Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: KOrayoO2AQ3zuEvjAcQgY8LU76Fgyqh2OCZaUXOb4i0=
Subject key identifier: 4C:D4:46:D5:44:AC:37:89:0D:1F:07:24:40:6E:F6:3C:19:69:AF:D5
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 01A100FF5A37DF924FC6D4F467F6E7F45A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 09:01:37 +0000
Manifest this update: Sat 03 Oct 2026 09:01:37 +0000
Manifest next update: Sun 04 Oct 2026 09:01:37 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: iXQKlKQMkH7gnx1v1hUNkRVcgIOgedC0HxgKx0a6OhE=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:ff:5a:37:df:92:4f:c6:d4:f4:67:f6:e7:f4:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Oct 3 09:01:37 2026 GMT
Not After : Oct 4 09:01:37 2026 GMT
Subject: CN=4cd446d544ac37890d1f0724406ef63c1969afd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:dd:71:3e:f7:9b:1b:5f:a3:6e:b7:85:79:
79:ad:61:eb:bd:cf:14:5a:49:71:df:77:8e:fc:dc:
fe:47:d3:2c:92:de:58:09:7e:a1:fe:3b:a5:7f:cd:
0b:e7:41:53:28:d8:8b:e6:d7:c0:13:42:58:06:85:
ab:f8:63:27:64:56:0d:0f:70:b8:a0:df:cd:f7:e1:
a4:42:75:c8:95:8e:e7:68:ac:81:b2:73:9c:86:0c:
fa:2f:0e:a9:73:71:b4:45:b9:53:6a:25:67:9a:18:
99:07:cd:a3:85:9c:9a:c5:38:08:07:8e:da:de:93:
00:57:f8:c8:13:95:6b:25:72:55:56:11:80:3c:00:
0d:63:4e:47:ff:e5:e3:81:c3:4c:fe:c8:10:e3:4c:
78:b2:0b:b3:b6:2c:32:81:5a:cd:a3:00:90:95:60:
8a:c7:50:ad:b7:c7:35:db:fe:76:31:2c:c2:51:29:
e7:58:16:70:88:8f:74:30:e7:03:9d:0a:f9:2f:a1:
0c:e3:ab:25:13:18:03:2f:33:9e:ea:5b:6f:b3:53:
22:04:08:4c:69:55:fc:91:65:90:ed:f3:56:26:4c:
4b:b0:0f:0e:a0:05:cf:f8:66:15:0c:ba:3d:95:8d:
94:56:e6:b4:86:fd:f1:8e:c1:87:e2:c7:68:81:ca:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D4:46:D5:44:AC:37:89:0D:1F:07:24:40:6E:F6:3C:19:69:AF:D5
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:39:0a:a7:7c:24:0b:21:2a:e6:10:e7:a7:8b:7d:1e:b4:5f:
e6:c6:9c:23:fa:4c:a4:ce:2f:4a:9e:e6:0f:2e:96:52:aa:97:
70:73:60:15:27:8b:f4:02:9e:59:0b:52:41:97:98:52:54:49:
d4:3b:8b:81:e1:43:7f:16:d2:fb:7b:42:8d:53:0c:3c:80:44:
e3:83:8a:05:3e:9e:11:4b:77:78:f8:ff:fc:1a:1a:10:8f:4e:
17:4e:03:1b:a3:79:78:26:7a:db:11:f4:87:05:0b:93:ea:46:
da:13:a7:cb:82:1d:25:6f:f5:12:67:a6:20:6b:62:1e:86:75:
e1:5e:8f:48:32:03:17:a7:dc:a5:c6:0d:ae:06:46:65:33:ba:
31:6d:84:69:c7:0b:58:d6:bf:65:95:c0:98:8f:a1:c4:70:2b:
25:76:17:01:99:aa:64:0f:c1:38:11:8e:5f:21:6a:30:d3:8a:
3e:b2:a3:ca:76:56:6d:96:bb:15:77:9b:7d:35:4d:ca:d5:69:
c2:e8:e4:e6:b8:db:8d:83:2a:94:c3:41:2a:9b:ea:2a:7e:ee:
b0:43:a9:9d:61:95:67:b5:ec:b6:6d:71:12:2e:a3:f5:d5:e3:
a5:04:da:71:45:2a:b0:33:e3:20:ff:d4:5e:ea:d6:07:69:00:
fc:1c:2f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEA/1o335JPxtT0Z/bn9FpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGVhMmQ0YWIxMzgwZjBhM2I3ZmU3ZDRmYTc4MjhlMWM5
NDM1NTgwHhcNMjYxMDAzMDkwMTM3WhcNMjYxMDA0MDkwMTM3WjAzMTEwLwYDVQQD
Eyg0Y2Q0NDZkNTQ0YWMzNzg5MGQxZjA3MjQ0MDZlZjYzYzE5NjlhZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/7dcT73mxtfo263hXl5rWHrvc8U
Wklx33eO/Nz+R9Mskt5YCX6h/julf80L50FTKNiL5tfAE0JYBoWr+GMnZFYND3C4
oN/N9+GkQnXIlY7naKyBsnOchgz6Lw6pc3G0RblTaiVnmhiZB82jhZyaxTgIB47a
3pMAV/jIE5VrJXJVVhGAPAANY05H/+XjgcNM/sgQ40x4sguztiwygVrNowCQlWCK
x1Ctt8c12/52MSzCUSnnWBZwiI90MOcDnQr5L6EM46slExgDLzOe6ltvs1MiBAhM
aVX8kWWQ7fNWJkxLsA8OoAXP+GYVDLo9lY2UVua0hv3xjsGH4sdogcp+GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzURtVErDeJDR8HJEBu9jwZaa/VMB8GA1UdIwQY
MBaAFIveotSrE4Dwo7f+fU+ngo4clDVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQt
MWUzMjZkZWJhNGQwLzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQtMWUzMjZkZWJhNGQw
LzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjkKp3wk
CyEq5hDnp4t9HrRf5sacI/pMpM4vSp7mDy6WUqqXcHNgFSeL9AKeWQtSQZeYUlRJ
1DuLgeFDfxbS+3tCjVMMPIBE44OKBT6eEUt3ePj//BoaEI9OF04DG6N5eCZ62xH0
hwULk+pG2hOny4IdJW/1EmemIGtiHoZ14V6PSDIDF6fcpcYNrgZGZTO6MW2EaccL
WNa/ZZXAmI+hxHArJXYXAZmqZA/BOBGOXyFqMNOKPrKjynZWbZa7FXebfTVNytVp
wujk5rjbjYMqlMNBKpvqKn7usEOpnWGVZ7Xstm1xEi6j9dXjpQTacUUqsDPjIP/U
XurWB2kA/BwvBg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:47:36 2026 by rpki-client