Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: kcQgeCQUIhgOF/DX4ctFJ6E7V/DkZAImtSx3ry30ZSY=
Subject key identifier: B0:DA:D2:61:B8:30:57:08:E1:AC:18:39:B8:83:5C:EE:4D:4F:9B:33
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 01A0EC2F0E78ADEB758DD588DBEBCADDA110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 164D
Signing time: Tue 29 Sep 2026 08:01:41 +0000
Manifest this update: Tue 29 Sep 2026 08:01:41 +0000
Manifest next update: Wed 30 Sep 2026 08:01:41 +0000
Files and hashes: 1: ElwaUMINBaBKF34TpTL8haqVd_s.roa (hash: QJTxI54JV9QgQdwNg1CINH9sDRPfJfNrzCHiU/q0Bi0=)
2: PfqFO43KqwDuwV1NwMVNOIpCa7k.roa (hash: KIFfrdCVgjpBo7n8/Wm61/4Xa4EQ0RYR7+7S2nxBq8A=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: NbXbrrDDUZ1gKx53UzPlT7cLuwcAzyvjHQANXtTo+UI=)
4: vQlwbAF_mJrGee6i3Zw-aUSbGik.roa (hash: YnOQdMh9a+SzOqx2wFlffeGs61dC4j8qzTkon28Y7Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:0e:78:ad:eb:75:8d:d5:88:db:eb:ca:dd:a1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Sep 29 08:01:41 2026 GMT
Not After : Sep 30 08:01:41 2026 GMT
Subject: CN=b0dad261b8305708e1ac1839b8835cee4d4f9b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:b3:22:2f:78:26:54:25:77:c3:b2:e1:4b:
5e:76:09:f0:d0:72:6f:a8:40:55:84:90:05:75:12:
89:5f:02:0d:b2:1c:6d:e9:a2:ad:fb:98:d7:fe:52:
27:9d:df:83:5c:3c:35:98:34:f0:53:c4:7c:ee:39:
4c:fc:2a:e0:8e:36:20:e5:c5:e5:b5:8c:25:96:9a:
52:27:29:c4:b4:06:82:e2:24:0e:e8:cd:e3:81:52:
31:dd:1e:91:ab:ca:a0:1e:91:4c:c0:00:0d:07:fa:
f9:fb:c3:5c:0a:bc:56:d7:fa:b2:3f:ed:5a:f2:03:
7e:75:06:08:e2:62:b0:4f:fd:e8:c1:b8:79:58:4d:
e8:ad:52:cb:fe:a3:7f:39:da:f9:06:6e:0b:84:2c:
4e:98:b9:7c:90:1e:60:ae:c2:e2:42:a8:69:f1:13:
9c:3d:d5:3e:a0:30:cd:bc:82:2b:bc:42:69:02:64:
af:d4:30:c5:20:c4:da:7f:81:2d:de:60:33:fc:75:
7a:ef:08:53:24:3e:a2:1c:48:83:08:13:98:40:0a:
32:87:fd:98:12:b5:05:fb:87:89:2c:54:9f:4f:8e:
07:67:b6:c4:c8:1a:09:34:0d:b7:ac:59:09:df:80:
48:a2:cc:57:4b:ec:33:27:fa:60:1b:c4:68:1a:d1:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:D2:61:B8:30:57:08:E1:AC:18:39:B8:83:5C:EE:4D:4F:9B:33
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6f:4a:58:5d:1e:d8:4e:67:c1:2e:bb:cc:c2:aa:c6:bd:1a:
9a:9a:ea:e5:c4:56:a2:6f:13:ce:98:bb:43:5b:78:f9:f6:8e:
1f:c2:e9:6a:d5:d6:5b:88:65:52:5f:a8:81:67:eb:d4:10:f2:
c5:e0:8c:48:e0:d2:1b:03:46:2a:ab:94:e4:1a:e7:03:87:ac:
77:30:36:1f:96:13:1c:bd:5d:e2:b9:11:56:54:73:c9:6c:94:
7d:81:d2:ca:8f:6b:6a:95:7b:21:21:5b:8d:92:aa:8f:37:c1:
38:8b:87:5c:75:94:b8:82:df:5b:50:57:00:5f:9f:3b:1a:35:
be:e6:4c:0b:5f:ed:f1:f6:48:ef:79:17:87:15:01:87:5c:91:
f7:17:31:bb:38:16:2f:13:b1:24:c2:dc:61:41:3a:95:74:4c:
16:13:56:f9:f8:0d:0c:14:34:12:d3:71:ab:91:2f:4f:e2:65:
87:e0:8a:73:9c:15:5e:8f:27:1d:ed:c0:fc:11:ca:5f:03:75:
5b:a5:da:11:e6:60:50:bf:60:d3:06:31:fe:8d:75:af:38:8a:
12:3f:46:88:ca:b1:cf:84:a2:9f:e5:68:bc:af:31:01:a5:75:
bf:01:86:0f:94:58:c2:5d:ca:53:51:2c:16:16:3d:c9:0b:fc:
10:8c:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:12:53 2026 by rpki-client