Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: d5l7kJle3+w56ojizHGMha2f4Pf7oco6VXy3Ge9YgBc=
Subject key identifier: BF:69:35:C6:B3:78:A0:BE:A8:AA:D6:64:8C:DC:6B:72:BB:52:9B:81
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 01A0C6D839C0B57A4561937734D0607355EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 1216
Signing time: Tue 22 Sep 2026 02:00:54 +0000
Manifest this update: Tue 22 Sep 2026 02:00:54 +0000
Manifest next update: Wed 23 Sep 2026 02:00:54 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: XS4F8ATGfddFYJWI/jEAG2ieEudiOfX2jK6WtUSiBNg=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:39:c0:b5:7a:45:61:93:77:34:d0:60:73:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Sep 22 02:00:54 2026 GMT
Not After : Sep 23 02:00:54 2026 GMT
Subject: CN=bf6935c6b378a0bea8aad6648cdc6b72bb529b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:72:83:3b:c4:37:01:5d:ed:9f:a9:0b:c2:
33:9e:6b:ff:9b:d8:1e:4a:26:44:c7:5a:fc:c9:eb:
9e:57:e2:1e:c6:36:af:03:b4:16:9b:f6:3d:56:be:
c6:6d:7c:7b:42:4e:b5:2b:9c:61:d2:72:52:9e:11:
98:f5:2d:95:71:8d:76:74:f1:91:bb:7b:ce:e7:82:
fb:62:b2:8c:19:53:38:11:48:2c:04:ee:b1:e4:87:
28:5a:ca:47:8c:6d:d7:d1:6a:bf:79:41:32:2b:61:
81:c5:60:ab:75:0a:ce:62:c8:06:2a:34:3e:6c:51:
09:e0:0e:69:88:f0:23:3b:83:03:97:d5:3e:c6:60:
ab:4d:b3:97:8b:89:b4:f2:e9:70:fa:2f:03:9f:36:
f4:2b:96:11:ba:6d:21:35:2b:14:66:61:63:ab:c9:
ee:e6:4b:9e:a2:29:11:fd:40:8a:d9:e8:ec:c1:c3:
bb:85:9b:73:46:a0:a9:5d:17:0b:11:cf:80:a2:4d:
34:50:21:e5:78:98:e4:6a:fe:0d:3d:2b:53:fd:a3:
d5:32:2d:4c:ea:43:fc:5d:5d:d0:32:3a:d8:46:12:
ad:1b:7c:ab:54:6d:8d:99:50:bd:80:94:26:db:61:
82:0b:53:08:3a:5d:7a:df:89:1e:1f:a7:97:36:e1:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:35:C6:B3:78:A0:BE:A8:AA:D6:64:8C:DC:6B:72:BB:52:9B:81
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e0:21:ed:4c:41:0e:73:90:6e:31:ab:d7:e1:09:ed:23:0f:
a5:e5:d1:1c:66:3e:31:57:66:cb:3e:a8:92:e0:ad:00:95:02:
9e:3d:86:d6:4a:c2:f7:e2:c7:27:3c:b3:d8:65:fd:ed:b3:10:
31:7c:a6:8a:9c:59:fd:11:18:ba:e9:4c:71:92:4d:f8:f0:a2:
f7:4e:2a:1b:7a:9a:4e:60:94:e1:5a:8d:d7:f8:8f:b0:1f:af:
89:5d:c4:2d:2d:a1:9b:42:38:a7:8e:99:96:f6:f5:90:37:dd:
a0:ee:2f:e0:a2:21:54:33:85:fa:0a:3f:5a:c4:1b:ce:72:8b:
48:c1:ad:f9:25:a5:4f:34:a1:f2:7a:ef:52:26:92:81:de:7e:
5e:4b:a0:ec:68:19:9a:81:34:57:04:ad:ec:be:5f:20:03:d1:
66:49:71:53:01:b7:77:bb:d6:d2:19:f3:df:65:7e:9a:62:0e:
9b:66:db:c0:ae:c7:5c:13:3d:67:30:dd:b6:56:37:13:2c:1c:
fc:ad:8c:c7:df:c1:65:af:5d:0c:74:9b:cd:c4:d2:5c:ed:0e:
3a:55:41:bb:2b:f0:42:02:59:8b:b1:ca:14:9e:b0:0f:6f:97:
63:15:76:d0:b3:aa:43:b6:32:c9:76:53:52:35:cb:ba:66:71:
4b:bc:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:31:19 2026 by rpki-client