Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: Hr12j2hO03NWIxekh+ietoiuleU+kiremPc7CNp+MR4=
Subject key identifier: B7:CF:18:D1:E9:E8:CA:BE:DC:8B:52:D4:16:6A:82:18:7B:55:50:2D
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019FF610A719FAFB4C0A480EA3B6CBAB8E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 18A6
Signing time: Wed 12 Aug 2026 13:01:53 +0000
Manifest this update: Wed 12 Aug 2026 13:01:53 +0000
Manifest next update: Thu 13 Aug 2026 13:01:53 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: TaTGNXHW3EzGoBti92/MXfgVixl7u6gW0LY4ZXrttIk=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:10:a7:19:fa:fb:4c:0a:48:0e:a3:b6:cb:ab:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Aug 12 13:01:53 2026 GMT
Not After : Aug 13 13:01:53 2026 GMT
Subject: CN=b7cf18d1e9e8cabedc8b52d4166a82187b55502d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:6b:f3:c1:52:0a:ca:95:4e:f0:31:30:61:
b7:58:8e:96:0a:5f:e5:9b:6e:cc:cb:4e:a9:ce:33:
c4:d7:3a:16:ea:57:67:92:42:9d:de:1b:fe:7d:9f:
11:47:87:12:b3:47:07:d2:aa:a6:14:98:b5:f1:15:
b1:58:5c:61:6f:28:2b:2b:69:01:0b:83:05:72:32:
f2:1a:11:41:6a:b0:a6:35:bc:71:bf:c7:5b:c5:aa:
34:cb:62:64:36:6f:c9:e8:b7:9b:f6:01:e4:58:84:
8e:8b:64:00:3e:b4:49:9a:5a:bf:01:5c:ee:84:b0:
8a:ba:26:0e:9c:1c:95:d6:c8:f8:76:b4:fd:93:fa:
9c:0b:df:a6:b3:1e:0b:de:ff:8c:ab:5a:13:5c:7c:
9d:c7:88:bb:1b:e8:f4:1e:d6:1e:5c:f8:df:d1:3a:
1b:d6:29:2d:b3:84:8b:ef:81:1d:89:53:0c:fe:c7:
9b:73:a4:79:d6:a8:d7:fd:08:e9:38:87:84:d0:cc:
cd:f5:41:fa:a8:7a:78:c1:a9:83:b5:6d:83:0e:4e:
b0:23:36:88:ce:4c:9c:db:c5:22:de:0b:e9:4a:42:
bc:ca:43:00:69:f0:3a:bb:2c:54:bd:c9:16:f0:fb:
38:4f:3b:f6:21:99:04:09:a8:98:8f:dc:71:06:ca:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:18:D1:E9:E8:CA:BE:DC:8B:52:D4:16:6A:82:18:7B:55:50:2D
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e2:8a:28:c1:32:8d:39:02:97:89:dc:fa:3d:be:1f:ae:9f:
af:0b:90:68:81:6d:25:1c:e5:8c:0f:c7:08:9c:7d:07:35:0d:
82:5c:ea:74:4d:22:ba:8b:a1:5b:45:9a:35:d6:aa:af:0b:5b:
73:ce:a6:b1:7a:22:4e:47:ad:f4:ab:2d:97:a6:c0:52:e1:a3:
25:e0:a9:94:4f:e6:35:eb:65:9c:c5:8e:0e:70:e9:9e:79:39:
c0:a4:fc:e6:24:ce:9b:27:f9:b7:2d:56:11:0e:45:78:dc:17:
0d:b0:c0:ca:89:40:1b:62:24:e8:00:29:be:a1:15:9a:20:3d:
94:6c:c3:b7:9f:a4:8f:f6:45:08:69:13:0a:58:80:e1:b4:5d:
9d:13:aa:12:53:b8:87:df:0b:ef:a1:d9:b2:e0:4e:32:34:c6:
84:f0:94:7f:96:da:27:4e:de:a2:98:22:03:2d:ab:ee:77:11:
39:80:4f:67:1f:2c:73:e1:5e:7e:b4:ef:9e:78:5e:d2:f8:b6:
01:35:36:7a:af:93:de:33:64:51:27:8a:34:33:e0:db:6a:9e:
89:cc:57:1b:83:f6:86:8d:3a:dc:04:28:89:fc:99:06:41:63:
08:57:f6:96:03:08:dc:0b:a8:fa:ec:c1:9a:48:d7:65:7c:86:
8f:42:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:41:08 2026 by rpki-client