Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: C1kqD5vxwKop6V+As0+uD5K5dIGTx9TOU+eB7zZkNt8=
Subject key identifier: 25:15:41:28:AA:80:8E:B4:44:CC:18:6C:CD:8A:76:10:BB:AE:4D:41
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019DEE2550BE6FB166446469113E2DEB8254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 09A0
Signing time: Sun 03 May 2026 14:01:56 +0000
Manifest this update: Sun 03 May 2026 14:01:56 +0000
Manifest next update: Mon 04 May 2026 14:01:56 +0000
Files and hashes: 1: 0O9vWC_vw7OUH6qBouhrAzEg9nc.roa (hash: ikuJBuSdoGWkG2wBAzVqA4TgxffZfq78hbpeayBzWqc=)
2: 8UaUU7He9Yv29kZRYVxM02CQ6Go.roa (hash: TPMPD8z4BbyqW0UZlFEZ6YpvhPgmje5aXLJzkHd/hwk=)
3: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: s+acObINbWOJuskibGx8Tj3oi3yNsikWNGdDqrt76Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:25:50:be:6f:b1:66:44:64:69:11:3e:2d:eb:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: May 3 14:01:56 2026 GMT
Not After : May 4 14:01:56 2026 GMT
Subject: CN=25154128aa808eb444cc186ccd8a7610bbae4d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:97:03:1f:da:32:e5:76:75:e4:5c:85:f0:
32:fb:0c:9c:bb:54:be:3c:55:d8:ca:77:60:64:d2:
06:ab:ed:ab:4f:68:a5:3c:fa:2d:69:d9:ca:39:44:
eb:4d:2d:78:ac:e6:d9:4b:ae:bb:00:68:b5:67:86:
a2:46:92:86:e9:25:f4:ca:9f:11:40:06:44:b8:bc:
a2:68:26:89:ad:ba:ac:23:db:2f:b4:b1:e5:bc:84:
89:32:98:38:6d:1b:5a:57:c2:91:e0:32:63:b4:29:
a4:fe:08:70:00:f6:a1:81:7c:37:27:0d:d4:43:fa:
2e:36:2b:d2:4f:37:0c:be:f3:a0:76:04:b0:a9:b0:
8f:5d:ac:cc:8b:c1:0c:80:c0:d7:f1:49:02:cd:06:
9b:9e:63:ce:76:62:b2:8e:e9:91:9a:65:8f:a4:39:
95:e7:08:bf:94:0c:2c:c9:df:86:62:1c:fc:19:9b:
20:00:a5:3d:e0:fd:2d:3d:a5:f9:36:c2:f1:b9:c6:
5d:55:e8:80:7f:11:53:34:61:ff:a6:2e:9c:70:4d:
34:25:26:a0:fa:ab:98:89:78:11:fa:a9:dc:95:7a:
bb:aa:db:91:ab:f7:ec:87:9d:bb:65:0c:09:19:59:
c3:9b:17:a0:8f:45:7d:65:d6:f7:37:27:3b:ba:35:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:15:41:28:AA:80:8E:B4:44:CC:18:6C:CD:8A:76:10:BB:AE:4D:41
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2f:73:d9:37:1c:59:97:35:f3:62:96:8a:61:3a:a8:17:19:
e9:1b:f3:5d:ad:5e:69:ee:a9:eb:31:ea:7f:46:d9:7a:4a:3f:
19:f0:bb:77:0b:d1:2e:44:18:62:aa:01:a4:32:4b:6d:5b:13:
dc:ca:2c:76:24:56:d6:a9:02:1f:48:12:5f:1a:71:f0:c4:99:
f2:d7:02:eb:9c:80:c8:aa:d4:b6:75:7b:34:01:50:2a:8b:89:
65:c8:81:d1:69:52:83:91:05:22:59:a8:6b:71:0b:4f:7d:5e:
71:67:43:6c:e8:e1:85:8d:eb:28:1a:0f:4b:9e:41:33:e2:af:
bb:95:cc:45:92:13:2d:ac:18:11:ff:f5:17:cf:f5:86:06:8f:
61:60:12:da:4d:60:73:9e:22:33:b8:24:de:ea:86:01:bb:ad:
ea:08:78:1b:97:df:8d:ab:fc:7d:47:a5:d4:32:45:e4:94:ff:
a6:b0:85:4d:0d:8e:59:a8:42:b2:c9:e2:0d:b7:29:ed:7a:91:
f8:a9:67:6f:50:2e:b8:21:a7:55:57:1f:7d:d5:18:88:07:19:
73:7d:b0:be:1f:d8:1d:e9:0e:39:f7:cb:71:be:3b:01:b5:45:
8b:68:df:6f:75:7d:ed:bb:e6:b0:6e:b7:1e:c2:f7:63:0f:2c:
07:ad:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:50:15 2026 by rpki-client