Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: XVXTt9HmBzhiN5hbH5lZnoUqdZCsKZtOfs1YmBrO4lU=
Subject key identifier: E4:2B:67:CE:47:4C:90:E2:85:91:8E:B8:02:F0:16:D4:24:30:77:F4
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019F1A1EEA7A9515A78F1567498C8A600C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 1138
Signing time: Tue 30 Jun 2026 20:01:01 +0000
Manifest this update: Tue 30 Jun 2026 20:01:01 +0000
Manifest next update: Wed 01 Jul 2026 20:01:01 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: Yqr7RH7EJJDwbjUrIIp8aWvAXYJDu3uXFiKz275hnGs=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:ea:7a:95:15:a7:8f:15:67:49:8c:8a:60:0c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jun 30 20:01:01 2026 GMT
Not After : Jul 1 20:01:01 2026 GMT
Subject: CN=e42b67ce474c90e285918eb802f016d4243077f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:7e:f7:fb:dc:f7:10:98:33:18:c1:00:86:
00:a6:5a:8c:8b:fc:26:a2:45:97:e7:2b:04:9a:7a:
fa:cd:5f:2d:71:4b:e9:41:52:e3:bb:dc:fa:25:9f:
b4:86:3a:9f:97:23:eb:66:46:69:1b:3a:9f:f3:1f:
18:44:62:db:31:a5:a2:f7:66:72:4d:3b:97:51:19:
c5:59:04:5f:83:ed:10:fe:df:71:72:5d:c4:b5:bb:
2d:d3:09:c0:47:d1:79:ca:7d:7e:a2:e3:b0:f2:c9:
be:1b:11:bf:4d:5e:cf:47:8d:1f:e3:27:8e:0a:55:
ba:eb:a4:66:f1:13:4b:0e:ff:95:b9:10:4e:c7:cd:
84:cf:5c:c8:b8:61:ab:51:b4:82:bd:c9:ee:40:f8:
4a:cb:eb:62:a8:47:8b:f5:51:85:a2:e9:62:25:71:
9c:51:5f:cb:c7:09:c6:28:9d:f9:a0:56:fa:44:fd:
d9:e6:cf:01:e3:83:a5:90:6c:fe:7d:19:c5:1a:91:
b9:1e:70:85:03:b2:77:59:87:05:3f:7b:7e:42:e0:
76:70:52:e9:06:dc:12:41:40:8c:b9:27:e2:c3:1f:
1e:01:e3:c2:fa:1c:3c:6a:c7:75:b0:f5:86:9d:70:
46:d5:0b:f1:3f:2b:f9:84:8e:67:7e:8f:90:38:e0:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2B:67:CE:47:4C:90:E2:85:91:8E:B8:02:F0:16:D4:24:30:77:F4
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f2:cb:ba:a0:39:94:64:19:39:6c:2e:e1:8e:fe:9d:b0:37:
f8:8b:53:96:a8:3c:e4:60:3c:ae:71:2d:51:d8:03:eb:2e:fd:
e9:98:64:13:16:0d:92:8a:76:7e:e0:4f:d1:5a:9c:4a:6e:89:
d0:12:13:33:7b:78:4d:6b:d0:24:26:18:b3:a9:61:1f:6c:cd:
ff:b2:07:bb:70:22:92:40:58:11:59:70:09:4e:60:3d:29:41:
95:43:98:cc:b8:3c:7c:6b:4f:9b:1c:d8:ef:3b:6d:85:34:19:
f8:14:4c:e9:30:d0:15:ef:9c:49:ca:56:4e:93:fa:fa:70:9e:
92:7c:69:ff:8d:50:7a:af:df:d7:23:ec:7d:6e:f8:03:93:2f:
ac:70:d3:e6:4e:46:42:22:9a:24:b1:c7:f2:8e:5f:3b:f6:e9:
7f:63:d3:ae:9f:7b:06:de:ff:66:79:7c:3b:a5:70:73:9c:61:
a3:65:2e:b7:72:f1:7c:5d:97:f9:f7:c8:32:c9:d8:cb:7d:bb:
36:89:8f:23:4c:b1:6b:bb:98:ac:cf:d4:e5:f3:ac:a7:42:65:
0f:dd:fa:26:cf:b1:d2:01:b7:59:bf:e3:68:0c:62:8e:4a:38:
7f:81:0e:47:40:9d:92:02:38:32:be:03:cc:c2:d1:a4:12:01:
18:25:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:14 2026 by rpki-client