Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: vkND6fcxzvrHJ/3mYXH7bxJNWx7Bo0SLyvMkBTGRthg=
Subject key identifier: 5F:FB:02:8B:5C:7D:29:36:A0:9D:01:B7:D7:7E:52:40:04:92:2B:2C
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 01A0DC4D73656F94B7A4D77FDDCDA5061362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 06:00:58 +0000
Manifest this update: Sat 26 Sep 2026 06:00:58 +0000
Manifest next update: Sun 27 Sep 2026 06:00:58 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: OgEfjdEXNSEG7LmsGkt0KJkG8hVaAJzInVPhRC5NMX4=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:73:65:6f:94:b7:a4:d7:7f:dd:cd:a5:06:13:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Sep 26 06:00:58 2026 GMT
Not After : Sep 27 06:00:58 2026 GMT
Subject: CN=5ffb028b5c7d2936a09d01b7d77e524004922b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:da:dc:e1:25:fc:de:2b:81:1a:be:3d:a8:
c5:97:d1:a6:6c:67:fe:62:cc:3a:6c:7a:f5:6f:e5:
fa:48:f6:36:16:4a:25:02:13:1e:61:a6:28:c8:f3:
56:0e:c8:1b:f9:31:19:ec:56:fb:42:c4:5a:01:7c:
80:6c:4d:d4:05:ce:13:09:8e:7a:29:3c:a7:e1:b5:
e8:de:83:3f:55:4f:60:91:53:3c:ea:1c:2e:e2:34:
a4:07:6b:08:ea:e9:38:e0:b5:63:e3:2a:11:5b:e1:
c2:20:8b:09:af:26:cd:20:7c:58:01:8f:8a:a0:3d:
90:91:cd:89:aa:85:e4:3b:ee:97:a1:59:f3:08:a6:
1b:f2:82:43:34:61:c1:cd:bf:1c:8a:7c:bb:d8:6f:
54:91:38:eb:3c:a2:bf:d6:cc:cc:91:73:dd:74:66:
f7:f1:32:e5:e1:91:53:10:bd:c8:20:a2:0d:79:ac:
34:48:e4:10:f9:2e:a3:42:53:e9:3f:17:f2:da:b9:
ea:9e:51:42:54:6f:3e:68:1d:d1:63:cc:6d:7f:05:
6d:10:3b:14:d9:d3:5d:6a:24:ac:e5:0b:6c:77:f6:
46:30:c4:44:8e:27:e8:b5:94:0c:9c:3b:5a:d2:ec:
59:d0:40:75:03:2b:ad:36:ff:bf:52:51:44:77:a2:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FB:02:8B:5C:7D:29:36:A0:9D:01:B7:D7:7E:52:40:04:92:2B:2C
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:85:ec:de:13:1e:96:4b:e4:6a:4e:34:23:65:f9:fe:cd:dc:
69:b3:73:0e:37:30:37:3b:30:1c:e8:0b:6e:c2:87:2f:a2:7c:
10:1f:19:ba:0e:7f:9a:30:3a:8a:ca:bd:de:67:96:3c:3b:b1:
e5:76:cd:87:bb:ca:6f:60:3e:28:27:2a:be:45:bd:0b:1f:b0:
71:67:3a:47:ef:33:71:a5:a5:0b:a1:d1:b4:62:5e:29:0b:6f:
f1:e2:4e:1e:ea:48:bd:68:bd:32:2c:4c:2a:8c:8b:51:65:2d:
3f:0d:00:2c:3c:15:2e:11:45:55:5b:dc:ad:d1:ef:7c:c8:9d:
0d:df:bb:c9:c3:24:ff:c5:9f:bb:56:17:3e:14:46:4a:e0:96:
db:f2:5f:c0:96:d3:5e:ad:70:4e:5b:c8:c8:7f:ec:a2:b4:87:
6f:68:31:1f:3a:71:0a:3f:e1:51:5a:42:60:51:61:2e:a3:f1:
d4:78:2d:f9:1e:32:e6:42:df:7d:2d:76:30:f6:96:c8:be:30:
95:f2:44:52:54:c5:9f:9b:58:56:94:20:35:21:d8:3e:35:6a:
dd:5d:f2:6b:50:30:d0:a9:4d:71:fa:f7:ad:ab:92:a4:fa:1e:
70:69:4d:8d:de:f7:e7:46:00:22:4b:da:a2:f5:37:5e:f6:e2:
6a:91:d7:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTXNlb5S3pNd/3c2lBhNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNmU2NWI4MmZlNDAwN2U4MmZkMmRiMTM0Y2Y0MmM2YWVj
NGUwYmMwHhcNMjYwOTI2MDYwMDU4WhcNMjYwOTI3MDYwMDU4WjAzMTEwLwYDVQQD
Eyg1ZmZiMDI4YjVjN2QyOTM2YTA5ZDAxYjdkNzdlNTI0MDA0OTIyYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ra3OEl/N4rgRq+PajFl9GmbGf+
Ysw6bHr1b+X6SPY2FkolAhMeYaYoyPNWDsgb+TEZ7Fb7QsRaAXyAbE3UBc4TCY56
KTyn4bXo3oM/VU9gkVM86hwu4jSkB2sI6uk44LVj4yoRW+HCIIsJrybNIHxYAY+K
oD2Qkc2JqoXkO+6XoVnzCKYb8oJDNGHBzb8ciny72G9UkTjrPKK/1szMkXPddGb3
8TLl4ZFTEL3IIKINeaw0SOQQ+S6jQlPpPxfy2rnqnlFCVG8+aB3RY8xtfwVtEDsU
2dNdaiSs5Qtsd/ZGMMREjifotZQMnDta0uxZ0EB1AyutNv+/UlFEd6JLZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/7AotcfSk2oJ0Bt9d+UkAEkissMB8GA1UdIwQY
MBaAFItuZbgv5AB+gv0tsTTPQsauxOC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83YmQ2OGMtYTAzNi00Y2ZlLWI3NjMt
YWY5MDM2MmJkM2JhLzEvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83YmQ2OGMtYTAzNi00Y2ZlLWI3NjMtYWY5MDM2MmJkM2Jh
LzEvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4Xs3hMe
lkvkak40I2X5/s3cabNzDjcwNzswHOgLbsKHL6J8EB8Zug5/mjA6isq93meWPDux
5XbNh7vKb2A+KCcqvkW9Cx+wcWc6R+8zcaWlC6HRtGJeKQtv8eJOHupIvWi9MixM
KoyLUWUtPw0ALDwVLhFFVVvcrdHvfMidDd+7ycMk/8Wfu1YXPhRGSuCW2/JfwJbT
Xq1wTlvIyH/sorSHb2gxHzpxCj/hUVpCYFFhLqPx1Hgt+R4y5kLffS12MPaWyL4w
lfJEUlTFn5tYVpQgNSHYPjVq3V3ya1Aw0KlNcfr3rauSpPoecGlNjd7350YAIkva
ovU3XvbiapHXAg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:09:37 2026 by rpki-client