Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier: yzMb7lc5+uYNFeZl0O/9g8pOtxRTaRTwPuWr615RlvM=
Subject key identifier: 53:5D:1C:76:0A:7E:8B:7E:9D:19:73:6A:12:E3:29:B8:E4:E2:EF:D8
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 019DCD86A712CBD205372B62C5BEE003A025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 06:00:46 +0000
Manifest this update: Mon 27 Apr 2026 06:00:46 +0000
Manifest next update: Tue 28 Apr 2026 06:00:46 +0000
Files and hashes: 1: _96Euvo05bQiTFxZBzxImx3S1Qo.roa (hash: 8USkhhFs2laMuIgluBHy8qGwUIcnnc8iCXVDlvT0OTc=)
2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: 8R5C/2SWJ4hoExO1qsuza7jwz+TYNrMJbBlKLxHHdb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:a7:12:cb:d2:05:37:2b:62:c5:be:e0:03:a0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Apr 27 06:00:46 2026 GMT
Not After : Apr 28 06:00:46 2026 GMT
Subject: CN=535d1c760a7e8b7e9d19736a12e329b8e4e2efd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:19:93:91:26:04:e8:ed:bc:ff:27:ec:a6:
bc:35:b8:2b:68:67:6e:67:75:55:36:47:53:00:a5:
de:60:44:09:8d:bb:dd:c9:a8:7d:f9:dc:12:b3:f7:
12:cf:33:d0:c3:b8:df:13:c1:26:9d:80:3d:9d:77:
90:da:bb:8c:ba:64:70:07:96:a0:9b:8d:fe:62:c9:
0c:33:7e:2d:6b:fd:fe:57:14:ab:91:98:6f:cc:d2:
e0:99:6e:be:46:20:f2:57:07:46:d6:bb:41:0e:2e:
1f:0a:82:7b:e5:57:33:92:f6:35:b4:66:aa:19:f5:
7b:ff:ec:c9:6f:78:5f:df:10:a1:bc:4d:4c:95:69:
4e:3e:70:4c:e0:81:3c:56:38:10:3c:cc:13:ca:ad:
88:cf:6f:97:6d:1b:ee:b3:2a:00:df:7e:b2:38:44:
29:03:9e:9e:2f:cd:cf:17:7f:54:cf:dd:bc:da:86:
1b:64:7d:41:98:8c:c2:f6:ee:44:49:2d:9f:3e:1a:
c3:73:5d:30:ee:c9:ac:e0:29:9a:a4:35:e8:c1:83:
14:98:e9:cd:9e:f8:db:96:ee:b8:a7:87:91:28:99:
0f:09:3c:97:7f:5c:f7:f2:14:bc:11:42:5a:dd:8a:
73:32:88:ad:10:a0:b7:cc:9c:64:d1:a5:e6:36:5b:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:1C:76:0A:7E:8B:7E:9D:19:73:6A:12:E3:29:B8:E4:E2:EF:D8
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e5:da:26:c1:0e:fc:ed:3a:f6:ea:d4:b0:49:e2:0e:e8:15:
72:b2:d4:81:a1:26:9f:03:f5:80:6a:fe:06:b0:bf:98:93:36:
ba:a4:ef:d7:d2:e3:e2:68:5f:81:aa:24:f6:e8:b6:e6:10:5c:
a1:55:21:0e:fc:b5:19:a9:a9:05:b6:78:65:5c:01:f2:2d:3a:
02:7d:f4:24:b5:87:53:4b:57:7e:8e:49:f0:79:3e:99:80:91:
6c:81:b0:7f:74:83:8f:4b:f3:7a:f0:45:f2:37:41:fc:36:a8:
90:7a:b3:6a:54:79:65:89:fd:e5:b9:eb:fe:e0:10:88:e9:d0:
fb:12:6d:56:73:0e:a1:93:65:c9:ab:7b:09:73:1d:47:65:27:
a1:51:1d:29:0d:7a:0d:e9:e2:01:5b:9f:ea:8f:f0:c7:96:a7:
a1:7d:6a:bc:15:90:d1:29:5b:40:62:8e:0e:6b:7c:21:28:e1:
c8:17:4e:be:02:61:c7:24:a6:f1:84:fe:d1:0c:f8:bd:29:1a:
e6:2b:a3:58:27:8b:57:d6:c6:b3:df:cd:ff:04:68:58:b1:aa:
e1:1c:b4:a1:21:41:79:f6:2a:61:96:74:df:f2:10:70:dc:53:
9d:9c:d6:ff:0f:70:c6:1c:a6:22:ef:63:ad:b6:fb:32:e6:62:
00:2c:b5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:35 2026 by rpki-client