Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
File: I8-ih96iNF6mFxqkd9aO4tu0leE.mft (raw, json)
Hash identifier: /VIwD+f6NkwMC1MesS58jan9VaWEg4bfT23tpVmV47A=
Subject key identifier: FC:AF:B0:79:C5:25:D9:78:F1:0A:BC:3F:66:1A:AE:65:20:A2:D2:7B
Authority key identifier: 23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
Certificate issuer: /CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Certificate serial: 01A10B147F204B3F4AB0083474FD1A4D6EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
Manifest number: DA
Signing time: Mon 05 Oct 2026 08:00:54 +0000
Manifest this update: Mon 05 Oct 2026 08:00:54 +0000
Manifest next update: Tue 06 Oct 2026 08:00:54 +0000
Files and hashes: 1: I8-ih96iNF6mFxqkd9aO4tu0leE.crl (hash: 0jynCrRRtKWSfCiR4HNEK/fAOoCV7+KXMP2M8wS39ds=)
2: nd2OSB1wT7KpVUmEXTbGhDq9Xsg.roa (hash: 2xC+OBt7tpzzZYodQEHxjgbtCV8j6Hf0yChdWEZU97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:7f:20:4b:3f:4a:b0:08:34:74:fd:1a:4d:6e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cfa287dea2345ea6171aa477d68ee2dbb495e1
Validity
Not Before: Oct 5 08:00:54 2026 GMT
Not After : Oct 6 08:00:54 2026 GMT
Subject: CN=fcafb079c525d978f10abc3f661aae6520a2d27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:43:65:92:a4:4a:1b:87:bf:63:b7:7c:47:5c:
b0:01:65:10:85:de:dd:1d:85:05:69:f3:42:67:60:
ca:cf:b6:09:74:7f:18:27:3a:e5:c7:f4:5d:82:e2:
80:c4:5a:fe:6a:ea:48:cc:ed:dd:3f:b9:a0:85:7c:
89:7c:37:29:f3:35:8e:4c:39:38:7e:66:a0:b1:ae:
2f:08:fb:1a:7e:5b:7e:4d:62:6b:8c:c0:0b:0c:eb:
9a:32:61:14:34:2d:db:5b:82:eb:ec:bc:ed:29:9a:
23:98:09:cc:7f:63:8f:af:0c:31:ca:1f:81:eb:78:
38:d1:5e:e7:24:6e:63:5a:ef:a5:88:bf:24:20:d5:
f7:d4:17:c2:53:1d:17:60:80:7a:2a:1d:5b:77:3a:
3b:70:3b:3e:53:e7:75:25:f4:37:0d:b5:b3:c5:c2:
b7:ae:c6:29:42:4c:20:d4:c7:19:bf:19:e2:b3:9a:
c9:fe:b6:57:1f:02:33:4b:a6:bf:f8:2f:39:7d:2e:
f2:84:a7:9c:35:7a:df:e8:25:3b:19:7e:66:f0:b8:
c7:19:80:68:4b:e9:de:8b:05:1b:55:e7:ac:1b:e9:
2a:54:4e:d2:53:c2:01:c8:eb:7e:1c:67:16:92:d9:
c2:5e:22:de:89:ea:b0:1d:8c:26:ff:fd:39:39:72:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AF:B0:79:C5:25:D9:78:F1:0A:BC:3F:66:1A:AE:65:20:A2:D2:7B
X509v3 Authority Key Identifier:
keyid:23:CF:A2:87:DE:A2:34:5E:A6:17:1A:A4:77:D6:8E:E2:DB:B4:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8-ih96iNF6mFxqkd9aO4tu0leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1cc0c7-a09c-410e-8654-0802c6890fc2/1/I8-ih96iNF6mFxqkd9aO4tu0leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ec:9e:f2:fd:bf:f1:8e:1b:a5:dd:9f:7b:7f:7f:6a:45:ab:
d0:a0:1b:4a:17:19:eb:e5:31:f5:2b:7a:0b:05:77:ae:05:50:
d9:a2:87:a6:0c:60:1e:7c:8b:7a:2e:8f:34:94:9c:c8:72:b5:
f5:50:b4:4d:89:92:fb:16:73:e1:97:8c:cb:b7:8f:09:05:c7:
c0:7f:dd:66:c9:b1:a1:45:0c:0e:17:2f:37:41:d1:3c:9a:e2:
71:83:95:ee:b4:24:28:dd:4d:a8:be:30:aa:c0:89:1e:f7:d5:
2a:f6:53:c5:d5:aa:03:11:39:47:49:c6:d3:6a:c1:ac:ea:70:
c6:c3:c0:57:3a:b9:5a:8f:02:dd:c3:d1:d1:dd:71:cd:4f:55:
08:ad:7d:07:2f:61:dd:6f:47:6d:f2:7c:8d:4d:9f:72:6b:dd:
43:9b:7b:45:51:7e:2c:99:53:e9:b8:51:08:04:c7:fb:49:f5:
a4:b9:e5:d6:dd:1b:2d:63:0d:86:bb:d7:66:d6:81:51:1a:d1:
20:db:53:f9:23:61:a3:f5:14:77:f6:70:8d:8c:7e:33:d8:f8:
94:bf:0e:9f:27:db:15:94:da:68:13:a2:fa:26:24:31:dd:d0:
67:c6:f9:1d:4a:65:f0:5f:57:4b:12:74:27:62:0a:39:a7:d3:
79:02:bd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:41:42 2026 by rpki-client