Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
File: I8-ih96iNF6mFxqkd9aO4tu0leE.mft (raw, json)
Hash identifier: YwhYwv3ViPEHg972qNibM3SovVbMiRbSJL7Xv8hB6lM=
Subject key identifier: 04:BD:C1:39:65:96:82:8F:34:FF:7B:DF:D5:D4:1C:32:5C:9A:7B:B5
Authority key identifier: 23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
Certificate issuer: /CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Certificate serial: 019F946D5F3A2B2E761A2DF007EEB0BB16B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
Manifest number: 18
Signing time: Fri 24 Jul 2026 14:00:23 +0000
Manifest this update: Fri 24 Jul 2026 14:00:23 +0000
Manifest next update: Sat 25 Jul 2026 14:00:23 +0000
Files and hashes: 1: I8-ih96iNF6mFxqkd9aO4tu0leE.crl (hash: 04mTUomrc3Yv8Szx36akyZIXQKiaNU4ntn1QBI/q/rc=)
2: nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa (hash: 2xC+OBt7tpzzZYodQEHxjgbtCV8j6Hf0yChdWEZU97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:5f:3a:2b:2e:76:1a:2d:f0:07:ee:b0:bb:16:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Validity
Not Before: Jul 24 14:00:23 2026 GMT
Not After : Jul 25 14:00:23 2026 GMT
Subject: CN=04bdc1396596828f34ff7bdfd5d41c325c9a7bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:a2:e0:9c:b3:0c:8a:1c:cb:cd:24:20:55:
4b:4e:34:95:c5:af:da:0c:5a:a8:0b:a6:6f:20:f9:
68:cd:82:6b:ec:b5:f3:7c:7c:aa:34:bd:c4:de:2c:
48:5a:45:89:60:da:31:90:83:9b:56:9e:49:5e:47:
8d:c7:78:97:42:0d:cd:5f:ce:29:27:58:26:de:d1:
ac:d9:c3:0f:12:16:5d:78:5f:d6:f1:b6:61:52:93:
72:01:ac:4b:1c:27:9a:2f:39:f0:ad:4d:56:77:67:
4b:77:65:ff:82:9f:01:e6:57:28:1f:c1:3b:e0:3e:
55:06:10:fa:19:da:49:cf:74:e3:8a:c8:7a:5c:bc:
6e:80:d4:82:57:28:09:73:5e:de:94:6c:ab:8c:68:
9a:f9:41:e6:ca:f6:dd:a5:d4:04:ae:8f:08:ce:a1:
19:5f:79:48:5e:75:69:aa:cf:81:1e:c8:af:e0:d8:
9d:16:71:fe:e9:c9:d0:fb:0f:da:b0:33:26:a8:a8:
cf:93:36:9c:83:e3:f2:10:2e:a2:9e:4c:a4:4e:13:
f1:9b:f8:2e:0c:5f:a0:a9:bd:d0:d9:08:22:b1:e8:
24:11:6a:61:86:95:b3:bf:f0:f8:8b:83:e2:16:a6:
59:f1:e1:cb:d8:ca:d9:7b:5a:76:71:bc:64:1c:63:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:C1:39:65:96:82:8F:34:FF:7B:DF:D5:D4:1C:32:5C:9A:7B:B5
X509v3 Authority Key Identifier:
keyid:23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:55:a9:c2:63:36:e0:64:a4:12:f6:21:a5:89:ac:c5:52:57:
0a:90:fc:f9:77:11:b2:b6:a6:f6:df:85:1d:af:78:ca:49:c3:
72:ae:2f:3f:07:22:6c:99:90:b6:75:1d:f9:41:26:ab:e8:36:
a8:94:83:d7:d1:57:c4:5f:fa:7c:98:96:d1:b3:3f:bb:bc:1a:
78:c9:41:10:93:e8:e1:10:65:63:4d:25:4b:02:80:77:86:a6:
9d:bd:35:e5:29:0f:14:b9:00:9f:c7:89:cb:89:4d:3b:f4:77:
0f:36:d3:ee:11:bf:19:6e:b8:7e:7e:6c:5d:a0:a7:50:47:e9:
7d:13:2a:29:db:37:e9:00:94:22:5e:bc:01:31:6c:c0:a1:da:
3b:71:30:ed:bf:ea:d2:e4:f4:7b:24:97:a1:a1:d3:98:4b:b4:
ff:45:8f:26:dc:76:f7:de:53:ac:0d:48:19:57:5b:f3:4e:d1:
df:98:af:d8:ab:d2:cd:96:5e:22:3c:b4:27:b1:a7:bf:b5:18:
2a:13:28:82:7d:17:e2:ce:5b:9a:1f:93:5e:a2:de:c8:2d:e4:
35:a4:31:0d:b6:15:0c:a9:f2:ec:6f:0d:b2:c1:a5:b7:c1:54:
77:47:ba:6c:41:89:ce:03:4a:0b:38:2c:00:96:c3:6c:9f:4c:
fc:f6:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:52 2026 by rpki-client