Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: UHZuZZbk/5ye32XJbobB5e1S6HAt1CNBrNyJ2/HDq+8=
Subject key identifier: 59:26:D6:9D:3A:93:5F:D5:19:70:11:3B:5C:32:6B:CB:7E:A8:A4:F7
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019CAAFCFE174A2596D86B7CADC9B819B961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: d31HhZQVtzHwzrWIPKUgHQrqrBHMgrn6lyPaYc3I48k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fe:17:4a:25:96:d8:6b:7c:ad:c9:b8:19:b9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=5926d69d3a935fd51970113b5c326bcb7ea8a4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:27:65:ef:8a:ed:f7:f3:90:5b:b7:4a:7a:
f2:ad:09:d1:48:30:ee:57:6d:d3:c3:2f:77:b8:17:
69:9c:1c:4c:c2:a9:61:cb:07:5b:a3:8e:29:f2:18:
64:63:d8:df:42:45:97:c4:b0:19:7c:60:a5:e9:d8:
b9:8d:17:04:1f:0b:c3:0d:57:cd:0f:69:26:13:d0:
16:4d:dc:df:97:3a:45:21:5c:53:91:f6:4b:b0:45:
3e:1b:58:9b:2f:08:c9:1e:59:ac:82:b0:c2:0f:cc:
bf:e6:62:69:c5:8b:f9:14:b7:a4:f5:67:17:8f:f3:
58:48:b8:b8:06:e3:78:12:25:b6:16:33:67:c7:2a:
14:99:a4:6a:b8:d4:3a:e9:b9:df:75:70:fa:7b:3d:
66:27:b6:a1:49:6c:e3:db:e6:2a:26:b5:3d:05:e9:
10:12:b5:84:6f:a7:f0:d2:f4:70:31:4a:91:11:06:
e7:d6:60:6b:2d:39:02:d7:5c:b5:35:1b:c1:77:db:
7f:a0:5c:03:a8:ea:86:7e:4f:b4:a5:a8:a6:60:31:
a0:c7:5c:e4:df:04:9e:4a:5f:85:78:82:00:9c:fb:
90:28:6d:8c:a8:cd:31:27:34:31:93:7f:a1:64:77:
cd:12:e5:b2:0b:26:71:39:e9:10:38:2e:9e:3f:d8:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:D6:9D:3A:93:5F:D5:19:70:11:3B:5C:32:6B:CB:7E:A8:A4:F7
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:c0:2a:0a:a0:75:ed:db:fc:41:46:a9:8c:9f:de:21:62:
9c:39:7c:0e:05:bd:41:78:41:fa:23:6c:83:ab:a9:d1:37:32:
fe:a9:a6:ea:09:b8:5e:63:02:69:b5:05:75:55:18:fd:f8:43:
89:81:24:ce:56:ff:77:30:f7:0f:f4:fb:a7:21:51:f3:2e:18:
1b:2f:95:2c:0f:94:88:48:02:d0:08:a8:cb:aa:51:46:7d:63:
1d:b1:a3:94:b8:d7:e1:e8:6b:ce:84:9b:2a:8f:0c:59:e0:64:
f9:75:0f:96:36:0e:05:82:74:6c:54:ce:41:11:0b:4f:53:46:
43:c5:d9:0c:d3:b2:24:ac:24:54:27:39:9f:ed:51:84:0f:9d:
85:f4:6d:b7:30:52:c4:5a:f8:12:f8:51:46:c5:e6:09:28:4b:
c8:57:3c:fe:4a:11:06:5f:4a:6b:8f:80:d1:8e:3c:dc:0c:45:
0f:ce:64:96:a7:e6:91:b4:e2:86:ae:ac:b9:6e:5c:3c:72:0e:
38:16:5d:f2:c5:07:67:58:ba:02:22:d1:7c:cc:05:79:af:ed:
9d:a3:81:a0:6e:f3:dd:18:7f:3b:bb:97:9c:f8:7c:b4:91:27:
1a:ed:ce:23:3b:4a:30:63:ba:d4:f4:37:2b:66:9e:e4:d4:24:
19:a0:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:44 2026 by rpki-client