Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: Oo5EKwhhpjK/0W09gSr93hBYMVnyU53M/5iB9ozIegI=
Subject key identifier: 89:09:12:C3:11:58:8D:AD:94:2B:57:76:9B:A3:08:52:E5:37:E5:EE
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019D37523FD248774925AFD6C4C3C9634CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 103E
Signing time: Sun 29 Mar 2026 02:00:30 +0000
Manifest this update: Sun 29 Mar 2026 02:00:30 +0000
Manifest next update: Mon 30 Mar 2026 02:00:30 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: iKb+VFOwlsVyhMwYTL5XyShzequJ7A4WA+sJs9AsTnU=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3f:d2:48:77:49:25:af:d6:c4:c3:c9:63:4c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Mar 29 02:00:30 2026 GMT
Not After : Mar 30 02:00:30 2026 GMT
Subject: CN=890912c311588dad942b57769ba30852e537e5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:05:21:a8:a6:ba:7a:9d:ea:52:6d:43:11:
25:c1:cb:6a:8b:cc:3b:76:04:7c:4d:81:c2:36:83:
45:e4:bc:98:57:9e:85:9b:62:21:ce:41:18:d0:aa:
35:31:43:bf:9c:12:08:fb:20:be:06:72:83:e7:bf:
a9:3a:69:5c:8e:d0:80:ef:ef:24:f6:19:2b:b0:80:
7a:74:14:ed:c4:de:6f:1b:fd:46:73:f7:48:8e:d1:
03:43:1b:a6:19:dd:ca:02:39:39:a5:3c:21:f4:06:
02:3f:90:28:aa:3b:07:80:5a:c8:54:99:34:02:d7:
7c:4f:fd:d9:61:0c:42:12:e9:2b:0f:21:65:85:a4:
87:51:60:ee:86:ca:b9:8c:61:18:08:47:ac:01:7a:
fa:00:7d:5b:57:a1:3c:58:5b:38:60:a8:f4:d0:0c:
0c:99:91:c2:94:33:9a:65:a1:dd:e1:1b:72:51:55:
f9:33:18:42:3a:19:34:11:49:97:dc:ff:af:4a:90:
cd:c9:83:a1:c9:61:f6:5b:fe:28:28:23:55:19:7e:
9b:0a:4b:72:78:3a:8d:be:6e:72:b4:02:03:ad:fb:
1d:6c:56:ee:77:d4:f2:d2:67:4c:ca:c2:50:fe:7e:
e0:f6:4d:55:7b:be:17:16:80:5d:d7:81:4f:a0:02:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:12:C3:11:58:8D:AD:94:2B:57:76:9B:A3:08:52:E5:37:E5:EE
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:92:c0:01:d1:5f:42:63:9f:20:08:4b:e8:ac:93:d0:04:82:
40:6c:80:30:14:db:c9:09:86:2a:d4:05:05:92:69:b1:fd:e7:
84:d5:0d:4c:45:0c:5e:ff:10:85:da:ba:ea:95:2e:92:18:99:
4d:1b:82:14:e0:98:e3:a2:c0:e3:e0:be:d3:08:a3:16:bf:16:
33:ff:64:e2:33:f0:e6:d0:07:ec:b1:bf:85:73:02:7c:44:5f:
26:80:24:8a:c6:67:d5:dd:c2:5a:0b:7b:df:4d:89:1b:ff:75:
65:6a:d4:61:70:94:cc:96:27:84:63:d1:13:f9:f0:c6:d2:c3:
bc:81:2e:c2:ff:3f:5c:6a:64:78:79:55:a9:77:23:0d:99:70:
7f:67:fa:68:4c:00:bd:63:d6:5b:67:9c:58:1c:85:26:5c:2b:
22:43:2d:8d:a0:73:42:f6:3f:8f:cb:ab:a3:09:6d:5f:bc:97:
35:a5:0d:aa:63:b1:60:5c:82:a2:f9:86:c3:be:f1:25:b2:69:
11:0f:d7:43:84:c8:49:c0:a1:f0:b3:e4:48:fc:c5:03:13:c9:
09:42:9d:d7:6e:bf:92:12:72:c3:df:59:cc:9e:ed:d5:61:99:
97:5b:e8:11:b7:5a:59:6d:98:1f:fc:fe:09:dd:57:54:0f:2d:
98:e1:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:18 2026 by rpki-client