FcscyTrZ5wQA4bcDjJ/YjrLip9g
9kfo0+HiZe5VsLJnc5UQMqM1R/BzMCPZ26Rd/pHyizD9WzpaQr8RBxgl6kWQsikU
0OtUO9FnIAJwncA2aRZnBbTnehgvdNYkgNsKIh6EtpYyxZa9ERp3WRDskNJTlzEK
QfdnaXeBWX/6O/X9ow4S8S+g4gsrRQ/FlG2fmcK25fe/Pk/aYT2e+KzBASzJJcVE
OMChYVfVSLFktg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:45:33 2026 by rpki-client