Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: DVJcQGC1V3C33mnR0Jyg3Fj/BUbXeqgSlV02sAtkulY=
Subject key identifier: B8:6E:73:D9:45:A5:F3:7A:6D:BA:C4:46:6F:F1:E8:34:26:C8:6A:B2
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 01A13E953AF108E69999904E08D522858677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 1254
Signing time: Thu 15 Oct 2026 08:02:09 +0000
Manifest this update: Thu 15 Oct 2026 08:02:09 +0000
Manifest next update: Fri 16 Oct 2026 08:02:09 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: LzApruej0tfWaelepJ5CMtX/CfMp3TQTsyfQh5HrhJY=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:3a:f1:08:e6:99:99:90:4e:08:d5:22:85:86:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Oct 15 08:02:09 2026 GMT
Not After : Oct 16 08:02:09 2026 GMT
Subject: CN=b86e73d945a5f37a6dbac4466ff1e83426c86ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:58:2c:f4:e4:b7:a6:62:bc:31:28:06:ca:
4c:a2:f0:ee:a9:c3:f1:2c:4a:fe:40:3f:e8:3e:78:
b4:bd:bb:21:3b:ec:63:43:92:35:1c:43:22:7d:ae:
c1:97:f2:74:08:0b:97:d0:da:09:0c:cd:1e:9c:f5:
cc:9d:a5:0c:71:cf:4e:3f:52:03:65:3c:4e:17:4f:
33:9b:2a:c8:c5:a5:6f:fd:45:77:98:96:93:59:ba:
3d:a2:e3:00:74:ff:b8:e7:51:0f:44:f2:40:80:e0:
37:cf:6d:74:5d:67:b0:c1:fb:39:2d:d6:b2:1b:a0:
3e:ed:f8:5a:c9:fa:ce:10:b7:da:9a:5f:28:c0:40:
c9:2e:0c:64:93:90:75:a0:16:46:8c:81:85:b2:29:
87:c0:51:1b:4f:f9:89:b8:59:62:93:86:eb:47:84:
4d:cc:15:e8:5f:76:ea:64:4e:6c:9c:d9:3b:f1:b7:
36:05:de:ca:aa:62:4a:be:a0:38:5c:23:8a:83:15:
0f:5e:69:53:83:5b:d8:87:18:64:86:cf:2c:f7:eb:
79:23:dd:28:81:ed:cf:5c:4e:7d:8f:bd:96:f5:74:
3e:4b:57:f1:2b:68:fd:13:f9:1c:35:d4:33:a8:f7:
89:90:a8:1a:96:d1:8f:17:ee:21:77:9e:4d:43:e7:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:73:D9:45:A5:F3:7A:6D:BA:C4:46:6F:F1:E8:34:26:C8:6A:B2
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:02:50:dd:89:4e:99:d5:d4:a2:e6:6a:33:b6:d7:57:c4:63:
d7:69:2d:fb:41:96:ad:74:bd:a9:d6:11:b5:dd:3c:72:05:21:
42:57:56:74:1e:8a:6c:6f:c8:d8:0e:16:c0:9e:8c:7f:4d:83:
91:f6:c9:59:d0:c6:39:fe:3a:88:ec:c4:bf:d6:cd:ad:72:75:
47:57:43:ec:2f:10:7a:10:ff:0a:88:d9:d9:f8:18:f4:c4:c7:
52:c9:52:45:0f:e2:9c:9a:73:2f:4b:99:b7:0f:6c:aa:27:b6:
3d:a9:2a:43:06:d9:1c:6c:0e:fd:d9:4e:15:90:1c:e8:31:d2:
84:c3:9e:fd:b3:2c:93:fc:5c:86:1b:c3:0f:fb:ea:73:8c:fd:
e8:6e:0a:eb:ea:16:2d:8f:d5:87:47:35:a6:22:a3:25:f1:76:
30:4e:d5:83:45:70:eb:2e:69:be:2e:2e:0e:80:40:09:05:94:
37:b2:fb:8f:39:4b:1d:80:13:d2:b1:6f:89:f4:71:fd:34:d8:
6c:49:dd:64:83:7f:39:9b:21:56:60:06:92:f9:d3:9d:7f:ea:
a1:f1:99:19:81:e5:77:3c:97:10:85:7d:a7:5a:2b:4b:04:97:
ad:ec:b4:21:a6:96:13:2f:48:b1:0d:eb:a4:ab:a0:30:30:eb:
d8:e0:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:50:55 2026 by rpki-client