Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: vZlLzjg5jYN5JRgxyGyXPG4F8bKvLl3Oy9RXSCVBMGY=
Subject key identifier: 88:D9:3B:27:2C:26:A4:BB:89:F1:F7:2D:74:74:82:10:4A:4A:01:2D
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 01A0E81C46C4C4EDFAD8A4518B051E61C0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 13:02:42 +0000
Manifest this update: Mon 28 Sep 2026 13:02:42 +0000
Manifest next update: Tue 29 Sep 2026 13:02:42 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: e5fnqpf+SIExPUnYw6bOeU2eKU/s6kPcu+2pMp7FtFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:46:c4:c4:ed:fa:d8:a4:51:8b:05:1e:61:c0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Sep 28 13:02:42 2026 GMT
Not After : Sep 29 13:02:42 2026 GMT
Subject: CN=88d93b272c26a4bb89f1f72d747482104a4a012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:30:21:ab:12:a0:60:4f:5f:12:69:5f:a4:
5f:d8:5a:73:d3:77:73:fc:88:a4:d4:64:c1:7b:bd:
f1:f9:4a:c7:16:73:5e:87:3c:d9:03:e6:7a:01:62:
20:3d:ba:88:12:89:48:e1:1d:7f:41:c3:f4:24:aa:
38:5b:d3:8d:a0:e1:df:9c:48:c9:ad:ef:23:80:ce:
51:a7:69:55:6c:2c:0b:80:03:36:af:a4:14:4c:b6:
cf:91:46:d2:e3:29:f0:5c:da:65:b7:d7:dc:ff:c5:
57:99:a7:40:0f:67:9c:c8:ca:1b:20:e4:eb:4e:c3:
30:99:e3:57:0d:9d:c3:34:a8:20:8e:1d:cc:1c:55:
a0:9b:32:fa:5d:05:87:fd:22:e3:42:dd:6c:5c:21:
4d:06:51:33:8a:00:1d:11:11:7c:39:05:48:23:5d:
0b:bb:fa:0b:c0:b1:2c:5b:d8:af:f9:ed:dd:45:80:
cb:ad:80:85:f3:8e:15:e4:0f:5d:06:60:d7:34:5a:
8b:44:d6:5d:54:b9:12:fe:8b:28:4a:28:f3:91:3f:
be:0d:4a:0d:5d:1b:ba:c1:56:66:f9:1c:88:d8:5c:
8e:73:a1:82:2e:25:ec:16:cb:ff:d6:5e:aa:78:bc:
6c:d3:c4:b3:99:4d:54:89:65:6e:b9:30:66:1e:99:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:3B:27:2C:26:A4:BB:89:F1:F7:2D:74:74:82:10:4A:4A:01:2D
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:ec:d9:9c:c5:aa:43:fe:42:49:6d:4b:33:9a:f3:5f:87:
e1:98:40:63:48:f8:09:02:74:ba:88:13:f6:4b:2e:4a:1e:f6:
dd:69:2e:cd:dc:36:7e:28:53:3a:f6:ea:9f:53:84:4f:07:0e:
5c:fd:f8:8a:47:1e:c4:d8:1f:02:15:8d:fa:c7:27:e1:c3:57:
ec:65:3d:40:f9:3b:57:9f:2d:42:a3:bd:0c:5c:89:c3:95:e7:
3c:35:10:d4:a9:ee:bd:e4:e9:b1:80:61:e3:95:d4:03:ae:4a:
47:b7:d9:2a:2e:c7:7f:3b:38:5a:22:de:9b:7d:2c:93:5e:ca:
8b:a5:71:da:a7:f0:a1:c9:3a:b5:80:41:29:b5:ea:3c:da:58:
78:23:c1:34:58:be:ce:c8:38:24:c9:7e:82:9e:74:1d:cd:cd:
eb:4c:f7:aa:86:e2:a9:81:00:5f:71:a8:f8:7c:7f:92:eb:e5:
be:84:92:2f:34:18:c8:bc:b1:23:5b:0b:d9:fa:98:c5:03:27:
89:60:b6:7b:a3:56:27:11:ba:8b:9a:5a:b9:5b:1e:8c:7c:0c:
3f:33:ae:a3:9e:df:23:af:a2:d8:ba:b2:7e:5f:5c:49:26:48:
44:02:a1:36:9b:5c:c7:2a:85:46:a6:18:2f:4b:31:49:6e:48:
35:8b:c6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:35:54 2026 by rpki-client