Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: /JhSAAO+wv1/Lc2kXj5OLVOhDE7N7h/85l4y+hpJGk4=
Subject key identifier: 39:DC:4C:7B:BA:B8:59:BC:AD:75:11:0A:9C:A4:2F:8C:4A:D1:74:43
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 01A001DCF3137185EF9650B0AC5C156A09BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 11B0
Signing time: Fri 14 Aug 2026 20:00:52 +0000
Manifest this update: Fri 14 Aug 2026 20:00:52 +0000
Manifest next update: Sat 15 Aug 2026 20:00:52 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: TpbNwdK5kWY2pCKf9ipglzl6R+++3p73ZsxqH9O4yRI=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:f3:13:71:85:ef:96:50:b0:ac:5c:15:6a:09:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Aug 14 20:00:52 2026 GMT
Not After : Aug 15 20:00:52 2026 GMT
Subject: CN=39dc4c7bbab859bcad75110a9ca42f8c4ad17443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:44:28:f9:37:7a:f3:e2:ae:47:71:d9:97:
02:29:28:04:71:7f:7d:e4:dc:46:03:8a:18:d1:44:
f9:4d:ef:92:d2:19:b2:4c:4c:46:87:a3:03:8d:41:
ee:14:7b:4c:9c:9f:64:2a:9f:22:80:88:7e:3a:19:
01:46:25:1a:d2:5c:77:ba:90:f1:f9:16:0b:75:f4:
86:d3:43:ee:78:76:59:32:ea:19:7e:1a:ec:5b:08:
0a:14:b2:99:83:12:70:9f:c8:ae:30:33:8e:80:57:
d8:cc:b9:84:a8:9b:f8:99:fc:d6:d7:ad:c8:f9:94:
2a:98:6c:c1:0c:2d:fa:8b:36:7a:b3:25:43:3a:7b:
e8:4d:7f:0c:7c:ee:94:c2:cf:19:95:d9:db:88:90:
73:f1:58:2d:9a:d6:1a:6a:15:ba:32:0c:e7:49:81:
1c:66:69:5f:e0:62:75:63:38:a5:b2:37:67:bb:22:
0d:61:4e:5b:32:c1:53:67:31:49:c3:56:13:54:42:
82:50:87:54:74:09:20:ee:6d:1e:cb:5c:cf:d2:f5:
92:83:89:e0:ac:5a:97:eb:de:12:6e:ca:a0:dd:81:
a4:41:0e:17:8c:2f:b1:70:c2:6c:c6:30:a6:2a:e0:
f3:1e:4f:0a:55:67:a5:b1:29:21:05:0b:e6:16:56:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DC:4C:7B:BA:B8:59:BC:AD:75:11:0A:9C:A4:2F:8C:4A:D1:74:43
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:59:d2:25:b6:ed:9c:0f:86:09:b5:7d:2c:a3:6a:c7:10:0f:
11:e1:7d:5b:6a:7a:19:67:47:59:76:ea:a5:2b:72:0c:0d:4d:
a3:b7:e3:83:8e:b3:44:a0:5d:28:4f:51:1a:10:86:91:2e:d4:
55:31:c8:ed:3d:db:bc:ff:1f:71:1b:68:0f:56:bf:36:f9:f9:
ef:83:27:19:e1:9e:81:73:aa:cb:41:48:a7:45:02:cd:60:29:
77:d8:60:e7:f3:85:3e:b8:71:6d:e9:ff:70:61:52:2e:24:b6:
ec:3c:09:54:d4:85:b1:60:1b:42:5c:f1:eb:e9:0c:71:55:fd:
c9:6f:02:bb:29:2e:97:b6:2d:88:45:7d:0b:34:5a:f5:96:56:
e0:45:c6:21:c6:6e:47:94:20:ac:54:ef:e0:5b:12:a3:18:1e:
6d:a7:e2:dd:28:1b:17:8f:0b:48:46:85:de:7d:56:7e:92:68:
0f:34:8b:c4:f1:b1:88:d8:30:5f:59:53:0e:7f:18:88:f7:c3:
68:4f:ba:62:46:62:28:32:59:73:ba:36:ad:39:7f:9d:9f:ff:
76:dc:39:3d:ec:8a:ab:69:09:74:d1:06:a5:76:ae:d9:a4:59:
0c:b5:ec:3b:c1:58:98:ea:e0:d4:d8:09:c5:b7:4b:9b:27:70:
9e:18:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:56 2026 by rpki-client