Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: Q2ItVDQyCqU6hnz0Si8fiStusP1lFuRAJVtPofYJH70=
Subject key identifier: 33:05:96:BE:03:24:C9:ED:D2:50:02:5D:A8:81:CE:FE:28:D9:D0:BA
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019FA8D067428D73CC54E5A7C99071950013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 187E
Signing time: Tue 28 Jul 2026 13:00:57 +0000
Manifest this update: Tue 28 Jul 2026 13:00:57 +0000
Manifest next update: Wed 29 Jul 2026 13:00:57 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: ALVGIgG6W+hJyXuj1AaiW0qspYa0NZ+RSJqzZwx2Wmc=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:67:42:8d:73:cc:54:e5:a7:c9:90:71:95:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jul 28 13:00:57 2026 GMT
Not After : Jul 29 13:00:57 2026 GMT
Subject: CN=330596be0324c9edd250025da881cefe28d9d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:f5:68:55:33:6c:c2:fd:88:fd:9f:9b:eb:
78:1d:a4:1d:93:78:1d:98:ee:d2:67:a1:79:02:34:
cf:a9:4f:71:08:a0:6f:44:a4:0d:43:fc:a8:b9:dd:
27:4f:63:b6:64:9f:60:fa:19:7d:98:ea:5d:0f:2b:
d6:46:4a:16:75:5f:09:75:2a:6c:f9:c9:dd:9d:af:
c4:70:cb:60:f8:4a:40:29:74:a5:20:55:44:85:e3:
80:60:4c:8c:b3:28:5a:cc:08:2d:69:fa:31:9f:ff:
6c:8f:2f:46:b0:95:93:fb:75:d0:fb:e0:08:d0:bf:
b4:3a:72:72:86:20:45:bb:ff:fb:a9:9a:92:db:77:
39:93:87:80:2d:85:1a:5b:51:23:8c:17:17:35:f7:
58:2d:d3:cc:e6:d4:23:07:1e:fd:9e:ab:be:6d:7e:
7c:93:0e:d2:1f:1b:a3:4c:86:0d:98:4b:a1:09:63:
03:e2:44:a0:48:e1:71:a3:aa:dc:7a:44:28:d5:e6:
a7:bd:f6:63:bd:34:15:94:04:01:c6:26:6f:e3:87:
54:9c:ce:ec:89:8b:7d:d6:a6:7b:26:d1:77:08:c5:
49:1b:ee:a9:7c:4d:4f:d9:a2:bc:21:97:3b:ce:0d:
b7:29:ae:77:64:16:44:8c:81:cd:01:b6:51:c9:4d:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:96:BE:03:24:C9:ED:D2:50:02:5D:A8:81:CE:FE:28:D9:D0:BA
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5e:2b:ce:88:62:9b:f5:b5:51:29:61:f0:d4:2a:15:47:7d:
f5:08:d9:92:f5:f8:3e:69:fb:e8:dc:96:32:b5:15:86:fb:f1:
d3:96:01:93:b3:98:c5:5d:de:26:96:bf:38:0b:47:40:97:ed:
f0:b2:46:f0:6f:ce:82:10:22:f1:48:0e:bb:db:10:53:75:34:
e7:61:dd:fd:41:e5:04:87:4b:87:73:ce:c3:e2:ed:24:34:74:
83:c1:2f:55:38:3c:9a:15:aa:47:98:40:fd:d7:68:ab:c8:ee:
ad:71:dd:ab:6c:62:24:05:de:7c:22:cf:99:d8:8d:97:df:24:
79:29:92:90:94:c6:85:cb:2b:82:6c:90:e5:ea:8e:b4:fa:28:
5d:1f:81:bc:62:55:c1:63:5d:90:13:e9:41:91:dd:16:d2:57:
ef:d7:87:fe:74:21:06:b1:11:a9:03:25:de:64:9b:6a:ce:cd:
2a:f6:b4:ef:14:70:64:16:fe:4b:fd:63:f3:1b:87:69:4d:97:
6b:ba:13:fa:3c:ee:ff:78:47:5e:65:7e:fd:2b:ca:f5:dc:b6:
a9:e4:04:b9:d6:62:4a:fe:92:82:84:69:df:57:d9:a2:22:41:
b4:2f:04:15:4e:a3:03:0a:d7:9a:3c:78:8a:5e:ad:1e:a2:24:
04:69:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:00 2026 by rpki-client