Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: XyfA4WxpIu0r+xwohQDR4uHiNKTCNndAhhI8q8WFKW0=
Subject key identifier: 56:F6:CE:FF:DF:D2:EA:9B:26:1C:63:10:D8:FA:07:19:57:F6:1E:2F
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019CAA219F96C2A290367BF50F58B55A8342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 16F1
Signing time: Sun 01 Mar 2026 16:00:56 +0000
Manifest this update: Sun 01 Mar 2026 16:00:56 +0000
Manifest next update: Mon 02 Mar 2026 16:00:56 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: bc8Dx99Vp9DXvRCB222dPqlPrT1mRO8RSOYEs15/ISU=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:9f:96:c2:a2:90:36:7b:f5:0f:58:b5:5a:83:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Mar 1 16:00:56 2026 GMT
Not After : Mar 2 16:00:56 2026 GMT
Subject: CN=56f6ceffdfd2ea9b261c6310d8fa071957f61e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:47:c2:6e:e3:fd:0e:4c:11:80:91:e7:25:
9e:57:49:4a:7a:f8:bf:f0:b3:a0:e4:e3:5f:66:26:
11:d8:23:49:d3:c6:f8:06:39:57:ee:0b:d8:ed:4c:
24:f9:e9:83:60:3a:eb:ac:b4:9b:ca:c5:a1:67:29:
a4:e9:b7:09:cb:46:be:b8:fe:8f:8f:7d:9c:df:71:
b2:06:ff:d6:42:6f:3d:4c:8d:0c:5c:59:34:6b:e4:
da:f2:14:a4:42:7b:dd:9d:7e:47:2d:fb:b9:5e:5e:
b0:4c:49:a5:25:7d:2e:e6:4f:b7:45:c4:41:c1:fb:
f7:6a:66:d5:5b:23:68:e7:95:8c:69:37:82:1d:ae:
b0:44:44:90:94:ab:88:ab:a0:02:8b:25:9c:cb:a1:
29:9f:bf:8a:b5:ee:2f:de:b1:4d:a0:b5:92:24:f4:
e3:48:ae:95:2b:39:c6:68:69:4e:6c:40:ad:e8:2a:
63:43:8e:31:9d:da:8e:a1:af:86:75:7c:f9:3a:f6:
84:b4:bb:dd:65:55:b5:f5:74:43:6e:50:6b:3f:07:
80:81:f5:38:f3:19:87:93:45:d9:06:a6:c1:07:ad:
00:12:46:72:d9:02:6d:f6:e7:a4:4c:c8:83:81:5e:
e7:d5:fc:ba:ca:79:e8:c5:32:4f:4f:d1:1c:9c:d0:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F6:CE:FF:DF:D2:EA:9B:26:1C:63:10:D8:FA:07:19:57:F6:1E:2F
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:57:4c:21:2c:59:59:bc:5c:3a:04:15:b4:84:6b:bc:29:64:
ff:ec:27:84:a0:f9:c1:c8:af:52:62:9b:e5:0a:4a:81:fa:e2:
45:f2:8e:6d:d5:75:30:d4:c9:9d:92:21:bf:a2:0e:b0:8e:14:
96:4e:b6:1a:b5:fb:71:40:12:44:35:80:72:be:70:54:77:bd:
c4:e2:9a:77:8e:50:db:a9:09:71:c2:f9:96:ee:0e:fb:fa:a6:
51:40:67:2c:ea:bd:19:1a:30:c4:9f:28:f2:d5:27:e3:ae:de:
98:bd:c8:50:a7:df:9f:01:55:17:d9:d5:0e:50:b7:54:b9:f2:
a3:5e:5d:7b:57:a0:4c:e9:89:d2:1e:23:63:dc:6d:2d:6d:4a:
8a:08:ac:45:7d:28:cd:b5:d5:66:6b:39:ff:a4:0e:43:c5:14:
b1:fc:ef:83:23:e5:ce:fc:29:96:aa:b2:a9:ef:9f:2d:42:62:
71:2e:81:59:a6:a3:f1:d7:ed:38:10:f2:8e:b5:a3:14:d4:d7:
1c:f4:2b:18:fa:5f:17:2c:82:67:64:c7:bc:33:cb:b8:4b:bb:
04:dd:33:5c:3c:62:63:e6:20:29:1a:eb:07:13:61:a8:18:3c:
d2:50:71:99:f3:ce:d2:c6:fb:b7:df:fa:0f:b2:38:ff:20:63:
d3:a5:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:37 2026 by rpki-client