Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: lqY8h2nxc8vAJ/X+1t0cl68GYv2855CH1qBbWCo59xs=
Subject key identifier: EF:8E:ED:78:C8:5E:56:79:B0:68:C4:35:AD:CB:77:45:48:21:4B:8C
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01A1E096223B14F0C3D7C282F43E83B183E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 19A4
Signing time: Sun 15 Nov 2026 19:01:37 +0000
Manifest this update: Sun 15 Nov 2026 19:01:37 +0000
Manifest next update: Mon 16 Nov 2026 19:01:37 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: PcNyC8K6s4MFbnQ9mIDAVpTg8Dr4fi8iBS87bFV6z0s=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:96:22:3b:14:f0:c3:d7:c2:82:f4:3e:83:b1:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Nov 15 19:01:37 2026 GMT
Not After : Nov 16 19:01:37 2026 GMT
Subject: CN=ef8eed78c85e5679b068c435adcb774548214b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:60:d0:58:02:d7:a9:d1:33:5b:47:f8:dc:
99:7c:d7:65:91:76:5e:02:e8:6b:d4:91:f6:dc:0f:
e3:a6:0f:6f:40:67:94:1a:9b:27:ed:22:7c:67:29:
b4:ad:13:4d:ae:8e:b7:38:1f:41:94:50:89:41:47:
02:e0:2b:22:70:b7:67:52:a2:51:46:3d:c8:be:2f:
d8:65:44:46:a8:cb:4a:c1:51:f7:2b:d2:59:49:c2:
16:1b:c8:f1:73:55:8c:d6:df:2e:8b:ea:53:d4:19:
b7:fb:82:69:da:4c:27:ea:7e:58:ca:3f:26:c0:38:
fb:3a:9b:94:70:4c:98:52:cf:bb:b7:69:54:73:5a:
ec:8a:b5:da:15:e2:cf:c3:bc:b9:d3:6d:af:41:f9:
4f:f7:1b:6e:48:d3:e2:1a:60:31:e8:c3:b3:4a:1f:
fb:0d:15:bc:01:db:33:e7:6d:84:92:cc:df:53:51:
a2:3b:09:26:57:94:6e:85:3a:9f:cf:46:ad:cd:34:
de:5d:6e:43:67:c3:d9:7d:61:a2:61:35:d6:73:81:
43:ff:86:a1:f2:b2:3c:6d:20:92:85:1d:c9:39:bd:
18:bd:4c:18:92:f7:4b:01:ae:70:18:12:ad:d6:0d:
54:ef:f4:90:d8:25:73:d5:73:6b:45:84:64:2d:ea:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:ED:78:C8:5E:56:79:B0:68:C4:35:AD:CB:77:45:48:21:4B:8C
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:60:32:34:0b:b9:60:16:c9:0e:da:86:0d:a4:f6:16:23:ab:
00:00:52:e7:cd:4a:7b:c5:fe:a0:d9:fc:e2:fe:08:6f:e0:e3:
fa:84:0d:da:c2:3d:05:40:4d:28:c9:b2:46:24:40:03:5d:52:
a4:98:25:0a:59:51:73:99:81:ed:c3:7a:30:6a:7f:75:a0:22:
f6:e4:d3:51:76:16:37:cd:0a:a6:ab:57:23:93:da:2f:eb:b8:
be:f3:ae:03:90:9a:40:1e:35:66:0e:4d:56:fc:49:0a:f3:1f:
2d:8f:64:7d:93:49:26:20:52:92:9a:8c:44:35:d4:d8:cb:c2:
ff:86:01:87:34:88:56:bf:e1:da:45:9a:36:45:53:a7:74:65:
f7:bf:be:bd:56:5d:2e:f8:4c:02:6e:52:0f:2e:5d:d8:52:b3:
31:aa:45:61:81:06:16:6c:d1:94:38:c4:20:44:77:d3:4b:f6:
23:39:77:32:56:20:14:dd:4d:7d:f2:36:5d:77:67:d3:3d:bf:
3f:58:94:85:53:93:8a:ee:54:f2:f1:97:07:d9:69:3d:bf:5e:
59:f2:a4:e5:6b:c4:41:c2:e4:ca:30:8f:a6:43:48:fc:05:26:
08:3f:2d:7b:54:9d:52:cd:be:09:1a:7c:00:c4:fb:81:84:cf:
fc:b4:9e:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgliI7FPDD18KC9D6DsYPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh
M2JhODYwHhcNMjYxMTE1MTkwMTM3WhcNMjYxMTE2MTkwMTM3WjAzMTEwLwYDVQQD
EyhlZjhlZWQ3OGM4NWU1Njc5YjA2OGM0MzVhZGNiNzc0NTQ4MjE0YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIBg0FgC16nRM1tH+NyZfNdlkXZe
Auhr1JH23A/jpg9vQGeUGpsn7SJ8Zym0rRNNro63OB9BlFCJQUcC4CsicLdnUqJR
Rj3Ivi/YZURGqMtKwVH3K9JZScIWG8jxc1WM1t8ui+pT1Bm3+4Jp2kwn6n5Yyj8m
wDj7OpuUcEyYUs+7t2lUc1rsirXaFeLPw7y5022vQflP9xtuSNPiGmAx6MOzSh/7
DRW8Adsz522EkszfU1GiOwkmV5RuhTqfz0atzTTeXW5DZ8PZfWGiYTXWc4FD/4ah
8rI8bSCShR3JOb0YvUwYkvdLAa5wGBKt1g1U7/SQ2CVz1XNrRYRkLepn7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+O7XjIXlZ5sGjENa3Ld0VIIUuMMB8GA1UdIwQY
MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt
MzJmZWViNTY2ZWU2LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2
LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2AyNAu5
YBbJDtqGDaT2FiOrAABS581Ke8X+oNn84v4Ib+Dj+oQN2sI9BUBNKMmyRiRAA11S
pJglCllRc5mB7cN6MGp/daAi9uTTUXYWN80KpqtXI5PaL+u4vvOuA5CaQB41Zg5N
VvxJCvMfLY9kfZNJJiBSkpqMRDXU2MvC/4YBhzSIVr/h2kWaNkVTp3Rl97++vVZd
LvhMAm5SDy5d2FKzMapFYYEGFmzRlDjEIER300v2Izl3MlYgFN1NffI2XXdn0z2/
P1iUhVOTiu5U8vGXB9lpPb9eWfKk5WvEQcLkyjCPpkNI/AUmCD8te1SdUs2+CRp8
AMT7gYTP/LSe9A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:47 2026 by rpki-client