Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: ZTfoF2YtRCgwGuiaj/AL/b9e7hnphGAom2+cCjc9QSI=
Subject key identifier: A9:EE:7A:13:3A:2F:D0:51:05:DC:16:14:AB:55:28:1F:A8:7A:B9:69
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019F90FF89F9A50BF7EA16E64C0B3EFEDB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 22:01:33 +0000
Manifest this update: Thu 23 Jul 2026 22:01:33 +0000
Manifest next update: Fri 24 Jul 2026 22:01:33 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: qwKcCuOMTBNQHieTPVJxTK6zru/7xL7+HdcMbPBTHjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:89:f9:a5:0b:f7:ea:16:e6:4c:0b:3e:fe:db:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jul 23 22:01:33 2026 GMT
Not After : Jul 24 22:01:33 2026 GMT
Subject: CN=a9ee7a133a2fd05105dc1614ab55281fa87ab969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:c4:38:4a:52:a3:ef:f0:7c:4e:c8:2a:ea:
a9:8b:0e:e3:5e:ca:53:32:ce:c9:a6:ac:c5:11:43:
ec:de:94:ac:26:52:e4:33:fd:19:96:12:7c:9b:76:
81:2b:43:49:33:94:89:7f:2e:38:7b:43:60:9e:b2:
0f:eb:e8:9e:7e:ff:37:3b:3d:3b:6e:1c:3c:c1:6d:
ed:36:f4:d6:e9:7c:df:18:f8:a3:74:01:8c:17:18:
b2:fa:03:bd:13:d6:a2:ed:86:37:38:54:43:83:f4:
d5:b3:1a:a3:f6:c8:33:dc:2c:ec:b7:7c:98:2f:97:
b3:7b:fc:1c:9f:a8:d9:f7:e8:47:9f:7b:14:a4:4d:
a3:b2:bc:4c:39:ab:fc:c8:39:bc:5c:b5:44:41:98:
65:40:4d:11:a7:8a:0b:ad:64:3e:86:99:f9:c5:72:
cd:1f:a5:dc:88:d1:5e:05:0c:95:98:08:58:6c:cc:
45:74:96:d2:37:4d:6c:63:a1:45:f6:c5:b1:b7:28:
e4:b0:ff:de:66:ae:54:b6:9e:b5:ec:68:a0:ac:f0:
e8:c3:23:9d:50:3c:26:ae:b2:79:a7:8f:8b:d8:6f:
35:38:c3:af:bb:ba:91:dd:33:87:38:d7:80:48:00:
0e:5f:b6:d8:2f:6c:c1:4d:da:28:bf:fe:d5:50:14:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:7A:13:3A:2F:D0:51:05:DC:16:14:AB:55:28:1F:A8:7A:B9:69
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:22:d5:81:f6:e3:90:42:03:ce:8d:e0:73:43:71:74:7d:
b3:c4:64:a6:1d:88:77:25:c9:27:56:6d:da:76:3d:b6:90:eb:
d9:c0:9d:03:b8:c8:fc:8a:00:26:a5:35:96:f2:f4:c2:e1:45:
9c:01:ff:75:57:4c:49:ab:45:3d:44:af:4d:93:96:40:4a:73:
52:df:a2:27:78:8f:1a:f7:a6:07:42:c0:17:08:e8:d9:18:02:
60:25:78:6f:c7:0c:a6:f4:24:a4:aa:7d:c7:e9:bd:46:a3:4d:
b9:23:c6:3d:ed:1d:3c:d5:25:03:df:24:22:76:c2:e8:7b:43:
da:c9:6e:f6:a9:80:18:0c:4d:af:48:4e:b9:45:d6:63:74:9b:
e1:8d:ab:29:71:88:c7:26:b5:30:23:04:d0:03:bb:75:97:00:
8e:c5:37:58:21:8b:70:5f:de:61:4f:32:55:10:2f:bf:3c:b6:
3e:c2:27:4b:80:ee:7d:ea:fa:21:e0:8c:75:96:07:a7:9c:59:
17:d1:59:c1:9d:3d:86:31:c0:7f:b4:a6:93:f0:5d:d5:79:bc:
9a:25:e4:be:b8:fa:be:dc:32:63:61:dd:39:5b:1a:3e:bd:65:
b3:62:a8:2f:2a:85:c0:e4:59:e4:85:eb:b3:d3:8b:54:ce:ec:
32:72:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:22 2026 by rpki-client