Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: 1QbIsumqRbD+L7xUXpB7bSGobQrZ8t13ZegPwZmLAXQ=
Subject key identifier: 08:57:52:ED:9E:A5:7B:D6:41:EC:5D:D1:74:DF:D5:51:CF:7A:ED:9E
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 01A101DAF9F59A17C378EED4F24E4D9A8B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1A17
Signing time: Sat 03 Oct 2026 13:01:30 +0000
Manifest this update: Sat 03 Oct 2026 13:01:30 +0000
Manifest next update: Sun 04 Oct 2026 13:01:30 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: 7VQvb6W+Br1xJoanPFvsF7uWS2kI7FE1q8WMjPwwfw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:da:f9:f5:9a:17:c3:78:ee:d4:f2:4e:4d:9a:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Oct 3 13:01:30 2026 GMT
Not After : Oct 4 13:01:30 2026 GMT
Subject: CN=085752ed9ea57bd641ec5dd174dfd551cf7aed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:83:9f:e6:a9:65:f0:9c:e6:c7:79:be:63:
ac:f3:ec:ac:b5:d2:39:0f:fe:ed:69:75:4b:af:5e:
70:58:54:57:9e:5a:7a:58:0f:6d:cd:2b:e4:2b:16:
ee:11:90:99:be:12:dc:d2:96:99:5a:9f:07:54:b2:
0d:5d:bd:5f:5a:53:14:87:6a:88:d8:41:4c:40:89:
62:1f:38:54:99:8f:70:49:c1:de:36:12:98:34:4b:
c5:de:7a:3e:cf:81:05:0e:82:6e:51:52:81:19:ba:
f9:cd:f2:da:b2:8b:f1:70:f4:48:a7:7f:be:bf:21:
4b:bb:80:54:36:fd:3a:e0:00:0e:54:24:9b:92:77:
9b:93:41:ca:b0:38:19:d5:d4:d8:ed:eb:f1:fd:76:
c0:50:1b:7a:d7:cf:5e:57:03:7d:82:c5:f2:47:7e:
5b:2a:1f:03:2d:32:56:8e:ae:72:b4:22:7d:cc:0a:
e7:d5:76:12:e6:e5:db:ed:dc:fc:6b:b9:77:c4:68:
99:83:c8:30:61:36:fb:df:81:4b:59:87:0e:48:fe:
0d:19:b4:e0:0c:cc:b5:8b:c2:d6:89:1f:11:d8:3e:
c3:54:27:e1:68:02:2e:f4:25:5d:59:64:45:dd:85:
91:91:33:e2:4b:df:fa:b4:f8:9f:ab:a3:04:81:83:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:52:ED:9E:A5:7B:D6:41:EC:5D:D1:74:DF:D5:51:CF:7A:ED:9E
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:e2:66:fe:6f:0c:84:70:71:a2:c0:25:47:13:75:f4:3c:6b:
6d:b5:2a:f5:2d:b9:79:c1:2f:64:d2:d9:88:e6:68:89:22:49:
a2:30:46:ef:db:a2:96:41:3e:9d:40:a8:c3:a9:f6:ee:22:ef:
e7:69:c5:97:ee:60:82:fe:96:60:b9:8d:1d:20:9c:58:2f:db:
a9:b9:7a:d1:3d:ed:eb:f5:bb:46:aa:c6:40:7f:6f:5f:b9:2f:
33:b3:f3:85:3e:d2:59:17:f9:25:ed:3f:b2:b8:66:d9:35:d2:
df:bf:14:1b:67:a1:60:b0:9f:13:89:ae:ee:0a:17:c3:9a:ea:
f1:2f:40:31:37:60:e1:8d:b2:f5:95:af:e2:b0:3e:85:3c:2e:
8a:66:30:73:f8:42:be:a8:20:29:52:3a:3a:4c:3c:31:cd:2a:
38:ce:97:e7:85:a3:ea:a4:93:1c:9d:e8:47:92:10:16:06:57:
e6:87:5d:ae:39:0b:06:41:47:30:eb:2c:0d:a1:82:8b:17:be:
5e:62:d8:d2:ff:41:47:31:1e:4a:6b:1c:6c:25:6e:ea:81:4c:
1d:07:63:75:42:72:fa:39:30:aa:a0:eb:bd:6e:2c:e5:03:e4:
3a:65:92:b8:90:53:a8:2e:04:38:ce:86:c5:be:77:c9:71:c8:
c4:c2:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:51:39 2026 by rpki-client