Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: ONLDfTWHQnd0DKBwtCESgPMjGcETqJ8wIsHfCNXTbRA=
Subject key identifier: 7F:10:12:48:E6:9B:C2:78:79:ED:6B:A9:BD:2F:1C:A0:67:AE:5E:73
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019D99992981CC2CBEAA23C8824785AD07DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 176D
Signing time: Fri 17 Apr 2026 04:00:44 +0000
Manifest this update: Fri 17 Apr 2026 04:00:44 +0000
Manifest next update: Sat 18 Apr 2026 04:00:44 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: j5fUaIpVmhFARbKBT/QATzWPlBdZv0IzlgSiULPO/ps=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:29:81:cc:2c:be:aa:23:c8:82:47:85:ad:07:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Apr 17 04:00:44 2026 GMT
Not After : Apr 18 04:00:44 2026 GMT
Subject: CN=7f101248e69bc27879ed6ba9bd2f1ca067ae5e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:20:b8:69:6c:88:f2:a3:86:54:d6:97:5e:
d9:fa:ef:0b:6d:e3:b4:6f:68:ad:27:a6:23:16:d3:
0f:53:d7:10:d9:12:a9:86:b8:25:d4:1a:0f:02:63:
db:a5:76:b9:f9:b0:89:c5:2b:75:fc:a9:cc:3f:66:
4a:19:2e:5f:c4:3f:f3:60:63:5c:5e:c5:22:a7:eb:
49:30:14:1b:2d:5a:73:d9:44:46:4e:ff:a7:e0:14:
7d:96:c5:8b:77:f9:81:f6:fb:7f:45:76:24:bd:44:
cc:54:a8:8b:8d:6f:f7:bc:ae:d4:01:48:6f:9d:57:
08:59:e2:31:97:1f:bb:11:8b:91:5b:91:98:4d:34:
86:b5:cd:09:19:72:86:1d:5a:a8:09:98:f5:b2:fa:
30:22:7e:d2:dc:be:76:22:42:e9:85:38:64:ae:41:
f3:f1:be:e4:3e:46:8a:e9:c7:57:2f:32:84:79:19:
33:8e:9b:ca:db:91:98:e3:f2:70:31:98:3c:4e:c1:
3f:44:85:95:da:8f:00:58:df:3e:fa:c9:96:d6:0e:
29:8e:13:83:2a:53:39:e9:fc:05:b5:d8:75:cc:ed:
44:da:23:f3:75:fc:b2:5d:ac:51:ea:aa:38:8c:ef:
bd:14:8d:33:4d:e1:40:db:cb:7a:ad:d0:f5:ae:76:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:12:48:E6:9B:C2:78:79:ED:6B:A9:BD:2F:1C:A0:67:AE:5E:73
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:48:7d:97:fa:b6:05:3b:4b:18:ca:de:3f:5e:e5:94:77:47:
e9:4a:57:8e:d3:9f:d1:1e:95:02:28:e2:07:e2:aa:1b:4c:f5:
82:50:bd:83:f3:2d:16:77:b2:d2:42:13:db:21:01:91:47:f8:
e6:f0:60:39:23:7a:24:de:84:19:53:5c:03:dd:8b:b2:f2:4b:
cc:f1:d5:61:f3:cc:a0:95:6d:aa:59:30:52:3e:b7:f4:4e:bc:
97:98:2e:b5:7e:69:9c:73:d0:01:0c:64:ba:17:df:48:1d:0e:
bd:ef:e2:43:37:28:7a:18:1f:e9:3f:a7:b0:88:8f:f8:20:96:
4a:40:69:fa:8a:24:0b:1c:7a:10:7e:25:20:29:dd:0a:82:de:
06:7b:66:3d:cb:17:50:8e:dd:c2:8e:e5:c6:1b:6d:81:09:ea:
29:dd:0f:9b:ea:21:41:fb:4d:39:13:97:1d:48:95:55:4a:da:
72:61:20:b2:01:78:e9:6e:a8:f3:0f:ca:1e:b9:73:81:d0:57:
4d:51:84:9c:11:47:9c:b8:c9:7b:06:6b:dd:01:19:fe:9c:12:
ac:a3:3b:3b:03:91:82:da:83:aa:41:0f:f1:b2:8f:c4:d9:f3:
a3:25:ba:73:06:db:08:2a:fd:4c:38:33:45:09:5f:49:24:20:
dd:0e:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:47 2026 by rpki-client