Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
File: IH_lA3M22POUAym_Ct23kzhO9SI.mft (raw, json)
Hash identifier: D6DgxXI7pdQFDc+qyGVDTT9UXF2NAy6eqq6sHr0863s=
Subject key identifier: DD:AA:03:13:8D:FB:16:8F:6F:C6:D2:38:AA:BE:CA:E2:DF:C3:9B:AB
Authority key identifier: 20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
Certificate issuer: /CN=207fe5037336d8f3940329bf0addb793384ef522
Certificate serial: 01A0035E9B6E5106DA61E90AA1B053FEBEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:02:06 +0000
Manifest this update: Sat 15 Aug 2026 03:02:06 +0000
Manifest next update: Sun 16 Aug 2026 03:02:06 +0000
Files and hashes: 1: IH_lA3M22POUAym_Ct23kzhO9SI.crl (hash: s2v/TZKzRPUUMFyGAuCT2p+ho0kngatMPhVMPFCo2vA=)
2: TsdPJx7OiywMM122PIYNYWmJFCc.roa (hash: x07yC7l/UbYraclqrFWdPKzw6DYUXEN90KFVFdpgkOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:9b:6e:51:06:da:61:e9:0a:a1:b0:53:fe:be:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207fe5037336d8f3940329bf0addb793384ef522
Validity
Not Before: Aug 15 03:02:06 2026 GMT
Not After : Aug 16 03:02:06 2026 GMT
Subject: CN=ddaa03138dfb168f6fc6d238aabecae2dfc39bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:b3:44:c4:34:ed:e6:d2:e5:f4:50:e1:b0:
8c:5d:e5:14:9a:b4:34:5b:7d:f9:05:23:07:db:6f:
a1:8a:ac:2b:1c:45:d0:18:3e:dc:fe:a7:b6:92:c4:
e3:f1:41:66:b3:9f:13:2c:5f:7e:87:79:94:5a:5b:
b7:42:05:ca:bc:6c:eb:b1:0c:6c:2f:56:51:6a:2f:
eb:ae:5a:dc:22:27:2e:b9:b1:df:c4:25:5f:23:c5:
31:40:9e:a5:5d:2f:67:74:93:7b:7c:ea:9e:ac:4a:
69:3f:a7:07:20:30:6e:31:1c:a3:c5:35:3a:47:b2:
c1:44:f4:66:92:73:48:d4:c0:0f:26:be:66:e7:a7:
34:49:10:99:55:2e:8d:41:40:31:6b:db:a1:1b:c4:
45:78:d5:e4:35:3d:2c:78:cd:a7:f7:15:fd:79:88:
e1:85:45:62:fb:22:03:62:62:1b:cd:55:ec:4b:ae:
84:2b:04:b8:56:09:81:d3:61:a9:38:cd:c9:2a:c9:
11:ca:ea:d9:33:6b:32:92:18:36:a9:04:28:d9:66:
d9:06:bf:11:69:50:e2:3f:de:a8:97:48:17:e7:bf:
8e:18:6a:09:39:a2:ff:b6:b4:3e:9e:51:66:fe:a6:
c8:20:53:9f:4e:e2:f1:d9:03:fa:b4:2d:32:2b:31:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:03:13:8D:FB:16:8F:6F:C6:D2:38:AA:BE:CA:E2:DF:C3:9B:AB
X509v3 Authority Key Identifier:
keyid:20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a5:fb:49:e1:7d:23:aa:77:dd:c9:4d:97:bb:4e:1d:aa:ee:
b3:a1:d2:9b:a6:e0:67:f5:9f:8b:69:d6:c1:98:85:12:93:58:
3b:0f:c9:00:44:12:1a:6f:62:9c:68:a9:99:41:ae:e9:a4:95:
bb:ed:c0:42:e2:d8:50:99:fb:ab:12:37:05:0b:0a:16:03:12:
4f:20:20:14:e8:2d:e2:40:27:17:33:af:70:75:6e:44:8f:a9:
16:9e:a0:eb:f5:09:b4:27:f0:18:82:76:f4:43:f0:94:a3:a2:
03:1d:1c:a9:42:94:57:1b:a4:bf:4b:03:a5:a8:95:60:43:46:
6f:fe:3d:b2:77:a9:33:9b:2b:4b:1c:c8:67:ee:64:8d:bf:03:
50:07:9e:b3:91:0d:b0:b9:20:be:5d:0e:15:ae:31:5b:a8:07:
ae:49:c3:e7:61:9e:f1:13:d2:7e:a8:03:c2:a5:5b:7c:12:ef:
f9:1e:a1:6e:f5:1b:f0:ff:70:9b:b2:24:41:cb:1b:8f:09:73:
31:e5:03:ef:ec:6c:b2:97:15:2c:e6:df:da:1b:e4:47:41:19:
7a:68:07:39:00:72:6b:a4:e5:3e:81:35:7e:87:dc:c4:df:0c:
2f:83:9a:b3:44:94:a9:95:a3:c3:94:80:c3:e1:d7:56:52:d3:
76:f5:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:51:57 2026 by rpki-client