Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: L6SBiCVAb4JB0gyA6XxOVcFuuP5AmM7SlozMPM1I5Rk=
Subject key identifier: CC:AD:33:7F:C1:80:51:F2:8D:62:B0:32:57:A4:BE:E8:3E:FA:4D:4A
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019D99CFFDCC749D6A916271A6791BEE0745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 1071
Signing time: Fri 17 Apr 2026 05:00:38 +0000
Manifest this update: Fri 17 Apr 2026 05:00:38 +0000
Manifest next update: Sat 18 Apr 2026 05:00:38 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: 27TfTViT3IzDc2+oi6ba8bINm62dzfRDrONL1HVX6hw=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:fd:cc:74:9d:6a:91:62:71:a6:79:1b:ee:07:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Apr 17 05:00:38 2026 GMT
Not After : Apr 18 05:00:38 2026 GMT
Subject: CN=ccad337fc18051f28d62b03257a4bee83efa4d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:ce:a9:a3:6b:66:35:7f:6f:46:69:e2:2e:
dc:94:56:46:6f:77:4b:d5:a0:de:37:f9:34:44:de:
81:8f:08:71:02:21:8a:1f:04:c0:a9:02:b7:de:7a:
29:93:7e:68:57:70:8a:46:bb:68:b1:57:99:71:f4:
a4:dd:dd:61:ec:42:0c:11:78:71:55:01:32:c2:98:
0d:17:42:72:83:3d:e5:54:ba:7c:c2:73:c2:77:51:
d5:95:e5:ce:2a:31:71:69:53:bf:9b:17:c0:ad:24:
2e:6f:38:e5:33:f8:ed:c9:3f:2a:d7:ac:4c:89:f5:
c7:b0:44:4c:ec:70:5a:2d:da:28:eb:40:ed:42:63:
ea:2f:5c:62:3a:99:c8:59:58:bd:ac:08:fa:3c:44:
28:54:54:b4:30:92:2b:2e:7d:d1:20:2f:79:b7:38:
a8:0d:5b:e5:3c:6c:53:d5:a0:13:36:23:36:b1:fd:
ca:93:8a:3d:7d:cb:93:62:f7:cf:54:d6:08:0a:2d:
78:e1:6d:6f:fe:99:b6:39:93:98:62:f6:28:1a:97:
ad:0a:98:58:4e:ba:6a:89:04:54:22:4f:84:57:2a:
1a:32:47:91:56:0c:20:fb:5b:9c:07:60:65:68:a4:
de:e9:31:0e:12:f5:fc:36:29:a2:30:4d:70:c2:eb:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AD:33:7F:C1:80:51:F2:8D:62:B0:32:57:A4:BE:E8:3E:FA:4D:4A
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:83:0e:5c:8a:d3:6c:32:4a:ac:01:b7:50:49:30:5d:99:37:
1f:f2:eb:2e:56:0e:4c:18:08:de:22:37:14:2e:99:52:d4:6e:
50:cd:64:76:65:33:c6:f7:1d:0b:6a:6b:bb:63:92:76:72:01:
e9:f7:c8:52:a6:70:10:e2:12:85:06:0f:8a:6b:d0:d2:be:00:
7f:d7:9a:86:9f:ce:9a:36:62:e4:63:dd:8a:0a:4d:79:e7:0e:
f5:3a:be:ee:68:6d:06:0a:7c:19:fb:62:fc:57:bc:ac:3d:07:
e4:34:72:7e:07:bc:28:ec:6f:79:26:54:5e:ca:78:96:5a:08:
a2:39:01:ee:f2:fd:00:7f:82:c6:85:4b:bb:5a:4e:bf:e9:43:
8e:fa:eb:c7:63:ad:dc:ad:b8:e0:d6:26:d4:23:14:03:96:12:
c9:2c:d5:99:ea:18:39:a8:bd:43:e5:72:7d:14:51:82:4a:f2:
de:d9:06:16:42:70:4b:4b:62:c9:f7:f2:f4:36:55:7d:41:4f:
7c:45:4d:fe:21:09:e4:80:8e:d7:33:f9:38:bb:77:ff:cc:86:
f4:cb:2b:e9:60:c8:01:35:3b:9e:72:92:85:11:90:03:d7:55:
71:5a:83:1a:a3:a3:c7:f8:43:91:84:66:48:08:56:30:2b:c8:
d3:52:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:17 2026 by rpki-client