Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: a3m9g2ETwQaLiddP30LCc2QB0WoH/Fy422LVpW6xY/o=
Subject key identifier: A4:F0:8E:F6:14:14:E2:C9:BD:5D:E1:EE:11:06:2D:10:67:03:4D:B6
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019E3072D811534B163E1D6B554A2FA8F484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 10BF
Signing time: Sat 16 May 2026 11:01:33 +0000
Manifest this update: Sat 16 May 2026 11:01:33 +0000
Manifest next update: Sun 17 May 2026 11:01:33 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: iUwTCWahRMl2zGFXMn87X8mkzykE2vZw5dPreTvLPbU=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:d8:11:53:4b:16:3e:1d:6b:55:4a:2f:a8:f4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: May 16 11:01:33 2026 GMT
Not After : May 17 11:01:33 2026 GMT
Subject: CN=a4f08ef61414e2c9bd5de1ee11062d1067034db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:68:6b:1e:7c:f5:90:3d:96:2c:6b:87:74:
d9:e2:2b:3d:de:16:9f:2d:b9:0d:4b:2b:f8:e2:61:
4c:69:cc:27:ec:ee:2c:8e:f8:ce:13:be:c1:46:47:
9b:72:3f:9c:20:c7:6d:03:09:7f:81:71:91:32:4e:
4a:56:75:5a:eb:9d:80:45:15:b3:85:e4:b1:0f:b5:
71:bd:b7:0d:9f:c2:1e:8d:09:65:23:bd:82:9e:6f:
7d:bc:59:95:c4:4f:0f:26:3f:a5:04:37:46:d0:d6:
6c:d7:80:a1:1d:36:12:d9:4f:e4:8c:c4:ae:41:ff:
5d:79:a0:01:c4:9a:23:82:8f:ea:fe:bd:5d:19:8f:
ea:4c:01:2f:8b:ae:a3:ea:58:7b:d0:1e:20:0b:6c:
b0:2c:79:21:ae:02:20:db:1b:28:b4:2a:d0:bb:dd:
b6:d5:e4:f9:36:76:8f:06:51:f3:fd:90:64:84:40:
7a:52:51:4e:2f:f4:79:20:92:ec:65:95:f5:12:37:
a7:74:2a:9d:9f:74:49:c3:cf:3d:e3:d7:70:60:e3:
2b:6e:5e:bb:ef:e9:7a:38:02:52:98:4a:5c:0b:71:
59:84:25:cf:ad:a1:ea:ff:68:6b:29:d2:ae:b1:9e:
bf:cb:bd:ad:b2:ad:56:f8:68:dd:aa:e7:5b:58:28:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F0:8E:F6:14:14:E2:C9:BD:5D:E1:EE:11:06:2D:10:67:03:4D:B6
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b0:15:f2:8c:86:48:78:fc:9a:27:1b:d5:90:e8:5b:db:d7:
4b:b0:25:17:dd:d7:18:51:ab:d8:b5:8f:f5:8b:98:2b:5a:78:
5f:43:1e:a9:c8:4d:56:59:bb:a6:98:ce:fe:9d:a9:86:e2:70:
af:00:b8:54:96:16:38:50:b4:d4:7c:de:69:48:18:b0:10:07:
d3:83:7f:0d:e3:89:97:27:c8:99:17:3d:7c:17:97:65:df:cd:
7e:97:a6:f2:e3:76:78:92:90:27:d8:bb:05:ae:4a:7c:04:3b:
75:c4:39:1e:a3:56:07:05:52:30:c7:65:f0:65:27:e2:ad:ab:
45:f1:21:f8:5b:57:cd:49:2b:93:69:63:ef:00:80:26:5e:9f:
a3:7b:ee:d6:45:54:1d:51:ab:cf:e7:89:e4:fd:b2:02:a2:e7:
8e:9b:04:4f:39:c8:1d:96:48:e9:04:3d:ee:0f:64:23:06:4d:
21:7d:72:94:f4:97:09:c1:f5:71:64:2e:fc:70:d7:1f:f7:34:
42:3e:71:62:91:f3:68:7a:7d:53:02:e8:46:16:24:52:12:7f:
02:5c:3b:72:ca:6a:fd:09:0e:e5:a6:29:5d:a7:60:b1:83:03:
eb:c3:2a:46:a0:39:ff:30:48:c1:a3:b8:ae:2b:4e:95:10:e9:
af:c1:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:11 2026 by rpki-client