Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: SZZF4dNATZZU0RhG5s5lZpQI4hr08muT1pS7yDvnwQM=
Subject key identifier: CC:09:C9:41:33:18:40:43:4B:7E:63:50:0A:39:F3:6B:BC:12:83:AD
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019CAAC6F9BC6CF971E787751006A4E6FCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0F18
Signing time: Sun 01 Mar 2026 19:01:32 +0000
Manifest this update: Sun 01 Mar 2026 19:01:32 +0000
Manifest next update: Mon 02 Mar 2026 19:01:32 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: QW2P8YEwt347UsSsisMhTt6U4N4Hp0AsfZTxURDTg6A=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f9:bc:6c:f9:71:e7:87:75:10:06:a4:e6:fc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Mar 1 19:01:32 2026 GMT
Not After : Mar 2 19:01:32 2026 GMT
Subject: CN=cc09c941331840434b7e63500a39f36bbc1283ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:63:da:52:ea:ad:eb:10:3a:5b:81:01:a0:
d4:ac:c0:88:22:16:ed:21:6a:46:44:03:0c:72:7b:
b3:c8:ac:c0:5c:5b:8e:36:a6:d8:dc:c4:7f:c5:77:
23:81:a5:7d:c8:d7:ab:7f:7d:15:3a:07:90:27:76:
f0:64:76:5f:f4:5e:ad:19:a0:fb:84:f5:ad:87:fd:
00:a8:e6:9f:8f:ed:e5:ab:c8:9c:73:69:80:b5:c1:
26:03:17:6c:9f:9b:e8:65:60:52:0f:50:79:a1:21:
a0:24:5f:52:b6:14:69:fa:a8:53:ac:94:7a:e8:8b:
a6:3b:d3:b5:96:c1:63:f4:e6:20:b2:6d:a4:84:70:
a8:5a:2b:b4:d8:27:72:6f:21:20:4c:46:2b:cf:36:
16:3b:eb:ca:a2:7a:c3:8d:6f:83:10:74:ee:f0:2c:
be:11:fd:4e:b0:39:87:00:98:88:f8:89:53:f6:3f:
66:06:87:45:d5:e5:30:74:24:7d:27:46:46:08:1a:
aa:b4:8e:d6:6b:64:12:ce:e2:52:ae:0d:f1:83:5e:
dc:c7:75:0f:36:e6:4a:27:d2:67:a2:7b:6e:4e:1d:
30:26:d2:6e:65:93:41:56:2b:da:2b:dd:fa:bc:83:
1c:0c:f0:1d:16:7e:3e:83:eb:fb:e9:b8:53:33:14:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:09:C9:41:33:18:40:43:4B:7E:63:50:0A:39:F3:6B:BC:12:83:AD
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a8:0d:d1:33:18:b9:7b:fc:6b:41:d6:ea:ad:e8:68:de:1f:
4b:c8:42:15:4d:73:6e:2c:5d:1b:d0:22:96:06:aa:19:f5:46:
e2:5b:2f:07:2c:79:61:30:48:60:c0:35:6b:a1:ea:2f:ba:40:
81:84:40:27:0d:51:be:8f:25:8b:47:b9:6c:78:5d:49:f0:43:
e8:fa:70:46:6d:d5:34:81:1f:1e:8b:1f:70:5b:17:3f:15:8e:
f0:19:73:85:d7:06:35:c4:19:09:54:41:b2:9b:38:06:93:64:
0a:8f:d8:7a:e5:2a:6c:68:3d:83:cd:3f:51:25:da:bc:29:c6:
7c:ce:50:d1:62:78:bf:3a:8a:a4:51:69:67:02:08:d9:56:cc:
25:18:88:d6:b7:9e:a2:49:77:45:97:d2:a6:ca:73:08:1d:1c:
a7:31:81:58:e7:28:c0:1c:f4:cd:e3:61:b4:3d:5b:33:f8:46:
88:d2:6c:7e:57:2c:22:9a:23:3e:04:9a:0a:1e:b7:9c:78:58:
fa:4c:6a:b9:8c:8d:cc:26:5f:50:ef:cf:96:ff:a4:64:8e:45:
89:3f:19:cc:74:3a:fb:c2:6d:af:65:bb:d7:d5:db:26:a0:98:
a7:af:a8:55:15:37:5a:21:13:79:b2:4d:5f:c5:ea:ad:62:66:
64:3d:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:57 2026 by rpki-client