Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: cjLgGyOgfs3bbPWqF+ORTrMXOjxynJjrcXzIWANR6bQ=
Subject key identifier: D2:37:76:C3:B0:E8:E2:6F:F5:64:66:D2:4C:21:CD:AA:BE:8F:E7:90
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019CAC10042AAE70972E066EBCC86D33B99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 16F2
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: +7sFJQ0uJWgQvBG+BjXuuacxJDANxFUBcVHQa0oZkXA=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:04:2a:ae:70:97:2e:06:6e:bc:c8:6d:33:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=d23776c3b0e8e26ff56466d24c21cdaabe8fe790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:a5:5c:d7:e7:66:6e:aa:09:fb:8f:50:68:
62:8c:0f:91:55:b0:9c:b7:79:b3:8d:cd:28:08:a9:
0d:66:ec:83:b6:f7:94:61:0f:0b:f4:7c:33:95:45:
67:13:ae:7c:73:1b:32:c8:17:f1:75:f1:05:ef:17:
5a:e5:f1:52:2f:93:ac:7d:9e:2c:4e:ff:ea:49:e1:
7a:40:a6:2e:e2:90:58:84:19:c6:b9:45:5c:6e:cf:
cf:a4:f9:21:fd:82:36:76:b5:2b:0e:f6:13:60:3b:
6c:e8:d7:9f:4f:69:b8:a9:a2:de:e3:f6:0e:fc:94:
78:10:22:7f:d4:3e:fc:d1:6f:8b:18:76:47:c2:0f:
f9:24:79:91:1b:e0:a9:ae:a3:95:cc:4d:66:11:20:
cd:0e:a4:8a:4e:cd:8b:29:f0:96:a8:6b:fa:99:e1:
c5:b0:48:11:44:55:9c:91:bf:15:70:03:6d:54:03:
14:4a:1d:d9:53:dc:2d:47:36:da:2e:5a:70:64:d6:
18:6b:4a:11:5f:84:df:3e:3f:92:fb:fe:3e:67:ad:
53:da:86:77:79:8a:ab:49:1c:56:2b:80:bb:45:42:
02:f6:a8:31:9a:86:d3:e6:90:fa:fd:f3:66:d1:ee:
d0:ec:1c:43:e3:c6:23:68:45:d8:ab:7f:0b:3c:ed:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:76:C3:B0:E8:E2:6F:F5:64:66:D2:4C:21:CD:AA:BE:8F:E7:90
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:88:24:ba:48:92:1c:c1:95:50:65:9b:7e:aa:e5:e6:6a:6f:
62:16:99:66:69:a0:d3:b3:1b:3c:36:81:6c:ea:7c:13:37:9c:
e8:95:e4:21:0a:2f:c5:07:82:9d:01:64:9b:78:07:2d:36:22:
18:d6:41:7c:dd:03:59:63:a1:36:bc:ba:15:6b:b4:b7:c7:59:
5e:0b:ba:f4:03:27:73:ca:3d:00:08:34:6b:27:3e:a2:b3:06:
c4:32:f2:69:03:5c:2e:3b:b3:78:03:b6:69:4e:f3:86:a6:fc:
c3:05:87:d4:47:64:67:98:67:45:a3:57:ad:cf:ca:e3:9f:5b:
92:7a:e6:9b:3d:95:6c:d5:91:4f:fa:51:c4:24:7f:61:5e:63:
9d:cf:43:f9:00:a0:53:f9:53:7b:bf:15:35:c8:67:23:54:38:
74:6e:83:fb:a8:6b:af:c0:64:49:d0:4d:d9:61:f0:48:60:68:
43:92:9d:5d:dc:b3:5c:0f:1c:19:f7:38:0a:57:5c:95:05:9c:
c1:39:d3:f3:c3:02:fd:3b:54:53:1d:7e:c4:80:05:2f:7f:95:
f0:39:c3:1b:08:c3:bb:47:38:55:38:06:f7:5e:7b:8d:b4:d5:
c1:9a:5f:03:32:76:df:bc:58:4d:82:d7:e8:95:ff:f2:a4:f6:
e4:0c:56:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:44 2026 by rpki-client