Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: yM5v8fbY4By71ZL526Lu9RG0cyMTraK08KLNtvbtJgk=
Subject key identifier: 42:8C:75:C0:33:EF:60:E6:DC:18:B7:53:AF:6A:21:D2:4C:62:8B:D1
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019D0E8DC2B2E86255181693140C25A70063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 1725
Signing time: Sat 21 Mar 2026 04:01:04 +0000
Manifest this update: Sat 21 Mar 2026 04:01:04 +0000
Manifest next update: Sun 22 Mar 2026 04:01:04 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: NEQrQqKH1vI41tfoqy8MdoM8NyNs99u0U4wj+kC6EQg=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:8d:c2:b2:e8:62:55:18:16:93:14:0c:25:a7:00:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Mar 21 04:01:04 2026 GMT
Not After : Mar 22 04:01:04 2026 GMT
Subject: CN=428c75c033ef60e6dc18b753af6a21d24c628bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:44:4e:17:99:9c:ef:61:7f:c8:6a:36:a3:
fc:55:f3:f3:05:4e:5b:44:bd:e9:cf:54:e4:e3:99:
a3:ff:30:5c:00:2a:69:89:39:5b:65:99:d5:94:2d:
d6:a0:23:ff:be:d6:0e:ae:20:b4:37:74:56:8b:5e:
e6:ec:81:ac:6b:cd:36:78:cd:f7:80:35:47:32:17:
7f:1f:46:1c:54:1f:5e:cc:d4:85:eb:2f:60:79:81:
08:f0:5f:7a:da:a4:da:8c:92:5c:4d:12:cd:80:94:
1b:64:10:5c:fb:d9:a4:7a:1a:b9:36:fe:7c:32:94:
68:65:e4:28:6d:07:da:d9:2e:0b:a4:45:c0:6a:b5:
78:c2:25:50:33:6a:b9:30:8e:23:37:36:ed:40:a9:
35:fc:14:d5:cd:e0:8b:a6:8f:7a:23:83:43:58:0b:
83:25:fe:dd:f4:69:4c:2c:72:1f:84:da:6a:2e:41:
ce:f9:44:2f:af:70:c9:7a:83:a8:1d:dd:30:fc:3a:
97:6e:28:7c:60:15:a6:8d:2d:9f:fc:e3:d2:68:9f:
1d:10:8f:d8:39:b7:59:db:f0:12:00:b3:e5:07:b1:
5f:f0:16:09:f1:52:ee:b0:c9:d5:4b:2c:b0:37:13:
10:c8:eb:c1:81:f3:90:14:f9:9a:fb:d8:43:4f:f1:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:75:C0:33:EF:60:E6:DC:18:B7:53:AF:6A:21:D2:4C:62:8B:D1
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:72:01:be:4c:61:b0:b5:0b:f5:a1:e2:45:d6:2d:d3:23:f1:
13:5a:83:69:6c:dc:e7:7b:54:bc:cc:14:94:c3:2d:21:19:79:
e9:6d:ae:23:0e:ca:03:34:f5:19:0d:37:fb:f1:8c:c6:e4:d4:
82:16:6a:e5:f4:02:70:45:25:b4:d0:2f:18:a3:e3:c1:8c:cd:
19:0a:eb:6f:fa:15:84:f6:85:8d:47:7b:34:2e:5c:9a:4f:43:
03:ac:c9:d0:de:4d:b8:a5:6e:ae:91:8a:22:2f:b8:98:be:10:
73:4f:61:d9:bd:8e:d1:e3:12:18:31:20:70:c8:3f:ef:de:86:
02:e8:0e:a1:09:db:d4:21:78:a0:13:9b:f3:95:1f:69:98:1a:
d1:32:49:1f:57:4c:6e:62:c8:08:ad:21:94:24:be:ae:78:59:
36:80:9b:a7:1f:5f:e6:6a:a4:34:51:55:e3:7e:14:ea:17:ff:
b5:73:e3:cd:bf:e5:41:6d:bc:78:ab:fc:c5:3e:2b:18:88:fb:
cf:4c:a5:07:75:dd:6c:a6:b4:22:57:c3:65:54:70:d7:20:40:
8a:2c:d8:d7:47:5c:14:1a:e4:8c:bb:f8:82:71:e7:f8:ee:cd:
be:8e:1b:99:01:29:d6:02:ee:de:44:8c:de:ab:d0:d7:7c:e1:
0d:d3:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:32:42 2026 by rpki-client