
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier: KBfMF41cYwTa449WaWsxBGsOLNOF6lvE5y+7PST5KPQ=
Subject key identifier: F9:44:AB:5E:1E:8B:37:66:4B:2E:F3:A2:C6:F5:A0:06:99:F8:B3:1C
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 01A06E030AA7F5ED0B1DBC757DA47DCE3223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number: 19CF
Signing time: Fri 04 Sep 2026 20:01:28 +0000
Manifest this update: Fri 04 Sep 2026 20:01:28 +0000
Manifest next update: Sat 05 Sep 2026 20:01:28 +0000
Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: r75qkFdEEo80MEOCsWUMm4L3icfvmNSxUJOsXsyQD5Y=)
2: iojxs-4stuh5VLOzZynsjkM6c0E.roa (hash: UEmjKKCU8lRCDvcwWsLDPsTENcP/mGR9V70rcXozZ0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:0a:a7:f5:ed:0b:1d:bc:75:7d:a4:7d:ce:32:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Sep 4 20:01:28 2026 GMT
Not After : Sep 5 20:01:28 2026 GMT
Subject: CN=f944ab5e1e8b37664b2ef3a2c6f5a00699f8b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:48:59:cc:63:bf:98:06:32:b2:fd:2c:6a:
ac:ea:d9:d7:b1:3f:38:f2:ef:13:5b:1f:53:ec:c9:
23:1d:58:da:0d:57:f6:eb:7d:14:23:fe:09:c2:63:
7b:69:dc:e7:dd:32:f9:b8:7e:e5:27:cc:0c:a2:b5:
96:d3:e9:07:9d:da:25:14:bf:3a:85:16:60:54:99:
55:9b:e0:7d:63:26:46:95:48:ea:a7:b7:af:61:aa:
f5:c3:3d:6f:8d:d8:a4:87:82:15:08:53:ec:77:f1:
6f:cc:c8:b8:b3:1d:29:18:71:07:81:6a:34:cb:ca:
e2:a4:cc:c4:b7:ee:f0:27:55:1a:96:18:89:4a:3e:
ea:a8:79:7c:65:b5:cb:35:c3:6b:c3:21:2c:b2:c9:
68:c9:6e:77:54:8d:31:4f:ed:cc:7e:65:42:3e:fd:
d3:1f:0f:69:e9:9a:8a:3a:bd:16:95:db:29:f9:34:
b9:60:c9:1c:a5:0e:d7:99:ca:c1:8c:2a:d9:3b:e4:
36:a9:4b:fd:90:0f:21:67:1f:93:93:38:5a:41:69:
d2:38:e0:86:9b:5c:a3:c5:bf:bf:42:29:27:3a:f8:
6f:62:bd:a6:e1:02:db:68:e8:5b:d4:19:28:8a:6e:
34:e4:27:36:62:a3:c6:bc:b1:ef:35:b6:17:34:62:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:44:AB:5E:1E:8B:37:66:4B:2E:F3:A2:C6:F5:A0:06:99:F8:B3:1C
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c8:2a:35:96:76:8b:bd:dd:4a:66:f4:2c:53:33:34:6d:6f:
46:0a:b8:86:e3:9d:7e:f0:2c:60:56:46:8b:2a:de:d9:1d:86:
6b:f9:f1:b0:fa:ff:8d:4e:17:92:1e:6b:9a:86:e9:59:dc:bb:
cc:ce:ff:8c:68:92:de:71:78:bc:83:44:c8:ca:37:6f:73:eb:
bc:35:c2:92:d5:0f:f8:bb:71:96:1a:f5:1d:c1:bc:aa:c8:33:
6d:62:fa:93:4d:24:74:9b:d4:31:52:c6:21:dc:9f:00:b1:dc:
03:74:3d:67:ee:d9:5d:d0:cd:d5:ad:63:bb:3a:9a:85:33:34:
5f:a2:6c:bb:42:1f:d7:8a:87:c0:f9:9c:f9:8e:c2:7f:6b:ea:
4b:ea:fc:1e:ec:f9:e6:af:fc:e9:82:15:16:38:46:e7:29:4f:
a8:39:78:a1:f6:fc:ed:33:15:e2:4d:8f:59:b0:f8:8c:19:ad:
95:47:f4:d5:a0:27:16:5f:79:07:9c:63:00:c1:e0:5b:e0:f2:
3b:94:e7:fd:c3:9a:bc:3d:54:e5:5e:c6:1c:7e:f0:a8:c6:9f:
ca:70:f7:ed:c0:30:bc:63:02:a1:f0:87:a6:17:bd:05:ab:8e:
ab:f0:b8:73:61:af:8a:d3:52:7a:d4:f4:c3:b7:e3:ae:75:f0:
32:bb:57:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuAwqn9e0LHbx1faR9zjIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5
NjlkZDUwHhcNMjYwOTA0MjAwMTI4WhcNMjYwOTA1MjAwMTI4WjAzMTEwLwYDVQQD
EyhmOTQ0YWI1ZTFlOGIzNzY2NGIyZWYzYTJjNmY1YTAwNjk5ZjhiMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ndIWcxjv5gGMrL9LGqs6tnXsT84
8u8TWx9T7MkjHVjaDVf2630UI/4JwmN7adzn3TL5uH7lJ8wMorWW0+kHndolFL86
hRZgVJlVm+B9YyZGlUjqp7evYar1wz1vjdikh4IVCFPsd/FvzMi4sx0pGHEHgWo0
y8ripMzEt+7wJ1UalhiJSj7qqHl8ZbXLNcNrwyEsssloyW53VI0xT+3MfmVCPv3T
Hw9p6ZqKOr0Wldsp+TS5YMkcpQ7XmcrBjCrZO+Q2qUv9kA8hZx+TkzhaQWnSOOCG
m1yjxb+/QiknOvhvYr2m4QLbaOhb1Bkoim405Cc2YqPGvLHvNbYXNGJMtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlEq14eizdmSy7zosb1oAaZ+LMcMB8GA1UdIwQY
MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt
OTFiZjYxZGQ4NTNmLzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm
LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8gqNZZ2
i73dSmb0LFMzNG1vRgq4huOdfvAsYFZGiyre2R2Ga/nxsPr/jU4Xkh5rmobpWdy7
zM7/jGiS3nF4vINEyMo3b3PrvDXCktUP+Ltxlhr1HcG8qsgzbWL6k00kdJvUMVLG
IdyfALHcA3Q9Z+7ZXdDN1a1juzqahTM0X6Jsu0If14qHwPmc+Y7Cf2vqS+r8Huz5
5q/86YIVFjhG5ylPqDl4ofb87TMV4k2PWbD4jBmtlUf01aAnFl95B5xjAMHgW+Dy
O5Tn/cOavD1U5V7GHH7wqMafynD37cAwvGMCofCHphe9BauOq/C4c2GvitNSetT0
w7fjrnXwMrtXkQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:32 2026 by rpki-client