Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: htwVKB+ME/v/D8M0x3BfLSUT8YWW+FUHLY9BeWREuZg=
Subject key identifier: FE:A8:FD:E5:3E:3A:1B:0D:D6:13:2D:E8:0D:EE:93:07:72:4A:5F:A9
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019E1EA36209D5FD43234F7604ADB720B4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 03B4
Signing time: Wed 13 May 2026 00:01:24 +0000
Manifest this update: Wed 13 May 2026 00:01:24 +0000
Manifest next update: Thu 14 May 2026 00:01:24 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: UikHQsaU2XmD5bFSNXlFe82mbQeEx0ulmDd8yFmzjvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:62:09:d5:fd:43:23:4f:76:04:ad:b7:20:b4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: May 13 00:01:24 2026 GMT
Not After : May 14 00:01:24 2026 GMT
Subject: CN=fea8fde53e3a1b0dd6132de80dee9307724a5fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:17:52:6b:90:f5:24:a3:36:1e:69:45:4e:
c1:f6:ab:ad:01:2e:e7:76:c6:d4:dd:5a:66:89:6c:
33:3b:22:c8:24:39:e8:e1:d4:21:83:1c:9a:0a:8c:
ef:d7:f8:ed:24:8c:e7:45:aa:25:6a:c6:fd:08:56:
aa:ca:61:f8:ef:c5:6b:1f:ee:3c:9d:3a:97:d3:6f:
8e:49:fb:20:b5:34:28:86:dc:fc:ac:d4:c7:e0:cc:
ba:63:19:aa:06:b5:e1:ec:95:06:08:96:ab:1a:8f:
2c:95:dd:b6:35:01:e6:9c:7b:57:70:53:ad:c5:9b:
bf:9e:0d:e6:08:13:48:7e:68:ee:48:00:d6:49:2e:
e8:13:95:b0:fe:27:a2:10:21:1c:05:f3:89:fe:1b:
cd:81:10:b4:c0:c9:22:7c:03:d0:0b:90:06:61:bd:
08:43:44:3b:ad:ee:a1:d9:83:84:75:09:5e:20:bf:
29:fd:53:1e:ac:2c:b4:b5:12:cc:7a:6e:6e:e0:32:
12:80:75:b6:e4:94:d7:b0:7a:a2:92:b8:0b:c9:8f:
8d:ea:4e:87:b1:38:92:5c:21:8e:f4:e9:d0:4f:5b:
58:c4:ff:64:ae:99:c2:13:6b:ab:f4:de:5d:0b:6e:
9b:b1:e6:97:e0:c3:6d:6a:e1:98:bf:90:2c:5f:01:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:FD:E5:3E:3A:1B:0D:D6:13:2D:E8:0D:EE:93:07:72:4A:5F:A9
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:d2:e7:b6:93:27:89:0c:3e:e8:76:f8:6f:f9:1b:e6:8f:
66:ea:fd:dd:c2:a1:47:60:13:c5:cd:b8:b3:72:15:51:ba:0b:
4c:77:6a:1b:53:ea:33:9a:8d:4d:18:91:cb:7d:58:fc:37:d2:
ee:4b:4e:c4:e4:6d:03:bc:70:dd:2e:7e:45:c7:eb:ae:14:39:
2f:4d:c7:16:9e:52:4f:85:4e:47:73:51:40:26:85:b1:49:7e:
38:b9:cb:d0:f5:15:a0:c8:f6:46:79:bf:1f:02:5c:56:03:2e:
f9:01:92:b6:9b:27:83:5a:be:35:93:4f:34:e0:51:50:bc:1d:
ca:2b:50:63:82:d5:91:9e:fb:78:e7:89:39:27:f2:1b:d7:8a:
1d:b0:f3:2e:9e:10:6b:cb:a1:c2:f8:7c:51:ff:d4:6b:e1:05:
45:cf:c1:f4:39:66:04:bc:6f:1b:e4:33:e9:48:0f:0c:6f:a3:
62:36:55:52:1f:49:9c:46:3d:4c:df:ee:f3:04:e1:d5:68:2c:
f7:78:c3:b5:ea:1b:52:d6:2e:0b:3e:15:07:f4:9a:0f:4e:43:
f3:f6:14:f8:df:14:84:3d:49:13:88:00:d3:e9:06:ec:95:9e:
59:9b:cd:75:e1:b7:a4:ed:31:bf:92:ee:24:ff:35:59:12:31:
c9:1f:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:24 2026 by rpki-client