Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: jLevgHEUxUtthGjjDYZCW4j2NvDO/ewl3yzm2cm4Kdo=
Subject key identifier: CB:7E:28:65:FF:00:19:64:DB:A8:A0:E4:57:98:07:38:75:86:A5:74
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01A113E0D379FF5758BDC173488AA52A6E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 193A
Signing time: Wed 07 Oct 2026 01:01:03 +0000
Manifest this update: Wed 07 Oct 2026 01:01:03 +0000
Manifest next update: Thu 08 Oct 2026 01:01:03 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: UEm6CFYCjh25ydGFCBMObS8Ze9a7VL3STR7o4RKfF9U=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:e0:d3:79:ff:57:58:bd:c1:73:48:8a:a5:2a:6e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Oct 7 01:01:03 2026 GMT
Not After : Oct 8 01:01:03 2026 GMT
Subject: CN=cb7e2865ff001964dba8a0e4579807387586a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:70:c9:f6:e2:3b:30:64:c0:15:64:ae:b5:
a7:6e:5d:20:0f:38:9b:c5:e7:1b:94:30:8a:3f:7a:
bc:31:50:52:e4:db:e9:e8:85:34:0d:9d:c0:1a:ca:
f8:80:7e:f3:24:32:51:4e:30:78:9c:80:1d:5f:7c:
68:36:1d:da:8d:b4:8b:19:bc:83:9f:34:41:4e:c1:
ed:90:3e:78:ee:12:31:69:4b:24:4e:1e:3b:92:2e:
86:43:8d:e9:f6:b9:36:5a:6a:30:a6:b4:7e:0e:13:
a3:a6:59:43:d1:b1:d1:e0:61:be:72:a7:73:04:cc:
20:ad:7b:d6:7f:8a:ea:fa:49:78:a9:77:81:52:90:
41:4a:a7:b3:a0:92:07:04:fa:18:e1:a8:e4:6a:8d:
59:fe:66:b9:b2:13:5d:fa:38:ed:ac:eb:0c:18:5c:
47:58:62:52:5b:49:b8:5e:25:d7:1f:50:f1:ee:07:
7f:bd:0b:74:bb:da:43:5e:ec:39:ac:c8:c5:7b:dd:
79:22:d5:60:73:df:37:b1:17:18:bd:99:e1:d5:29:
d7:dc:51:90:0b:17:24:e6:6a:2c:90:21:48:40:91:
c3:ad:d8:c4:19:17:25:8a:ec:8c:b2:5a:59:7c:0d:
3f:6d:ac:67:87:08:a5:a5:7e:9b:22:9e:2e:e6:6e:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7E:28:65:FF:00:19:64:DB:A8:A0:E4:57:98:07:38:75:86:A5:74
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9b:f3:f4:2a:42:89:2e:71:f0:fe:68:a7:db:ac:4b:1f:4c:
3f:85:9c:c9:fa:45:af:1f:4f:41:06:40:a8:48:50:6c:e4:a6:
ff:50:03:34:33:5d:60:0d:51:96:d3:ff:5e:5f:90:5d:d0:7a:
e8:ea:08:00:20:1d:6a:84:56:05:a3:f4:f1:15:37:5d:29:00:
a5:fd:54:d9:e2:de:cb:10:a4:f3:a6:86:3e:ee:55:29:1b:82:
40:63:f9:cd:84:37:a9:5a:f7:c6:55:e7:93:67:6a:05:c9:a5:
45:e3:75:93:4c:39:ff:01:bc:fd:51:60:08:47:c8:02:99:b4:
19:a3:08:2b:0c:4d:48:80:8a:02:15:6f:a5:dc:4f:04:ce:ce:
95:c8:03:5f:11:8c:63:5b:13:01:1b:30:b7:99:ea:f1:b7:de:
a2:13:d7:83:50:4e:19:b1:2e:f7:b6:55:bc:8e:87:03:1a:01:
a1:1d:9e:96:ef:49:58:2a:aa:a2:2b:3d:87:26:74:98:ec:cb:
9b:2a:bd:b9:f6:49:a1:5f:b5:20:5f:f8:2e:6e:1f:c8:fe:c7:
b2:05:3a:d2:3d:4e:3b:88:5c:b4:a0:99:b5:d3:1c:d2:e1:f6:
c6:c3:da:82:7f:01:42:b6:37:53:63:2d:f4:f3:3d:68:1f:3d:
33:aa:73:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaET4NN5/1dYvcFzSIqlKm4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh
M2JhODYwHhcNMjYxMDA3MDEwMTAzWhcNMjYxMDA4MDEwMTAzWjAzMTEwLwYDVQQD
EyhjYjdlMjg2NWZmMDAxOTY0ZGJhOGEwZTQ1Nzk4MDczODc1ODZhNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYRwyfbiOzBkwBVkrrWnbl0gDzib
xecblDCKP3q8MVBS5Nvp6IU0DZ3AGsr4gH7zJDJRTjB4nIAdX3xoNh3ajbSLGbyD
nzRBTsHtkD547hIxaUskTh47ki6GQ43p9rk2WmowprR+DhOjpllD0bHR4GG+cqdz
BMwgrXvWf4rq+kl4qXeBUpBBSqezoJIHBPoY4ajkao1Z/ma5shNd+jjtrOsMGFxH
WGJSW0m4XiXXH1Dx7gd/vQt0u9pDXuw5rMjFe915ItVgc983sRcYvZnh1SnX3FGQ
Cxck5moskCFIQJHDrdjEGRcliuyMslpZfA0/baxnhwilpX6bIp4u5m6oLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt+KGX/ABlk26ig5FeYBzh1hqV0MB8GA1UdIwQY
MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt
MzJmZWViNTY2ZWU2LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2
LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApvz9CpC
iS5x8P5op9usSx9MP4WcyfpFrx9PQQZAqEhQbOSm/1ADNDNdYA1RltP/Xl+QXdB6
6OoIACAdaoRWBaP08RU3XSkApf1U2eLeyxCk86aGPu5VKRuCQGP5zYQ3qVr3xlXn
k2dqBcmlReN1k0w5/wG8/VFgCEfIApm0GaMIKwxNSICKAhVvpdxPBM7OlcgDXxGM
Y1sTARswt5nq8bfeohPXg1BOGbEu97ZVvI6HAxoBoR2elu9JWCqqois9hyZ0mOzL
myq9ufZJoV+1IF/4Lm4fyP7HsgU60j1OO4hctKCZtdMc0uH2xsPagn8BQrY3U2Mt
9PM9aB89M6pzNQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:54:25 2026 by rpki-client