Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: GCExDld8ZM2DovL0YJhlcQJtImXK4WMCeK/YAmqb5x4=
Subject key identifier: 17:F1:39:D4:4D:90:D5:0C:31:69:2E:E1:44:44:04:9A:C1:01:65:5C
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019F935B5713B7B315E1CE1046569BCF7080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 0475
Signing time: Fri 24 Jul 2026 09:01:04 +0000
Manifest this update: Fri 24 Jul 2026 09:01:04 +0000
Manifest next update: Sat 25 Jul 2026 09:01:04 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: a/ALjTKxBVVaRqgG1MJAybltEC/J6ELMM4PZpZhjmQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:57:13:b7:b3:15:e1:ce:10:46:56:9b:cf:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Jul 24 09:01:04 2026 GMT
Not After : Jul 25 09:01:04 2026 GMT
Subject: CN=17f139d44d90d50c31692ee14444049ac101655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:7f:72:8b:8c:74:f5:9a:e7:64:a4:7b:53:
89:bf:bf:ad:36:be:ff:6a:77:6f:1f:26:2e:1e:fc:
49:f5:a3:4b:81:c2:0c:62:60:c4:d9:d1:4b:bf:37:
a0:ba:55:a1:c7:03:ec:29:d3:a0:57:af:7e:8b:b4:
f1:4d:f6:e5:51:83:ee:24:23:72:b3:f0:e4:d6:6b:
52:45:87:cb:9d:bf:98:6f:1b:fe:50:df:ca:19:e5:
0e:f6:a3:cc:ae:0e:7f:73:f3:58:86:ab:30:e7:34:
cb:5f:f7:10:83:51:1d:75:38:86:4c:4c:09:9c:7b:
b0:aa:4c:50:99:e7:ed:f0:62:b6:e5:94:59:76:82:
1c:fe:0c:9c:93:7a:0d:f8:11:ad:bf:04:4d:b6:eb:
de:07:e1:35:6b:fa:08:c7:e9:aa:4b:52:fa:be:05:
55:f2:1e:8c:88:ad:3f:e8:8d:f3:b8:88:fc:0c:da:
40:8c:23:50:36:a9:06:ce:17:ad:ce:65:07:2a:8d:
80:dc:62:0d:28:ef:d5:35:d8:db:60:57:28:c7:3a:
a7:5c:36:66:7a:5e:11:74:76:28:9c:72:ea:c7:21:
c6:bf:d1:3a:d5:83:46:82:78:96:38:89:bf:fa:e0:
96:07:84:56:85:02:db:1b:92:68:20:bc:99:52:a5:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F1:39:D4:4D:90:D5:0C:31:69:2E:E1:44:44:04:9A:C1:01:65:5C
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f3:da:7c:e9:23:84:48:de:75:b0:8e:2d:72:28:da:4b:ae:
ae:ea:76:75:9c:46:f9:62:86:d9:90:d0:d1:38:3b:6b:53:7d:
de:75:9b:a9:34:dd:83:d1:e1:bc:c0:46:ff:cc:66:44:c5:da:
e5:6e:2b:67:69:a7:15:f7:2b:15:ed:f5:df:32:5a:37:26:f5:
6e:20:e6:c7:4d:3f:bf:cd:45:31:70:8c:6f:7b:c8:a6:b7:a9:
14:15:2d:55:73:7a:8e:63:3f:c7:23:ae:58:ab:12:85:37:52:
90:6c:d6:dc:b1:ba:0f:f4:6d:a9:d0:83:63:4e:3c:be:ea:2a:
b0:90:1b:34:2f:dd:ab:91:a8:75:ea:ea:b0:58:65:ae:e2:b0:
51:7c:6e:ff:4f:f6:fa:38:e0:82:f7:a3:29:19:07:77:69:5d:
6d:a7:c1:37:4f:a5:75:dd:24:0c:08:1c:83:8c:ea:4f:2f:7d:
26:92:fd:07:1d:d5:20:08:99:46:08:f7:6e:20:dc:e6:60:25:
c2:16:ba:70:69:0e:d8:85:11:9b:9d:f8:73:ed:10:17:ea:22:
b3:9f:19:f4:59:25:d0:41:c5:d1:7a:4d:1d:f0:4b:77:5f:ae:
72:03:2c:c3:f6:85:ec:60:ba:83:b2:80:e8:52:b9:f5:d2:f7:
0e:ea:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:14 2026 by rpki-client