Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: VY1INS+2eozbm22ggt/z9wlBtDY08pZ+DcNIBn3XQwc=
Subject key identifier: 23:65:CC:B9:24:6A:84:95:72:5F:29:35:1E:29:58:47:D0:DD:C4:FB
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019CAC474B1BE023EFF22CBC9198D54E62AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0FF6
Signing time: Mon 02 Mar 2026 02:01:19 +0000
Manifest this update: Mon 02 Mar 2026 02:01:19 +0000
Manifest next update: Tue 03 Mar 2026 02:01:19 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: SSDMrNrOn2mX9nbQpcMet+0+vfENvpPR4JguJYYZXJc=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:4b:1b:e0:23:ef:f2:2c:bc:91:98:d5:4e:62:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Mar 2 02:01:19 2026 GMT
Not After : Mar 3 02:01:19 2026 GMT
Subject: CN=2365ccb9246a8495725f29351e295847d0ddc4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:c1:40:d0:b3:cc:7f:18:37:32:21:7d:21:
92:4e:3c:9d:61:6f:e5:72:6c:8b:b1:ad:94:45:5e:
15:10:2d:32:a4:65:c5:f4:55:c4:1b:09:59:85:70:
86:2c:f1:bb:38:47:25:9b:fc:9f:14:d2:37:a9:a7:
31:09:9c:70:c9:ba:d7:79:a0:44:e0:e6:02:81:f6:
b7:99:bb:99:c5:d3:c9:b1:54:50:a9:e2:fa:0f:6c:
0f:e5:3c:42:1c:ea:55:81:29:ec:5e:9c:ec:dc:38:
11:ad:9d:ae:cf:5b:c9:14:88:40:1c:54:29:6a:0a:
0e:f6:d7:2d:8a:6a:9d:5e:9e:43:36:75:9f:74:76:
cc:a0:89:13:21:33:52:c7:da:ae:ba:77:75:c6:40:
fe:5b:00:09:b4:8c:d8:98:64:f9:b2:3f:60:35:6f:
be:c5:bc:d0:08:23:05:17:b7:0b:73:3b:db:7a:a2:
f8:3c:a7:73:b1:54:97:27:ba:a3:46:76:1d:d0:23:
9d:5b:32:92:ea:34:5b:41:27:f3:44:3c:6a:6c:7e:
61:c8:0b:ba:b5:3d:c0:77:ef:c8:85:09:56:03:62:
06:4c:c4:6f:5c:08:e0:aa:eb:91:cf:ae:2b:f7:9a:
ef:a6:7a:71:b9:4b:43:a1:2b:4d:9e:02:c4:e6:01:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:65:CC:B9:24:6A:84:95:72:5F:29:35:1E:29:58:47:D0:DD:C4:FB
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:47:ce:11:5c:3a:01:e5:e4:03:b3:1c:9e:68:3a:c5:8e:c4:
80:33:92:f0:57:eb:4c:62:7f:eb:a3:90:6d:1b:d2:21:29:8c:
f6:5d:3d:e2:08:ae:15:93:ab:1d:8d:35:94:f7:36:e0:18:8e:
37:13:ad:2e:0a:40:ce:35:9b:5a:ac:56:16:8c:5a:cb:ea:95:
2e:8f:8f:0b:eb:3f:6e:d6:87:3f:d9:6c:76:a0:95:e5:28:34:
5c:b2:d8:85:1d:0f:49:24:7f:27:c1:7c:8b:d6:3a:b1:cd:58:
db:92:f9:4b:f6:51:e5:61:71:0b:38:25:46:dd:1c:4f:af:80:
3c:65:31:00:f5:93:6e:b1:e7:05:93:a5:f5:d8:7a:d4:6b:4c:
38:81:f1:d7:9d:cb:16:ed:1e:1f:d2:85:4d:11:53:79:ac:e8:
72:6e:b2:cb:aa:5b:d1:8b:c5:e5:9c:0c:72:ef:0a:7e:ca:6c:
e3:e3:25:0d:9a:8f:24:33:f4:df:7b:e2:cb:18:1f:fd:1d:8c:
e3:10:d4:0b:ee:39:bc:c4:6f:fc:52:28:f8:ea:5e:9f:10:4b:
e1:45:d8:2e:05:dc:10:cf:20:36:34:d1:b1:a0:80:35:9a:7f:
fd:8d:2c:34:25:a6:ee:37:25:17:59:fb:16:24:c4:dd:ae:f1:
e9:9b:3e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:39 2026 by rpki-client