Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: 2Qq9hBym3hFXCD0Kpr98m6+iFYR8CRrI4b3bYraRrJ8=
Subject key identifier: 2D:18:E3:A6:17:AF:1E:39:C5:34:0A:E4:1D:4F:8C:C3:02:F4:D2:C6
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019F386006A114F9F70E6FB4FD7B9E80D6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 0A4B
Signing time: Mon 06 Jul 2026 17:00:44 +0000
Manifest this update: Mon 06 Jul 2026 17:00:44 +0000
Manifest next update: Tue 07 Jul 2026 17:00:44 +0000
Files and hashes: 1: 0O9vWC_vw7OUH6qBouhrAzEg9nc.roa (hash: ikuJBuSdoGWkG2wBAzVqA4TgxffZfq78hbpeayBzWqc=)
2: 8UaUU7He9Yv29kZRYVxM02CQ6Go.roa (hash: TPMPD8z4BbyqW0UZlFEZ6YpvhPgmje5aXLJzkHd/hwk=)
3: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: M1jRDOrTqcVZdksXhNUz9HV4Av70L14f+vLkikKSbnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:60:06:a1:14:f9:f7:0e:6f:b4:fd:7b:9e:80:d6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Jul 6 17:00:44 2026 GMT
Not After : Jul 7 17:00:44 2026 GMT
Subject: CN=2d18e3a617af1e39c5340ae41d4f8cc302f4d2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:81:64:97:e0:9c:fb:fb:ec:85:b2:e3:d0:
1c:16:81:53:17:e9:d0:d3:fc:be:0e:c0:b7:69:bc:
fe:e4:2f:bb:a4:12:b8:d4:bb:b4:27:92:0c:fb:18:
86:15:75:1e:1f:26:86:0f:bf:95:25:b8:f5:86:f3:
18:8f:33:25:b1:58:5c:1f:01:97:07:e4:d6:b9:a4:
af:fa:67:3b:e1:9c:50:1b:67:1b:71:26:e5:6a:a7:
af:a0:d1:a0:33:19:ca:fc:bc:c1:2e:0f:af:36:35:
28:b7:52:31:a5:6f:ca:3e:95:88:e7:01:4c:b7:02:
43:2a:5b:e9:84:dc:c3:b4:f0:7f:5f:7c:fa:6a:0b:
60:36:eb:42:a3:2c:1a:4d:8a:9c:a9:35:50:8f:43:
36:e1:0b:6b:93:37:f0:d1:ba:4d:49:54:23:94:4b:
93:d7:2d:db:2a:ae:e0:d9:09:3c:5b:3e:98:39:96:
1b:3a:c3:cc:1e:f3:56:c8:97:0e:a6:d0:7b:38:c1:
25:91:b0:f1:85:11:1b:86:c3:4a:69:f9:94:b5:ed:
f1:cb:f9:98:aa:10:57:30:6c:f4:2c:4c:93:51:c1:
12:49:38:96:25:fc:41:dd:39:20:19:1c:3a:e7:d1:
39:d0:98:59:92:8d:21:b2:ff:cb:01:d5:f3:ad:0d:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:18:E3:A6:17:AF:1E:39:C5:34:0A:E4:1D:4F:8C:C3:02:F4:D2:C6
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:49:fa:d6:52:52:19:01:3a:bf:88:7d:ce:f1:74:2d:6d:8c:
fa:40:86:f6:8c:a0:b3:73:95:99:f9:17:87:76:b9:c2:b8:2a:
fe:95:25:9d:96:56:11:24:5b:33:29:de:b5:a7:28:65:c2:ff:
02:68:c2:a6:f1:41:2c:d0:40:66:6d:7f:a4:be:e9:bb:10:73:
c5:35:9c:38:58:81:19:a0:e6:b7:f5:71:da:c7:2d:17:51:72:
90:9c:fb:b8:45:00:f7:41:9f:25:77:c3:a5:91:b7:52:31:cf:
4c:16:ec:2b:c0:cd:7e:88:bb:eb:7b:e9:df:94:70:ad:cf:f6:
31:5a:84:fd:08:86:ed:35:7f:1f:a0:4a:ba:e2:0a:17:e7:45:
f8:a7:30:16:f8:94:ed:49:39:1b:ef:91:6f:1f:4c:3a:d6:bf:
57:9b:2e:d4:cb:14:9d:63:58:42:d6:69:17:60:f4:a6:18:8a:
0d:e8:dd:44:d1:46:b7:77:d1:05:8c:59:c6:c3:02:20:2b:03:
5b:eb:96:14:8c:b5:4a:00:e3:52:8f:4d:ff:d2:68:1a:53:80:
85:a5:73:f8:79:c1:47:05:f8:38:88:62:56:b9:6a:8b:c8:9b:
71:5d:f1:23:c3:19:49:f7:6d:3d:ab:b9:c6:cf:a6:d8:2d:ab:
3b:e6:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:07:33 2026 by rpki-client