
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: tUENphK1BVUsZYhtstdf67E2IsPpd76axgwFg9Drmqs=
Subject key identifier: A7:14:7D:09:7B:10:D8:D4:1F:8C:37:4F:3F:8C:9F:3E:83:E9:5C:54
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 01A0D4CB005FF44E3AE1EC5BC5F49ACF7C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 1140
Signing time: Thu 24 Sep 2026 19:01:08 +0000
Manifest this update: Thu 24 Sep 2026 19:01:08 +0000
Manifest next update: Fri 25 Sep 2026 19:01:08 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: tI+gsg7nsyZn6IQ5n5rfv2pmU9/H1xBJPd2Zzqv3Hqg=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:00:5f:f4:4e:3a:e1:ec:5b:c5:f4:9a:cf:7c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Sep 24 19:01:08 2026 GMT
Not After : Sep 25 19:01:08 2026 GMT
Subject: CN=a7147d097b10d8d41f8c374f3f8c9f3e83e95c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:a1:a8:a9:a1:16:07:4e:aa:f9:ec:49:2d:
7d:c1:c4:d4:80:ff:79:5b:9f:80:71:dd:dc:c7:15:
92:78:9a:87:33:da:5d:84:39:fd:0d:6c:73:8b:2f:
9f:39:4d:19:09:ee:a4:18:0b:36:55:16:58:26:b8:
de:38:9b:d9:a0:c3:5d:78:fb:08:5a:8d:a4:5e:5b:
06:05:c1:29:a7:9f:a5:93:72:05:1a:60:db:d1:73:
ac:4b:6f:4a:bb:f6:80:34:3d:f4:d9:f2:79:f1:60:
53:41:33:20:75:1e:63:31:fc:e6:80:7a:26:4b:dd:
83:b5:fd:dc:be:ef:9d:ea:23:4c:99:43:d8:7d:35:
08:f1:83:f3:21:76:18:66:6a:16:ff:cd:ad:fa:a1:
13:f5:2a:33:d4:38:23:7f:b2:05:1d:7a:09:92:dd:
13:ed:a4:e1:77:51:cd:59:08:de:fa:d6:af:25:2c:
d6:5d:20:e1:e6:23:8c:a5:02:ba:34:1b:a6:d1:0b:
9b:8f:32:c9:9f:55:d7:2d:81:6c:e2:14:d4:af:93:
88:24:05:0c:f4:b5:e1:3e:66:f4:78:42:36:10:5a:
2c:83:22:35:37:f0:97:03:e0:5c:4a:e5:be:60:8d:
5c:66:18:81:81:5f:aa:d2:51:40:9c:32:69:7f:26:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:7D:09:7B:10:D8:D4:1F:8C:37:4F:3F:8C:9F:3E:83:E9:5C:54
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:81:2e:cc:67:d6:1a:bf:be:42:36:67:a2:fe:2b:55:8c:
28:1f:e9:94:24:cb:a2:bb:1a:15:7f:18:ff:d2:cd:7c:79:be:
6d:09:04:d3:1e:42:1c:f0:2c:e7:e3:5a:51:e3:40:fb:b9:63:
d5:40:73:d4:43:fa:00:56:77:4f:72:10:be:fe:98:19:dd:02:
62:bd:4f:c6:cb:4f:8f:87:d8:6f:4b:1b:19:b8:bd:59:77:5f:
ec:13:60:a7:57:61:14:a6:16:1d:30:d3:a7:73:15:d1:99:4a:
6d:dd:64:f7:ec:05:e2:c0:e6:9b:45:d0:67:3c:ac:c7:9f:8b:
84:0b:2d:3a:fe:47:5e:fe:8b:09:ca:68:76:fc:ad:b2:e8:37:
b6:4e:d5:6a:e3:3d:4b:b6:40:24:e2:e7:da:52:b9:5c:7e:df:
88:4a:ea:5d:b3:9e:a7:86:28:c5:92:da:52:10:22:a1:cb:06:
ae:b8:d5:29:b7:38:3f:0b:1b:44:db:ce:f6:b4:3d:fd:3a:b8:
1d:60:59:ec:af:80:14:2c:74:3e:f6:3e:45:10:7d:3a:3b:98:
f6:b1:00:d5:14:d6:b6:c6:e5:e0:dc:90:f6:6b:f4:3c:35:b7:
b8:93:35:c6:8f:3a:63:4a:44:1d:50:55:05:52:b0:cc:71:58:
13:a6:fe:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:34:11 2026 by rpki-client