Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier: r1eYesuP5F0VWQSom6CS1baGX5VrZHo+wkJp1gQ4Kbc=
Subject key identifier: D7:ED:26:0F:40:D1:10:FD:24:6B:72:41:98:4D:6F:B9:9B:08:BC:09
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 01A11ABE13ED5B6D76B956D7CBA8F72D8A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number: 1A25
Signing time: Thu 08 Oct 2026 09:00:26 +0000
Manifest this update: Thu 08 Oct 2026 09:00:26 +0000
Manifest next update: Fri 09 Oct 2026 09:00:26 +0000
Files and hashes: 1: AcZ8FStQphDwf4rYqOH4PuPnRcU.roa (hash: D5qSvfuIZWoy+nszBYnw8cGDkpXy8F40zHUSNBaMNOE=)
2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: h8ToTp3J0pwnQxqr5/TabI1UKqcmFllgWk1PvxjCSLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:13:ed:5b:6d:76:b9:56:d7:cb:a8:f7:2d:8a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: Oct 8 09:00:26 2026 GMT
Not After : Oct 9 09:00:26 2026 GMT
Subject: CN=d7ed260f40d110fd246b7241984d6fb99b08bc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:a6:19:fb:33:0a:aa:f8:2b:74:b9:57:1e:
52:6c:01:40:8a:36:ee:e9:01:ec:01:8b:5c:a5:3a:
df:9e:1e:22:e0:14:c0:db:48:91:56:c5:ec:fb:55:
c2:5e:d0:65:2e:12:f8:bf:a3:8b:56:af:9b:15:34:
aa:ec:32:05:ed:77:e5:0e:42:51:4f:d0:b3:b6:b6:
65:a5:62:b4:54:44:b6:bf:d1:fd:65:0b:e6:85:53:
0f:af:f8:89:34:d7:d6:1f:9b:c5:f4:d6:87:57:05:
a4:93:60:96:29:1e:ff:86:c8:bf:fb:4c:58:a1:ad:
1c:c6:11:52:03:26:19:a7:eb:72:77:ea:91:b6:4d:
43:33:b3:93:22:fb:c4:e8:5e:1a:55:54:26:dc:28:
2a:25:37:f6:96:dc:7d:d8:37:63:8f:33:65:b7:6c:
0b:f5:1f:e2:60:2b:60:6b:62:1f:a9:14:b8:15:f4:
7c:db:1b:66:7d:90:74:3d:d3:9d:a6:73:17:3d:9b:
f4:e9:15:7d:31:d7:ac:c2:71:d5:c4:d6:87:47:7b:
c3:06:55:64:63:96:9f:c0:68:b0:12:fb:57:f9:10:
d2:d6:cd:aa:96:4a:00:0e:e9:45:77:d4:20:73:2d:
82:1b:92:13:03:ec:b2:3a:66:ce:c0:8f:b4:98:62:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:ED:26:0F:40:D1:10:FD:24:6B:72:41:98:4D:6F:B9:9B:08:BC:09
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0a:e2:20:59:50:a7:66:f2:69:e1:16:ec:12:46:3f:4c:2f:
b3:4b:86:06:66:96:1e:3d:13:dd:d9:3f:e4:57:be:e1:97:d5:
6a:a0:24:55:c0:7b:28:51:06:b5:86:94:ca:d5:07:82:57:7e:
ae:a0:51:20:15:90:fd:f3:63:95:3c:a9:43:7d:9d:a0:02:13:
c4:32:6f:b0:b5:6c:ec:93:fd:e3:1f:2d:d9:0c:c3:79:52:53:
50:d2:68:ba:c0:9a:f2:af:e5:07:25:62:e8:46:e6:7c:ed:70:
ed:12:ff:68:6c:3a:f4:00:26:07:67:e0:39:09:54:26:81:81:
84:26:e7:ea:ad:0d:39:9f:c0:67:96:78:46:a2:15:8f:ad:1c:
22:22:80:22:0e:cf:56:bc:19:ac:a2:10:bf:c0:f5:69:82:c1:
01:05:21:f6:08:f3:db:43:bd:f8:46:7e:02:b1:08:67:3a:38:
93:1c:9b:93:6f:b5:da:64:95:ca:01:da:33:4f:2b:2b:52:3e:
8c:fa:c0:c0:cc:ae:c1:8e:1c:fa:f8:da:03:2d:1e:3f:e3:85:
f5:a8:c7:57:0b:27:26:b7:b5:25:a4:8b:a1:17:c8:16:f6:2a:
fe:33:51:52:85:f5:f0:88:75:55:65:93:3f:87:c0:b0:cc:0b:
5f:1c:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:04:10 2026 by rpki-client