Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
File: i7nJXujwyzU8HemSB5KjTTAkRhc.mft (raw, json)
Hash identifier: aiKRwfq7RRHwZmCDPdbIvrfklRWYymjESxMV79CPzvs=
Subject key identifier: DF:E2:91:77:EA:19:4F:9A:C1:0D:AC:6A:F9:6C:58:F3:CD:B1:D7:05
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 01A0E853BCE35D10EA27B4E1F8A27FEBDB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
Manifest number: F4
Signing time: Mon 28 Sep 2026 14:03:16 +0000
Manifest this update: Mon 28 Sep 2026 14:03:16 +0000
Manifest next update: Tue 29 Sep 2026 14:03:16 +0000
Files and hashes: 1: i7nJXujwyzU8HemSB5KjTTAkRhc.crl (hash: IclyYJ7BdSx60s3POoIg/kKIrB06TtXKZJWNqcxWQ2o=)
2: muClETW590rnAhhdFCIA-PKzx8Q.asa (hash: 36o5H1jwMvZNZc8onjj4S28x1eYQDO0IkGOM8Fu+qqc=)
3: y-4-nqSYc3tqTRazNlGQZP2DnP8.roa (hash: GfYO8yyGaWypKYXSBMap3Z6gCCFnS4WexpcfM9iCxAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:bc:e3:5d:10:ea:27:b4:e1:f8:a2:7f:eb:db:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Sep 28 14:03:16 2026 GMT
Not After : Sep 29 14:03:16 2026 GMT
Subject: CN=dfe29177ea194f9ac10dac6af96c58f3cdb1d705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:20:04:a0:a3:92:5c:ec:42:c3:95:74:b8:
a1:e5:4d:01:d4:9b:97:1c:e2:96:22:00:80:76:9a:
ea:59:35:45:4c:c1:fa:67:5a:d7:db:d2:01:24:4d:
c4:2b:52:48:22:26:f2:7c:d0:b1:07:f6:dd:c3:43:
7e:d4:4c:22:14:a9:e1:70:10:a1:6a:bc:7a:f8:b6:
44:b1:f6:7c:04:93:e5:90:46:2e:75:70:3f:49:db:
c0:0a:ce:3c:ea:36:3d:04:1c:ab:b0:42:fb:11:93:
be:e3:a6:ca:18:12:4f:69:e1:e9:ac:4f:9f:cb:7f:
e9:0d:8d:e1:0e:ab:92:1b:a8:c6:46:c7:06:9c:32:
f4:b7:c2:13:b2:26:9f:74:8e:4c:44:26:5b:2b:e0:
1b:96:37:bd:2f:b4:9e:1f:f0:c1:1b:0f:d2:c6:81:
5e:a1:f6:fa:c0:c0:1b:c7:2e:9e:82:c5:3b:8e:cd:
80:f0:51:ec:72:12:28:35:fb:df:3d:00:2f:ab:a9:
0a:95:2f:ab:9c:87:77:62:6c:bd:94:68:63:d6:62:
58:60:8e:6d:be:b5:c4:de:2a:60:7d:22:ce:93:98:
f8:90:6d:32:e2:7e:69:31:60:b5:cd:aa:24:e8:cd:
b9:bd:a9:d1:d3:a4:e0:90:6f:85:35:37:8e:80:c7:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:91:77:EA:19:4F:9A:C1:0D:AC:6A:F9:6C:58:F3:CD:B1:D7:05
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:79:61:b4:1b:b8:ca:23:f8:34:c3:4a:77:ba:cb:28:ae:13:
ed:e8:7d:85:ac:71:6a:57:8b:ba:98:4b:63:53:14:57:fd:49:
78:19:71:d0:52:13:e7:06:bf:06:3a:0e:d4:c9:4a:7a:80:f5:
bb:04:67:26:10:9c:c5:32:c3:74:66:6e:ff:37:16:bc:6e:19:
db:76:ac:08:e1:33:d5:76:d3:92:23:5c:a8:9a:85:86:14:ad:
e9:c1:54:c6:1f:f2:f3:19:6b:26:06:01:84:b1:1d:32:47:b6:
31:f6:58:71:cb:ce:9a:02:96:57:3a:90:b5:26:e1:3f:bc:00:
88:3d:05:01:91:c0:9c:8f:51:ee:1d:53:8c:f3:aa:2d:f6:30:
9d:e0:1e:19:b4:38:fa:62:1a:73:7b:72:05:16:5d:9e:6b:3d:
ae:43:10:ff:a9:aa:7a:6f:20:56:63:34:43:96:e1:c7:5d:16:
30:e1:d6:cd:3c:36:3d:0d:a9:02:bc:4d:d5:79:ac:6e:0e:da:
bd:d1:5b:a0:f5:14:62:32:52:e7:4f:f8:ae:c0:bd:bd:40:d6:
f8:b8:a6:e3:3b:6c:75:f5:18:fc:23:aa:6b:94:96:5a:d4:54:
93:9d:1d:16:b6:c4:c0:6b:ed:a2:d8:fa:b1:dc:86:70:af:71:
c8:6f:df:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoU7zjXRDqJ7Th+KJ/69t9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjljOTVlZThmMGNiMzUzYzFkZTk5MjA3OTJhMzRkMzAy
NDQ2MTcwHhcNMjYwOTI4MTQwMzE2WhcNMjYwOTI5MTQwMzE2WjAzMTEwLwYDVQQD
EyhkZmUyOTE3N2VhMTk0ZjlhYzEwZGFjNmFmOTZjNThmM2NkYjFkNzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF4gBKCjklzsQsOVdLih5U0B1JuX
HOKWIgCAdprqWTVFTMH6Z1rX29IBJE3EK1JIIibyfNCxB/bdw0N+1EwiFKnhcBCh
arx6+LZEsfZ8BJPlkEYudXA/SdvACs486jY9BByrsEL7EZO+46bKGBJPaeHprE+f
y3/pDY3hDquSG6jGRscGnDL0t8ITsiafdI5MRCZbK+Ablje9L7SeH/DBGw/SxoFe
ofb6wMAbxy6egsU7js2A8FHschIoNfvfPQAvq6kKlS+rnId3Ymy9lGhj1mJYYI5t
vrXE3ipgfSLOk5j4kG0y4n5pMWC1zaok6M25vanR06TgkG+FNTeOgMcrawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/ikXfqGU+awQ2savlsWPPNsdcFMB8GA1UdIwQY
MBaAFIu5yV7o8Ms1PB3pkgeSo00wJEYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAt
YTk2MTAyYzgzNjQxLzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAtYTk2MTAyYzgzNjQx
LzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHlhtBu4
yiP4NMNKd7rLKK4T7eh9haxxaleLuphLY1MUV/1JeBlx0FIT5wa/BjoO1MlKeoD1
uwRnJhCcxTLDdGZu/zcWvG4Z23asCOEz1XbTkiNcqJqFhhSt6cFUxh/y8xlrJgYB
hLEdMke2MfZYccvOmgKWVzqQtSbhP7wAiD0FAZHAnI9R7h1TjPOqLfYwneAeGbQ4
+mIac3tyBRZdnms9rkMQ/6mqem8gVmM0Q5bhx10WMOHWzTw2PQ2pArxN1Xmsbg7a
vdFboPUUYjJS50/4rsC9vUDW+Lim4ztsdfUY/COqa5SWWtRUk50dFrbEwGvtotj6
sdyGcK9xyG/fXg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:28:25 2026 by rpki-client