Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: lsbAlhjyWGzIS2Hyfz48XQypTAyTm+CLleBxMJSjUlM=
Subject key identifier: 27:40:EB:E4:E5:26:D1:6F:A6:F0:45:E5:99:10:79:B8:91:B4:49:6A
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019FAAF583883AE367FDC3CE7715021B42B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 1183
Signing time: Tue 28 Jul 2026 23:00:44 +0000
Manifest this update: Tue 28 Jul 2026 23:00:44 +0000
Manifest next update: Wed 29 Jul 2026 23:00:44 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: Mqxn1xgpuJYQFtl0GydGkHU21wzVVf36JXKDkExXNNk=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:83:88:3a:e3:67:fd:c3:ce:77:15:02:1b:42:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jul 28 23:00:44 2026 GMT
Not After : Jul 29 23:00:44 2026 GMT
Subject: CN=2740ebe4e526d16fa6f045e5991079b891b4496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:35:da:5c:aa:1d:a4:a1:8e:ea:63:70:60:
a1:28:1f:1a:6c:69:1f:64:84:75:9d:68:b3:ac:ea:
ef:af:55:7a:62:a2:ef:43:c9:93:11:21:06:07:b6:
6d:59:34:6e:79:aa:a9:69:2a:a1:84:6f:a6:a2:e4:
82:e1:dc:5a:25:59:61:3c:79:db:2b:74:a5:3c:cb:
33:d9:27:ff:78:25:77:6c:dd:35:7c:23:78:f6:4b:
0e:77:77:a0:b9:8b:11:8b:d8:64:33:79:b6:4f:40:
a7:08:4d:ad:bf:af:5d:d2:db:da:81:60:f6:0e:2c:
42:db:3c:94:e5:1f:16:e1:24:0a:3f:f6:dc:c1:9a:
1f:c8:0b:29:e2:c5:e4:c4:5e:ac:ad:fe:06:d9:89:
9a:d8:6a:b3:bd:00:14:6d:be:10:2a:f0:66:6c:52:
54:c4:07:fb:6a:e8:99:e4:aa:d0:11:d6:2b:bb:36:
8c:23:8c:91:b5:13:75:26:1f:57:74:23:96:30:a9:
2a:c0:0b:8a:7a:d8:0a:74:90:ea:1f:e1:9f:3a:0e:
3b:c0:a6:b4:2c:4a:58:88:c6:86:a7:5f:68:f7:a9:
72:12:d8:ea:02:16:96:a3:1e:1e:3b:a7:b8:04:3b:
2b:1e:d5:4e:2f:10:3c:75:b1:53:9c:36:df:19:e0:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:40:EB:E4:E5:26:D1:6F:A6:F0:45:E5:99:10:79:B8:91:B4:49:6A
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:98:7f:6a:84:1c:b9:48:24:27:3d:e0:23:79:59:44:45:c7:
14:c6:da:b2:3f:95:f5:e4:01:33:4d:64:c2:83:20:00:3e:0e:
17:c0:64:8f:70:03:95:17:26:b2:5b:98:6c:ca:57:ff:79:cb:
a9:15:c1:b6:6f:b3:84:94:8c:c6:0f:71:99:d9:5c:c0:61:0d:
58:69:90:aa:75:76:ce:bf:76:21:ad:83:b3:c3:01:9b:63:6c:
01:3b:2d:d3:88:d9:d7:d7:45:ee:06:1c:85:06:e3:a5:b0:a3:
c8:d2:52:05:01:b8:05:93:60:35:02:2f:00:eb:03:ff:9d:49:
af:21:a0:b5:a0:6c:83:27:c0:a2:f0:98:bf:c6:2a:b8:d8:3b:
19:48:66:76:f0:d2:7a:47:1a:ed:ab:2e:07:a4:d8:d6:c4:74:
f4:f3:54:d3:31:67:7d:81:73:97:b0:64:c6:d1:b4:e7:e2:62:
58:cf:c4:cf:d1:9b:4a:32:fd:aa:b5:7b:ee:9b:bf:8e:bd:85:
2a:cd:14:47:63:25:60:f2:16:90:8c:33:02:17:8e:10:fb:f3:
55:1a:15:73:59:a0:04:5b:a8:dc:b0:e4:57:49:98:6a:ce:cb:
fb:4b:d8:42:3d:17:48:cf:ed:f7:c3:d9:ec:ce:a3:ff:e4:dc:
0e:d4:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:15:58 2026 by rpki-client