Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: DpeFug2n6tNVfwt5/OupSDMydllSK4JutHdy8L6czP4=
Subject key identifier: CD:35:12:11:51:C0:68:33:7B:A7:9F:A1:5D:DC:A4:0D:5C:36:85:4E
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019FDBE27DA71219CA95AC6B67CA9B08832C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 19EF
Signing time: Fri 07 Aug 2026 11:01:21 +0000
Manifest this update: Fri 07 Aug 2026 11:01:21 +0000
Manifest next update: Sat 08 Aug 2026 11:01:21 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: cMQdwY8JBmlcZPCAqrm2VEfk9VEjxI9EHHRXzIRjY60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:e2:7d:a7:12:19:ca:95:ac:6b:67:ca:9b:08:83:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Aug 7 11:01:21 2026 GMT
Not After : Aug 8 11:01:21 2026 GMT
Subject: CN=cd35121151c068337ba79fa15ddca40d5c36854e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:32:5d:47:b7:a0:db:17:d8:cf:12:d9:18:
c7:77:ce:4c:7a:69:a7:fc:28:9c:d2:1f:4c:83:12:
98:4b:ba:71:ef:63:ed:f1:ff:12:45:d1:6c:c1:84:
df:39:b2:3c:69:68:e4:f0:64:f5:31:29:ad:6c:27:
dd:2e:71:1a:c2:ec:8b:34:06:f5:b0:5b:70:cd:15:
40:89:90:5a:c0:97:0d:5f:24:63:a6:7d:9e:e8:48:
ca:0b:20:35:37:d6:cd:f1:d8:e1:62:42:2a:10:e8:
3b:df:93:88:f1:7a:16:b1:c0:8f:d7:7f:a5:f9:c3:
4f:10:f9:1a:ad:bc:65:c1:5e:a2:7d:f4:7a:ea:d1:
5f:f2:07:94:c5:c9:a5:4c:37:78:8b:78:f9:5f:7b:
9a:49:28:ae:90:98:08:37:5d:6d:07:e3:a9:80:17:
bf:e1:c8:ab:69:01:94:55:7d:59:70:90:be:e7:0a:
56:16:3a:04:17:99:9f:89:a4:7d:dd:d2:65:7e:d0:
50:bf:9a:42:42:bf:73:e0:1f:f7:a1:f4:99:c7:cb:
00:e7:3d:e1:90:af:0c:ac:e7:60:bb:8a:33:20:7d:
7e:4e:03:83:82:16:67:bd:d8:51:08:db:47:e9:49:
26:42:51:d4:79:85:66:82:2e:b5:6a:c6:2f:6d:d2:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:35:12:11:51:C0:68:33:7B:A7:9F:A1:5D:DC:A4:0D:5C:36:85:4E
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8d:73:95:32:7e:76:89:0f:bb:e9:f3:be:5b:df:e3:a0:92:
d2:7d:e0:47:d7:59:10:68:f7:93:8f:44:db:f3:d1:51:3d:7a:
86:e3:09:a2:c8:e6:01:6a:39:e6:ff:24:0b:c9:83:c1:27:ed:
27:37:7c:12:9f:7b:c0:b4:d3:be:e0:63:76:0e:98:1d:a6:14:
2b:c3:16:8a:08:3f:ab:11:b9:d7:86:d1:b6:8b:b8:c2:8a:7f:
25:b3:d9:e2:5c:c0:12:a7:c1:f3:ea:d8:49:dc:14:aa:9f:bc:
e3:c8:8d:e5:6a:b6:14:cb:dc:de:ef:f6:ae:ab:af:13:ed:6c:
e5:b4:37:dc:13:5d:e1:11:49:f9:45:ea:0c:9b:6a:49:0c:cb:
1d:1c:f2:93:25:00:09:35:f5:d9:bc:55:b2:d6:d2:25:bb:fc:
3a:5f:82:d5:74:ba:e9:24:6e:6a:b5:91:f0:13:ba:75:36:79:
93:44:f3:db:78:19:0a:09:1f:6b:4a:cc:fd:e6:de:8e:ee:85:
52:75:a7:02:55:f9:7f:bd:44:36:b5:0b:f3:25:71:92:ad:e5:
d1:10:55:71:84:79:0f:b2:a7:3b:d2:09:5b:e0:7c:25:42:c1:
55:d1:41:df:e1:63:5c:25:83:a5:df:71:6e:ac:19:03:9a:e3:
3e:8a:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 12:31:27 2026 by rpki-client