Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: CRP+LaUSYcZ+kjdfGFlB4pa7SE5wL1nvPx3pjXcE1UA=
Subject key identifier: FB:DE:3D:68:B9:33:5D:28:AD:27:87:C8:78:D1:D2:2E:63:7E:A4:61
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 01A09133C1866B0325670271660778E21B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 16:01:23 +0000
Manifest this update: Fri 11 Sep 2026 16:01:23 +0000
Manifest next update: Sat 12 Sep 2026 16:01:23 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: H88kXFqi6KsghVGmuptea3EsW9gaLIR7toVXNHyBkps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:33:c1:86:6b:03:25:67:02:71:66:07:78:e2:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Sep 11 16:01:23 2026 GMT
Not After : Sep 12 16:01:23 2026 GMT
Subject: CN=fbde3d68b9335d28ad2787c878d1d22e637ea461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:df:9d:62:f1:2b:6a:45:b4:18:a3:ad:ed:
77:30:6b:37:b8:4c:95:fc:59:44:3e:89:07:a9:a4:
c3:7a:19:0e:8c:ba:00:99:68:95:a2:4c:2d:1e:26:
01:84:36:bb:08:5f:28:98:cf:52:95:4f:98:33:a1:
dc:87:5e:62:92:b1:48:7a:d7:80:84:e4:34:05:8a:
1c:b8:69:c4:0d:14:1c:e2:f2:5f:e3:d1:95:50:60:
8e:ae:4d:2c:d6:4b:b7:87:9a:c2:0e:c8:7a:38:2c:
91:c7:50:cc:bb:1f:39:4f:c9:96:e6:e6:1c:a9:c7:
42:21:0a:1c:97:2c:59:2b:b2:7b:64:d8:0a:f7:e5:
45:0f:e0:69:6c:94:9e:28:b8:5f:cd:aa:c8:6a:60:
ec:89:b0:c0:68:69:5e:fd:15:98:c1:96:32:4b:29:
45:db:d6:8b:fe:82:26:b4:4a:33:ae:9f:78:67:4e:
87:23:8f:40:5e:c2:3a:65:3b:9d:3d:13:29:69:c2:
fc:4d:74:26:f6:ef:b9:72:03:05:93:18:b7:63:72:
f1:dc:ed:2c:c0:6f:38:0b:3d:10:ad:17:88:07:39:
c0:1b:18:4b:90:c4:fc:4a:cc:c2:ad:a6:4a:59:ce:
67:75:e0:46:d0:b4:7a:d6:60:9b:f6:61:73:60:e7:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:3D:68:B9:33:5D:28:AD:27:87:C8:78:D1:D2:2E:63:7E:A4:61
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bc:de:4a:76:eb:d4:ec:02:d2:22:e8:4e:46:a6:9f:95:af:
d1:a4:d4:41:dd:16:75:df:13:f9:b3:a1:38:77:c0:28:db:ae:
f0:f9:b6:69:4a:63:e1:e3:74:df:87:c5:18:d3:82:d8:dc:dd:
5e:fe:ec:93:ca:f9:84:11:1d:d4:a3:0e:e2:4c:47:aa:f0:96:
49:3f:6f:23:ea:e2:a1:c1:53:04:46:99:b3:ba:54:7b:81:1b:
ca:99:e3:a6:12:c1:8f:54:dd:04:34:6d:23:0f:e8:dc:db:ec:
cf:46:06:5e:5b:c1:1a:e1:a7:00:97:d3:dd:23:53:59:f5:0c:
27:17:09:0a:b9:20:6c:44:ab:73:0a:b6:f9:89:e5:61:92:80:
85:d6:22:5d:a9:7d:4e:12:f6:df:1d:1d:c2:07:e4:2d:6d:58:
63:21:a4:6f:f6:d6:5f:50:1c:26:d8:65:2d:a7:d3:55:38:32:
6a:00:9d:36:40:35:e2:79:6c:cd:be:87:03:e3:81:58:ef:13:
3a:9c:a7:62:e9:26:c8:8c:53:4a:20:6a:d0:b8:45:96:f3:7d:
83:46:81:8d:98:b8:31:e9:f4:5f:02:ff:e2:04:7f:d6:52:dd:
68:50:df:68:68:7e:0c:b5:fc:79:81:84:7f:14:7c:db:d1:fe:
78:03:cc:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCRM8GGawMlZwJxZgd44hsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi
MWJiOWUwHhcNMjYwOTExMTYwMTIzWhcNMjYwOTEyMTYwMTIzWjAzMTEwLwYDVQQD
EyhmYmRlM2Q2OGI5MzM1ZDI4YWQyNzg3Yzg3OGQxZDIyZTYzN2VhNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK7fnWLxK2pFtBijre13MGs3uEyV
/FlEPokHqaTDehkOjLoAmWiVokwtHiYBhDa7CF8omM9SlU+YM6Hch15ikrFIeteA
hOQ0BYocuGnEDRQc4vJf49GVUGCOrk0s1ku3h5rCDsh6OCyRx1DMux85T8mW5uYc
qcdCIQoclyxZK7J7ZNgK9+VFD+BpbJSeKLhfzarIamDsibDAaGle/RWYwZYySylF
29aL/oImtEozrp94Z06HI49AXsI6ZTudPRMpacL8TXQm9u+5cgMFkxi3Y3Lx3O0s
wG84Cz0QrReIBznAGxhLkMT8SszCraZKWc5ndeBG0LR61mCb9mFzYOdBUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvePWi5M10orSeHyHjR0i5jfqRhMB8GA1UdIwQY
MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt
MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm
LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbzeSnbr
1OwC0iLoTkamn5Wv0aTUQd0Wdd8T+bOhOHfAKNuu8Pm2aUpj4eN034fFGNOC2Nzd
Xv7sk8r5hBEd1KMO4kxHqvCWST9vI+riocFTBEaZs7pUe4EbypnjphLBj1TdBDRt
Iw/o3Nvsz0YGXlvBGuGnAJfT3SNTWfUMJxcJCrkgbESrcwq2+YnlYZKAhdYiXal9
ThL23x0dwgfkLW1YYyGkb/bWX1AcJthlLafTVTgyagCdNkA14nlszb6HA+OBWO8T
OpynYukmyIxTSiBq0LhFlvN9g0aBjZi4Men0XwL/4gR/1lLdaFDfaGh+DLX8eYGE
fxR829H+eAPM8w==
-----END CERTIFICATE-----
Generated at Fri Sep 11 18:38:59 2026 by rpki-client