Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: 0ZJhn3EIRZv/E9bPUOxLwQBTkvi4Yg71UBxkcKp/5qE=
Subject key identifier: F7:CF:DD:B5:CF:5F:00:95:57:43:8A:B8:BF:C1:A3:8E:1C:42:D9:3C
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01A0BEE77458BB545D631850AE87D2AE99D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 190E
Signing time: Sun 20 Sep 2026 13:00:34 +0000
Manifest this update: Sun 20 Sep 2026 13:00:34 +0000
Manifest next update: Mon 21 Sep 2026 13:00:34 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: FkusuPwTBuoA/fy7nmEEpc7qyqyKoZJqNIgbsgFnH0o=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:74:58:bb:54:5d:63:18:50:ae:87:d2:ae:99:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Sep 20 13:00:34 2026 GMT
Not After : Sep 21 13:00:34 2026 GMT
Subject: CN=f7cfddb5cf5f009557438ab8bfc1a38e1c42d93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:37:c7:83:9e:54:f6:8e:f6:d9:7b:42:db:
67:d4:42:74:70:cc:3f:55:c1:c1:8b:7d:8a:fb:26:
98:a7:58:7c:32:92:08:f6:12:a1:8a:65:0b:45:d5:
cc:7d:69:76:2e:68:ff:b5:d0:db:eb:6c:a2:a2:9c:
f2:63:33:ed:20:29:41:7d:ee:e2:08:bc:86:8a:f5:
48:06:b5:22:76:c8:cf:61:0e:52:58:f6:94:25:4f:
5b:e6:60:e6:d9:55:4a:b9:1b:dd:59:b2:92:0e:5a:
f0:6b:fc:15:f2:7d:d5:ba:6f:e9:7a:60:59:66:72:
29:6a:9b:3e:42:32:c1:e3:a9:b1:83:59:80:46:a7:
7e:e1:19:cf:b8:81:63:3c:51:11:a3:bb:f2:53:7f:
c4:73:20:61:32:b7:0c:4a:55:be:16:86:23:3a:a1:
b1:13:ab:27:e3:13:ea:99:14:49:29:af:a0:66:fb:
b0:f2:f6:0e:94:00:84:6f:e6:d4:16:c4:9f:ed:81:
80:ed:37:06:28:d2:43:1d:34:4a:5c:d7:88:0f:8e:
7e:2c:4b:78:e8:c3:05:99:6a:7c:19:2c:98:3d:3b:
51:76:3e:1e:54:62:10:c6:74:e4:e6:cc:14:67:ac:
37:60:5f:7d:ae:ae:31:ba:23:6d:15:a1:7f:c7:cc:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:DD:B5:CF:5F:00:95:57:43:8A:B8:BF:C1:A3:8E:1C:42:D9:3C
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:08:7f:f8:52:38:c8:62:49:f7:69:9d:a5:5b:be:46:c7:
a2:03:e6:4e:e7:7d:79:86:a3:17:ab:66:1d:63:77:c2:ef:47:
42:dc:80:02:87:52:b1:94:fb:c9:a9:bb:7c:c9:98:95:d3:3d:
c8:80:b0:98:85:9c:d9:e6:34:5b:cd:6a:a0:6b:aa:58:f8:7a:
14:4c:9e:53:77:ec:94:64:e4:30:ae:f4:6e:36:03:46:8f:61:
38:d8:fd:75:82:5d:7c:49:de:0b:9a:73:31:c9:6f:d6:58:b6:
2d:4d:96:f7:76:47:57:9e:9a:bf:08:06:0e:b0:c7:54:d1:4a:
b8:fc:7b:fa:1d:4d:18:00:6b:50:52:11:2d:f9:8a:9a:78:d0:
11:7c:a1:4b:5b:ec:13:bb:9c:4d:c2:20:3c:de:be:e2:0b:fd:
6d:61:0f:f5:b3:ef:02:d7:19:3a:98:bd:7f:71:57:be:33:5a:
fd:0e:6f:37:b4:f5:ec:c6:97:01:ac:b0:a0:f2:2f:83:4f:98:
14:cb:44:a9:31:fe:14:4b:7e:1f:c0:30:de:af:4e:18:9a:c2:
6c:1d:c4:09:2e:73:12:6b:d2:98:05:00:a4:bf:df:69:da:82:
f8:3f:10:ac:5f:b8:ae:f1:65:3d:1e:cb:25:0a:47:6a:88:a4:
bf:d5:b9:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+53RYu1RdYxhQrofSrpnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh
M2JhODYwHhcNMjYwOTIwMTMwMDM0WhcNMjYwOTIxMTMwMDM0WjAzMTEwLwYDVQQD
EyhmN2NmZGRiNWNmNWYwMDk1NTc0MzhhYjhiZmMxYTM4ZTFjNDJkOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fA3x4OeVPaO9tl7Qttn1EJ0cMw/
VcHBi32K+yaYp1h8MpII9hKhimULRdXMfWl2Lmj/tdDb62yiopzyYzPtIClBfe7i
CLyGivVIBrUidsjPYQ5SWPaUJU9b5mDm2VVKuRvdWbKSDlrwa/wV8n3Vum/pemBZ
ZnIpaps+QjLB46mxg1mARqd+4RnPuIFjPFERo7vyU3/EcyBhMrcMSlW+FoYjOqGx
E6sn4xPqmRRJKa+gZvuw8vYOlACEb+bUFsSf7YGA7TcGKNJDHTRKXNeID45+LEt4
6MMFmWp8GSyYPTtRdj4eVGIQxnTk5swUZ6w3YF99rq4xuiNtFaF/x8xJIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfP3bXPXwCVV0OKuL/Bo44cQtk8MB8GA1UdIwQY
MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt
MzJmZWViNTY2ZWU2LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2
LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmEIf/hS
OMhiSfdpnaVbvkbHogPmTud9eYajF6tmHWN3wu9HQtyAAodSsZT7yam7fMmYldM9
yICwmIWc2eY0W81qoGuqWPh6FEyeU3fslGTkMK70bjYDRo9hONj9dYJdfEneC5pz
Mclv1li2LU2W93ZHV56avwgGDrDHVNFKuPx7+h1NGABrUFIRLfmKmnjQEXyhS1vs
E7ucTcIgPN6+4gv9bWEP9bPvAtcZOpi9f3FXvjNa/Q5vN7T17MaXAaywoPIvg0+Y
FMtEqTH+FEt+H8Aw3q9OGJrCbB3ECS5zEmvSmAUApL/fadqC+D8QrF+4rvFlPR7L
JQpHaoikv9W50Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:31:43 2026 by rpki-client