
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: i5xKv/DnbIubZPv0DNdRHTRdICkKYgvGJmUn4EI9/6I=
Subject key identifier: E4:B0:C1:AF:57:79:6F:8A:2D:68:D7:5F:D7:C4:7B:95:33:C9:B9:D1
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019CAAC63ECD1EA93EB2E31EF9552BF2ADF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: ZisHjWMqvMGgUUko1SAVKq45nihKUwGzmJil0Wsr7/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3e:cd:1e:a9:3e:b2:e3:1e:f9:55:2b:f2:ad:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=e4b0c1af57796f8a2d68d75fd7c47b9533c9b9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:88:2a:13:15:de:34:9f:6b:ab:c8:19:80:
cd:f2:80:f7:77:e6:43:a0:8a:63:88:8c:6e:2f:19:
e0:cc:c1:9a:88:38:f8:09:e5:2e:a0:62:ac:32:18:
c2:ad:a2:5b:37:b1:97:63:10:ad:93:6a:cb:1e:3a:
f6:7f:aa:78:95:f4:19:31:3b:bb:7a:8a:c3:61:8d:
49:b3:f2:39:af:25:82:42:81:11:5b:9d:40:76:87:
17:fe:20:e6:f3:cf:a6:24:fd:ea:64:ac:09:cd:9a:
11:fb:30:bd:8e:7e:53:89:74:89:fb:6b:f3:3e:7f:
71:a9:c1:92:fb:c3:ef:1d:39:67:4d:1f:25:03:82:
33:bc:d8:eb:19:13:c0:fa:f9:bb:a4:37:2a:41:a0:
e2:a2:44:41:89:90:6e:f6:10:9c:2d:00:f8:be:b6:
00:63:43:b8:a6:e3:36:d2:b7:37:98:7b:e3:b7:89:
0e:32:e1:5a:ae:fc:f1:ab:82:36:74:0a:77:bd:9e:
ff:de:c9:c0:57:72:5b:b9:5d:f7:e2:61:50:af:6b:
3b:dc:88:71:40:bf:98:6f:be:dc:aa:46:41:2a:81:
2e:f6:5b:e5:fa:bd:c7:d2:d6:6a:57:f0:2b:96:48:
aa:68:1d:d8:8b:40:81:dd:86:92:46:f2:4b:f0:ad:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B0:C1:AF:57:79:6F:8A:2D:68:D7:5F:D7:C4:7B:95:33:C9:B9:D1
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:61:65:e2:fb:47:ee:fd:65:ee:48:3d:97:c8:d2:b8:a3:a4:
06:1b:cc:10:cc:4d:00:99:66:f8:dd:d0:d9:58:2c:c2:ba:00:
59:5a:d7:fe:83:59:43:9c:6b:82:fc:c3:23:fc:1f:e9:2f:dc:
f8:62:ad:dc:df:4f:6d:77:b2:14:ba:57:4c:d7:7e:91:e2:6e:
c9:b5:74:2d:44:d1:a0:00:29:08:28:58:53:b4:c3:e4:af:31:
db:ad:64:54:ff:ef:d3:a6:78:fd:3b:45:59:cd:dd:3f:87:93:
17:6e:e2:54:17:5e:31:38:9f:f0:b0:d2:2e:03:3a:f2:1f:1a:
8b:1c:bd:9b:8c:58:57:c3:ce:38:15:2d:45:ce:93:7f:2a:c5:
68:b7:5a:0a:ac:fe:c5:18:b7:0d:b7:9a:2d:99:8a:a9:88:55:
35:6b:51:54:0c:78:a6:ba:10:c3:82:6d:bc:24:74:f7:5a:56:
5a:ca:00:22:a4:95:cd:62:4e:59:ac:63:3d:82:87:a0:55:80:
e0:41:57:e9:3e:1c:de:d1:bd:e5:c7:01:79:0d:ee:36:8f:7f:
46:d4:8d:18:9c:07:62:fc:37:56:8e:88:4f:03:ef:8d:57:7e:
97:0c:a9:69:ff:d6:47:2c:9f:88:a0:fd:5d:7f:c4:34:a4:84:
9a:b5:39:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:32 2026 by rpki-client