Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: 8udicOBalm1EQ53680zZmD2aRuXsPPwgkmMuU0JPGvQ=
Subject key identifier: E4:84:33:60:5B:DF:BF:73:E2:49:46:E9:69:E1:41:AE:B8:13:6F:A3
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 01A0D8A8F3FF839523BDFFCC860CB46ABB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 147F
Signing time: Fri 25 Sep 2026 13:02:26 +0000
Manifest this update: Fri 25 Sep 2026 13:02:26 +0000
Manifest next update: Sat 26 Sep 2026 13:02:26 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: krpB8nZgC/LbHgdN2UDseeLyLxZ2fmk0wMcLVKBuVUw=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:f3:ff:83:95:23:bd:ff:cc:86:0c:b4:6a:bb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Sep 25 13:02:26 2026 GMT
Not After : Sep 26 13:02:26 2026 GMT
Subject: CN=e48433605bdfbf73e24946e969e141aeb8136fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:7b:ae:9f:48:ae:65:71:27:8f:99:a9:5d:
33:c6:f7:80:bc:2d:3a:67:4f:4a:11:57:1a:6d:83:
1a:11:6c:37:a3:da:6d:b7:9d:52:89:5b:0d:ea:55:
09:bd:8c:8a:12:b3:47:99:6c:bb:76:9e:f0:c7:13:
d4:5c:ab:35:88:ad:69:a2:b1:ef:e6:29:5c:fa:af:
10:91:c1:19:b8:7e:cf:df:4a:e3:41:ce:58:10:a0:
e1:cc:28:16:d9:d5:8b:f9:af:92:3a:c2:73:92:81:
26:63:a8:eb:5b:e0:a4:19:ee:e9:08:44:be:1d:e9:
9e:88:ae:13:9f:2f:93:74:e5:84:f4:f1:1e:54:d5:
1f:87:7b:2f:58:a4:76:33:bb:bc:6a:53:50:ed:ef:
d9:1b:2b:af:32:3a:7a:47:72:74:76:7f:7a:93:83:
21:ba:ca:bb:25:31:d8:08:2b:c0:61:0b:5e:4f:fb:
e2:f0:46:83:75:1a:2a:13:33:47:c3:73:14:36:66:
ce:69:a7:0f:cf:6d:44:f4:3f:3f:5b:8b:3b:07:ac:
1b:27:9e:c0:13:61:ca:b8:46:09:dd:4d:d5:d6:b1:
7e:76:93:26:9f:bb:95:bd:4c:80:d1:9a:59:a8:b0:
0d:d7:b4:a8:82:0f:de:17:a4:06:90:1f:36:11:f2:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:33:60:5B:DF:BF:73:E2:49:46:E9:69:E1:41:AE:B8:13:6F:A3
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:fa:7f:70:19:c2:84:46:dd:10:b8:e3:dc:bb:6b:09:a8:
b5:1d:c9:c4:4e:2d:76:be:ce:31:dc:f3:25:81:16:63:79:46:
c5:7d:62:c9:00:6e:5c:db:40:c8:71:d3:3a:2c:71:38:64:25:
be:a4:12:c4:c0:0e:bd:e7:94:c8:13:a5:46:d7:c4:15:a6:b7:
0b:2e:dd:8f:fc:b4:f8:e8:50:a9:41:f1:06:c2:98:03:0e:08:
f5:6f:38:1c:a6:1e:52:0d:9e:fa:65:96:ae:14:14:4d:de:85:
f3:2d:ef:45:b1:4d:f7:da:d6:41:a4:e7:ba:be:12:d9:3e:d8:
96:92:a6:71:5b:87:41:fb:af:18:76:55:ff:2e:9e:b4:22:f0:
1c:bc:5b:e8:7b:a7:46:5b:75:fb:52:9a:a1:85:fc:b9:16:3f:
5f:06:b6:3a:52:e7:f8:0d:a1:f9:52:b3:a3:a0:92:23:dd:70:
51:db:54:ab:59:4c:10:c6:d3:17:00:8c:70:e1:5c:74:df:7b:
9e:a1:c6:d2:50:52:76:a1:d6:e8:af:c7:ce:74:b5:5c:56:8b:
99:a8:bf:0e:e3:bf:06:cc:84:e1:9d:4f:43:bc:bd:c6:7f:b9:
83:bc:9d:07:55:87:7e:9a:7d:6c:a0:50:5e:a1:c2:67:12:57:
f5:85:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:17 2026 by rpki-client