Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
File: iHX9AcLoxTbR1lDyWXd2AFSl70E.mft (raw, json)
Hash identifier: KLC+arO8bMT+BQ+FpM5U7v11MeXMAGjVvoGY1dk4eww=
Subject key identifier: 3D:A4:22:77:31:20:0E:E2:56:D5:BB:EF:A5:E2:9D:70:C5:B0:5F:9A
Authority key identifier: 88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
Certificate issuer: /CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Certificate serial: 01A03E5FA792EC95665667329175DB13765E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
Manifest number: CE
Signing time: Wed 26 Aug 2026 14:00:51 +0000
Manifest this update: Wed 26 Aug 2026 14:00:51 +0000
Manifest next update: Thu 27 Aug 2026 14:00:51 +0000
Files and hashes: 1: _bPoF2ZH4mhZ8Ri8aUb1EwwCjzM.asa (hash: FN6qeizQ7kr3SU7QJEODvtVTBtcF/dzMFYrvZ6+fXAw=)
2: iHX9AcLoxTbR1lDyWXd2AFSl70E.crl (hash: plxvpow++JAGzCW9Qdrqfa1OonIcy6l7ORmPTyvnmkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:a7:92:ec:95:66:56:67:32:91:75:db:13:76:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8875fd01c2e8c536d1d650f25977760054a5ef41
Validity
Not Before: Aug 26 14:00:51 2026 GMT
Not After : Aug 27 14:00:51 2026 GMT
Subject: CN=3da4227731200ee256d5bbefa5e29d70c5b05f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:e0:1e:a2:62:c2:e5:06:e4:51:23:f2:5d:
d8:46:78:bd:e9:e7:f0:3b:c4:11:cb:b4:a9:db:e6:
20:df:43:a4:7e:15:d2:5a:62:7e:6f:31:5c:56:bb:
10:30:fb:8d:fb:be:a7:2e:85:b5:a3:4c:79:c5:a8:
e3:28:01:67:91:a0:a1:d9:ca:42:b5:bf:f5:83:b5:
f3:c5:ad:ee:af:1d:fa:51:0f:19:51:1c:f0:9b:b3:
eb:cc:24:60:f2:97:ef:16:9b:86:a0:05:e0:03:2b:
4f:19:23:99:28:69:58:4c:60:db:13:b7:63:80:ff:
53:e9:42:c3:0c:c2:ae:26:a3:25:f1:d7:0c:58:43:
85:49:d6:e7:c6:bb:ae:27:9f:71:5f:01:ae:70:68:
fd:bb:f6:80:63:4a:dd:1b:2d:78:16:de:c9:7c:ce:
95:da:9f:d7:d2:fc:95:34:9a:1d:b7:d0:3b:f0:22:
71:8a:6b:34:90:d0:fa:8f:d2:aa:da:d1:c9:38:5d:
f2:dc:4d:b3:4d:3f:09:8e:7a:65:0d:7f:b4:d5:7c:
45:69:9e:53:d1:cd:f6:86:12:8a:95:03:02:ef:ea:
87:b7:0c:84:9b:6a:50:cb:f2:0e:15:7d:e1:89:44:
2b:2a:b8:37:fc:d7:7e:83:6e:2a:89:1b:ea:e1:67:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A4:22:77:31:20:0E:E2:56:D5:BB:EF:A5:E2:9D:70:C5:B0:5F:9A
X509v3 Authority Key Identifier:
keyid:88:75:FD:01:C2:E8:C5:36:D1:D6:50:F2:59:77:76:00:54:A5:EF:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHX9AcLoxTbR1lDyWXd2AFSl70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e99401-930b-4e69-ad62-5912c34bba96/1/iHX9AcLoxTbR1lDyWXd2AFSl70E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:e8:e3:f2:87:e4:ee:72:fd:ae:10:bc:81:b5:a8:41:e9:
a6:ac:94:1d:7b:a4:02:e9:b1:6d:cc:3b:d8:d3:b2:6f:73:1a:
db:71:64:20:a6:de:d5:fc:80:c5:f4:8c:ba:cc:80:e0:fe:09:
7d:d7:03:a9:ed:1e:fa:f6:e8:ab:4d:44:ee:38:3d:95:e0:87:
f7:69:1b:a0:f4:aa:5d:8a:49:48:3a:b6:29:b1:7a:24:e1:5b:
15:00:5f:20:9f:84:55:ac:8c:4b:47:55:82:d9:9e:f5:72:e0:
b4:b3:d9:42:b3:01:d1:53:17:05:47:7e:53:c8:09:ce:e7:e5:
6f:33:da:c2:e3:a4:a6:f3:24:90:a4:c1:69:08:1a:25:b6:3a:
5a:0a:2a:2b:dd:b3:13:89:11:b5:49:16:b0:08:15:48:11:1f:
16:66:85:95:02:e9:8a:9c:4b:e4:74:b4:f6:24:df:48:0b:48:
27:78:3b:6b:a5:d6:ee:23:f1:e0:c0:44:ee:be:bf:1b:88:e1:
aa:cf:ea:63:9a:71:90:22:f3:ea:68:a6:31:28:1c:35:62:0a:
f5:57:8a:a4:e1:3b:99:72:15:75:a2:42:f3:38:c1:4d:9f:ae:
9f:9d:29:43:19:7c:00:1a:42:a0:c5:35:57:d0:31:7b:04:20:
b8:50:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:16 2026 by rpki-client