Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: Juj+IE1Ygo0dK2mdkvY9qacPEVreDlzH1KlyQrtBeLg=
Subject key identifier: 16:5C:1D:F3:16:4F:E5:B5:5E:12:4F:97:A0:C8:05:D1:F6:DD:AE:9A
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019EC148E5B5C869359816B9E56EEE0B046A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 110A
Signing time: Sat 13 Jun 2026 14:00:40 +0000
Manifest this update: Sat 13 Jun 2026 14:00:40 +0000
Manifest next update: Sun 14 Jun 2026 14:00:40 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: mUzMxzDcD7FFXIWZ/mXSneld/bfBE22nNaT954fYqKA=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:e5:b5:c8:69:35:98:16:b9:e5:6e:ee:0b:04:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jun 13 14:00:40 2026 GMT
Not After : Jun 14 14:00:40 2026 GMT
Subject: CN=165c1df3164fe5b55e124f97a0c805d1f6ddae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:e4:58:0d:13:fe:0f:e4:46:80:ab:b7:d2:
43:86:a5:dc:80:f4:35:80:ab:4e:29:0b:b3:b6:cd:
6f:18:eb:7f:f4:5b:fd:67:2d:e2:f7:cb:02:63:4f:
83:a2:68:f4:b3:c4:14:3e:77:9e:96:57:71:56:b2:
f8:f1:b1:ad:5d:81:ab:01:54:1f:8f:11:99:89:e3:
4d:40:e6:41:4a:13:2c:5b:cb:fc:dc:0d:82:1c:d2:
af:5f:ce:d3:b8:b4:ce:17:b6:56:c4:97:c7:ef:4f:
0b:5e:7e:92:9b:f8:e4:ae:2d:de:71:13:ba:25:08:
30:97:d8:ce:3a:a8:8a:75:55:ae:6c:78:87:a1:50:
61:b9:1a:92:9a:d8:74:b3:4a:4a:1a:73:86:e1:0b:
7e:61:25:57:b9:a6:12:ab:ce:ad:7f:c9:61:4d:70:
6a:f3:78:a6:58:5a:bf:c2:28:33:cf:3a:0b:45:4e:
bf:cb:13:cb:04:25:94:fd:11:7b:5c:f4:9d:d5:36:
77:7c:f9:ea:c9:47:55:05:41:49:e4:7b:6d:b1:65:
e9:7e:74:5a:ef:df:8c:32:18:e4:5d:85:74:5f:1a:
34:4a:28:41:a5:2b:15:f3:1e:d8:02:c0:79:f0:8a:
e6:c7:50:7a:75:31:89:3e:06:5e:7d:5d:88:6f:e6:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:1D:F3:16:4F:E5:B5:5E:12:4F:97:A0:C8:05:D1:F6:DD:AE:9A
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e9:db:1b:00:ac:03:4b:c0:6d:2e:88:a0:aa:7b:0c:6a:62:
44:82:28:85:11:1d:78:14:df:e2:56:86:a5:d2:13:2e:3e:27:
70:4c:68:1f:ac:8a:b8:67:fc:73:12:f7:34:4e:a2:81:fd:ed:
d4:79:ff:1a:0c:f0:9a:e2:c2:79:d6:6a:38:e4:fd:11:f5:03:
32:74:63:fd:9d:f9:b0:6c:65:a9:2e:27:13:33:39:19:7e:61:
8d:f4:0d:a9:17:e3:b0:de:58:df:61:48:bb:02:d0:3b:e6:b4:
9b:fc:27:7a:dc:52:7f:07:67:07:dd:5e:09:42:fd:fd:6d:3d:
9e:7a:f3:34:f9:de:5e:76:1d:4b:10:b3:b7:e6:33:c0:50:b5:
09:95:10:71:98:29:c6:de:eb:f6:ae:d6:fc:46:e1:d0:d9:1d:
17:b5:6f:71:96:78:97:2e:a0:0d:6c:24:c0:3e:34:99:56:a6:
b9:81:ba:55:30:30:c8:0a:57:31:4c:a7:ff:eb:66:93:af:f8:
dd:2b:20:d2:54:b3:58:a9:8f:ed:88:cd:54:9d:92:3c:e7:03:
af:1f:d4:a2:f6:a5:9a:b7:59:cd:9e:49:07:d0:af:c8:89:97:
fc:fa:72:f8:68:cf:cf:fe:0c:fe:f3:8a:ad:31:af:6a:09:3c:
8e:b1:75:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSOW1yGk1mBa55W7uCwRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm
YjJlNWUwHhcNMjYwNjEzMTQwMDQwWhcNMjYwNjE0MTQwMDQwWjAzMTEwLwYDVQQD
EygxNjVjMWRmMzE2NGZlNWI1NWUxMjRmOTdhMGM4MDVkMWY2ZGRhZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfrkWA0T/g/kRoCrt9JDhqXcgPQ1
gKtOKQuzts1vGOt/9Fv9Zy3i98sCY0+Domj0s8QUPneelldxVrL48bGtXYGrAVQf
jxGZieNNQOZBShMsW8v83A2CHNKvX87TuLTOF7ZWxJfH708LXn6Sm/jkri3ecRO6
JQgwl9jOOqiKdVWubHiHoVBhuRqSmth0s0pKGnOG4Qt+YSVXuaYSq86tf8lhTXBq
83imWFq/wigzzzoLRU6/yxPLBCWU/RF7XPSd1TZ3fPnqyUdVBUFJ5HttsWXpfnRa
79+MMhjkXYV0Xxo0SihBpSsV8x7YAsB58Irmx1B6dTGJPgZefV2Ib+axUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZcHfMWT+W1XhJPl6DIBdH23a6aMB8GA1UdIwQY
MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct
MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5
LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcunbGwCs
A0vAbS6IoKp7DGpiRIIohREdeBTf4laGpdITLj4ncExoH6yKuGf8cxL3NE6igf3t
1Hn/GgzwmuLCedZqOOT9EfUDMnRj/Z35sGxlqS4nEzM5GX5hjfQNqRfjsN5Y32FI
uwLQO+a0m/wnetxSfwdnB91eCUL9/W09nnrzNPneXnYdSxCzt+YzwFC1CZUQcZgp
xt7r9q7W/Ebh0NkdF7VvcZZ4ly6gDWwkwD40mVamuYG6VTAwyApXMUyn/+tmk6/4
3Ssg0lSzWKmP7YjNVJ2SPOcDrx/UovalmrdZzZ5JB9CvyImX/Ppy+GjPz/4M/vOK
rTGvagk8jrF1yw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:31:44 2026 by rpki-client