Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: xB5kbfo6j7vOJZ/+mC810M5ly0CN0894+9Eerznp2iw=
Subject key identifier: 8E:F0:F1:F4:EA:07:5B:3F:EB:15:19:D3:50:29:A7:1E:5E:F5:5F:E9
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019DFE05CFA124243AE042218C53C9C0EB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 17A1
Signing time: Wed 06 May 2026 16:01:26 +0000
Manifest this update: Wed 06 May 2026 16:01:26 +0000
Manifest next update: Thu 07 May 2026 16:01:26 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: OQnMj/4QBrLbM5rdKeZkv6udznGXfL3vja7XZyrWUgc=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 13:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:05:cf:a1:24:24:3a:e0:42:21:8c:53:c9:c0:eb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: May 6 16:01:26 2026 GMT
Not After : May 7 16:01:26 2026 GMT
Subject: CN=8ef0f1f4ea075b3feb1519d35029a71e5ef55fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:71:20:d7:e1:f3:c3:03:ae:d0:01:72:75:
3e:ad:71:d5:21:6e:fd:9f:b7:b3:03:93:18:62:2e:
3f:70:c4:82:d7:e1:12:3e:10:b7:a0:64:07:6a:d1:
4a:e9:4e:9b:43:19:9c:d4:9e:00:5c:98:94:44:61:
a3:55:44:20:eb:38:67:a7:e2:b4:3e:22:f0:7b:5c:
a2:4f:53:ac:a9:d9:89:01:12:1a:a3:d8:3e:89:03:
24:4f:b1:a5:f8:47:dd:3e:95:a8:30:de:9b:7e:3c:
87:b3:15:d6:d3:d4:17:94:71:55:04:b3:02:77:67:
c3:e3:24:8b:45:42:67:6f:ce:57:12:f2:21:27:31:
74:a0:a0:95:6b:4f:7f:63:3f:91:e7:90:83:f1:fa:
12:5e:ea:5f:f3:78:6a:cb:ee:94:de:49:e5:d3:79:
bc:e9:a6:12:d5:7e:17:ef:16:45:b2:73:7f:51:e9:
97:c5:b4:8d:3a:bd:4f:f7:58:01:50:d2:f0:32:43:
2d:a8:63:0f:5b:99:e3:81:8e:40:bb:53:dd:f9:cb:
84:15:59:fc:c7:16:28:fc:2a:e6:56:49:68:67:c9:
ea:31:c4:79:10:c3:56:8b:6b:7e:9d:e0:de:04:21:
9d:96:40:7b:66:ee:0d:ed:6a:9a:4d:f5:49:9b:6f:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F0:F1:F4:EA:07:5B:3F:EB:15:19:D3:50:29:A7:1E:5E:F5:5F:E9
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:ab:4f:cf:a5:10:cb:bb:a6:58:98:4f:34:27:0d:42:e4:
de:ff:97:9a:69:7b:9b:a7:a6:d5:fc:26:3c:2d:a2:ec:81:f4:
c9:93:be:04:b4:7b:93:e7:12:44:4f:97:59:95:ea:43:15:a8:
54:1a:b1:3a:21:23:6c:0e:40:91:59:77:c7:a4:e5:38:c3:30:
f3:e7:e6:cd:0b:87:dd:be:68:29:be:80:fb:49:f4:ba:85:03:
be:16:7d:ba:a7:39:8a:b8:01:65:31:6b:36:2b:ad:98:ba:30:
72:f3:6a:03:77:33:c5:ef:f3:ff:d1:d0:a8:5b:c1:f8:61:d3:
73:bd:ca:bf:2b:c3:ef:b2:76:0f:15:7e:38:b2:16:13:8f:0b:
4b:b3:2b:c9:2c:a7:88:55:dd:24:c2:2b:83:69:b3:c4:cb:a8:
e7:c8:11:bd:cb:f3:e6:cb:90:a8:df:26:c5:8c:6c:f2:08:ba:
32:14:9a:8b:9c:2b:3b:26:57:88:28:c4:ea:a4:f6:31:61:74:
d2:1e:6b:a8:d3:39:7a:fd:0d:a5:91:fa:de:d7:0c:e4:05:4d:
64:19:4e:31:47:c9:23:5e:16:f2:99:85:9d:15:cc:56:a4:81:
c1:77:2d:91:bd:04:78:48:42:58:4f:81:4f:bb:f0:1e:c3:cd:
31:41:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 17:39:06 2026 by rpki-client