Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
File: i8EWjaFgICh-6h_eygVBkwqdNok.mft (raw, json)
Hash identifier: aq6NDi+mNG+gZCozQsPOlgE+2Fhp9TiNOjxBXKstDgk=
Subject key identifier: 1E:64:93:4C:04:68:72:D9:3E:BD:8C:4E:CB:BA:28:E9:1C:DA:5D:0E
Authority key identifier: 8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
Certificate issuer: /CN=8bc1168da16020287eea1fdeca0541930a9d3689
Certificate serial: 019D265F848C6C23516CDF02549EE28B6BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
Manifest number: 050A
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: hMYGnZ8V3zn1wswDkH9uB5kQnbc.roa (hash: TZ/1y+suo43ZgqAyUHnWJ81Rah/utALvEr+b4U8z1+g=)
2: i8EWjaFgICh-6h_eygVBkwqdNok.crl (hash: Pv2NwGUypLHi7JO46jB/V2Ew1Jfkl3rnft5NpmBYFOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:84:8c:6c:23:51:6c:df:02:54:9e:e2:8b:6b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc1168da16020287eea1fdeca0541930a9d3689
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=1e64934c046872d93ebd8c4ecbba28e91cda5d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:71:b4:75:70:a2:b0:76:a0:8d:17:0b:56:
ae:be:61:db:89:df:fd:1c:c2:8a:5b:db:17:f2:25:
a0:84:5a:1c:f2:aa:13:f9:ff:fb:09:a2:bd:02:29:
33:f0:a5:69:f6:60:82:1a:05:f4:3e:74:fd:66:e3:
97:0f:16:c1:50:1f:cf:c0:46:78:9d:1a:52:95:03:
ca:a2:42:af:53:84:8a:5a:2f:d0:c6:20:a2:48:42:
ac:8b:bc:d2:d0:3b:08:36:11:b4:87:ad:2a:24:82:
86:8d:08:bb:4b:6c:53:bd:92:33:18:76:4b:81:de:
63:22:23:12:26:5f:59:4a:fd:19:b1:70:79:f5:58:
1b:09:0a:cc:67:1a:8e:ed:24:6d:77:76:6c:fb:87:
ef:99:0b:5d:ee:d0:e5:7e:c4:48:c9:7b:c6:a2:08:
c7:4e:86:12:87:9d:e8:08:11:f3:82:fc:d5:31:2b:
57:a6:68:9c:33:b9:7b:2a:ee:05:4a:9a:c2:1d:37:
f6:3f:80:fa:e2:2d:ef:8f:8c:c1:5b:c0:99:cd:be:
7d:47:04:8c:b0:df:d3:f2:d8:f3:da:fd:eb:6f:c5:
f7:42:e5:dc:82:c0:64:5c:ca:cc:c2:05:dd:52:ca:
5e:fa:2b:dd:8a:59:ef:58:98:66:2c:80:c6:b0:e3:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:93:4C:04:68:72:D9:3E:BD:8C:4E:CB:BA:28:E9:1C:DA:5D:0E
X509v3 Authority Key Identifier:
keyid:8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b8:fd:c7:c9:d8:5f:6e:36:ed:06:3b:7e:00:7b:a3:cc:e8:
50:31:a2:b7:e9:6c:fa:bc:25:6c:c5:a0:7b:81:90:40:99:c5:
32:33:69:45:83:c8:cf:2c:86:39:c4:66:37:28:1d:88:dd:92:
91:a5:d0:b6:17:80:7b:92:4d:36:c8:c7:bb:55:06:3a:08:23:
dc:eb:0d:f0:4a:bd:42:4f:89:57:94:a8:7a:27:fe:c5:0f:ed:
91:5f:e9:63:a5:91:12:95:f5:06:82:99:47:ae:81:e5:a3:bd:
4e:0d:92:55:d1:5f:9b:59:d9:0c:bd:da:44:58:ab:5e:4f:01:
d6:a3:11:fa:a3:b2:f2:47:a9:63:f4:7b:4a:9b:af:3e:2b:57:
45:99:87:32:bc:a1:49:f4:db:ec:f8:c6:4e:0d:f0:77:4e:da:
52:3a:77:e5:c8:2e:b4:f5:1f:53:5c:20:01:8b:fe:1f:14:c3:
96:79:9b:df:ee:11:29:94:a7:f2:47:b6:fe:41:63:1b:fd:1e:
c6:59:11:ae:17:b5:28:5a:d5:1e:6b:2a:a6:fd:07:c3:56:f6:
8e:06:04:8d:aa:19:c8:60:d9:02:f4:32:b5:d1:70:90:9a:30:
e1:32:be:d6:b7:b5:20:1b:48:fe:f7:c5:86:b7:2f:5c:03:91:
c4:cd:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:22 2026 by rpki-client