Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: 4hfRWB5rWuSxF2omfWxQBb+HBHqgxUW/7xWu3dpAU/8=
Subject key identifier: E9:67:AA:3C:27:5A:BF:6B:A8:AC:A7:FA:C2:8E:C4:A9:9E:43:8D:66
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 01A17CCEC1FF5B2C4DDFD48B0CFE07BA50E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 1197
Signing time: Tue 27 Oct 2026 10:01:27 +0000
Manifest this update: Tue 27 Oct 2026 10:01:27 +0000
Manifest next update: Wed 28 Oct 2026 10:01:27 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: oTrKeY8JB8Xki485HaWbO9Fg4d/Hh8Gqg6hzwZZ7KgM=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:c1:ff:5b:2c:4d:df:d4:8b:0c:fe:07:ba:50:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Oct 27 10:01:27 2026 GMT
Not After : Oct 28 10:01:27 2026 GMT
Subject: CN=e967aa3c275abf6ba8aca7fac28ec4a99e438d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:23:b5:5c:fa:4f:8b:a4:b5:42:00:9e:a0:
9e:5b:80:16:f0:fe:6f:c2:1b:d0:94:2b:f3:80:27:
5e:91:10:5e:b2:b6:51:fd:54:f3:aa:87:b5:72:d7:
8a:64:af:20:13:42:68:c0:8e:6e:ce:fd:c7:0f:11:
f9:71:19:82:2b:11:56:5a:c5:83:8b:4f:f3:46:d5:
1a:d9:d0:0a:65:d2:52:4c:f3:80:d7:e0:a7:08:5c:
82:37:23:0f:1d:dc:06:4a:f0:88:dc:02:c8:84:11:
e5:36:d0:37:58:82:57:63:67:df:97:4d:77:c6:b3:
41:85:fa:13:3e:ba:02:1e:d7:9a:44:bf:66:d8:a8:
e9:86:fc:2f:72:ed:b1:26:66:68:b6:99:1d:14:11:
89:b5:f9:f5:ad:f4:cd:b5:1d:8c:e4:8c:1c:c1:51:
b0:5d:b9:78:43:49:7f:da:0b:62:f4:0e:59:df:a3:
5d:89:20:61:5a:44:14:2e:f1:65:2e:2e:21:9e:16:
e7:11:07:0a:74:13:c7:f9:cf:67:13:b1:c2:cb:fa:
80:06:69:bb:71:43:da:31:50:0f:70:6f:23:28:10:
d7:22:76:ec:03:72:8c:6b:07:2c:3b:03:9d:88:9c:
92:5b:c9:35:e3:98:2d:c7:d1:1d:85:d0:df:54:a7:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:67:AA:3C:27:5A:BF:6B:A8:AC:A7:FA:C2:8E:C4:A9:9E:43:8D:66
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ff:c8:19:7a:65:d5:16:58:59:56:cb:09:ae:57:bf:51:1c:
16:ef:ed:2c:d5:40:db:0d:99:6a:05:57:ed:95:50:08:08:9c:
91:48:fd:85:e4:6e:1d:d1:09:2b:36:35:2e:bc:c3:63:d0:41:
3c:28:b8:3c:be:6f:1d:27:6b:d0:31:86:4b:4d:d6:bb:52:06:
06:c7:c6:68:27:3b:81:bc:04:be:41:68:9f:ec:0e:8d:f2:81:
73:e9:8f:47:6a:54:b4:2f:ee:1a:02:ea:46:25:dd:f6:22:f0:
4b:9f:7e:42:bf:c7:50:42:50:f6:15:bc:f5:35:85:b1:77:93:
6b:79:35:81:cf:8e:43:a1:ce:7d:84:58:1e:79:e6:97:c3:33:
d2:70:0f:4c:02:0e:46:64:27:c2:4c:61:4c:a8:21:2a:14:fd:
0c:b6:8f:5d:3c:ae:e1:9a:60:9f:16:e3:54:dd:f7:c1:e7:04:
a4:b5:a1:3c:c3:d4:47:35:63:a8:2e:53:d4:bb:2c:c5:a4:d9:
e1:d0:0f:66:de:b2:7a:a9:91:96:b2:1d:02:3e:f4:1f:61:d7:
8d:0b:20:56:ce:8b:b2:30:cf:82:68:3c:99:10:97:94:9e:4c:
f7:77:17:73:2c:fe:a1:e7:8d:48:f0:55:cd:5e:af:e2:b0:84:
71:ae:58:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8zsH/WyxN39SLDP4HulDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk
MTg3YmMwHhcNMjYxMDI3MTAwMTI3WhcNMjYxMDI4MTAwMTI3WjAzMTEwLwYDVQQD
EyhlOTY3YWEzYzI3NWFiZjZiYThhY2E3ZmFjMjhlYzRhOTllNDM4ZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4EjtVz6T4uktUIAnqCeW4AW8P5v
whvQlCvzgCdekRBesrZR/VTzqoe1cteKZK8gE0JowI5uzv3HDxH5cRmCKxFWWsWD
i0/zRtUa2dAKZdJSTPOA1+CnCFyCNyMPHdwGSvCI3ALIhBHlNtA3WIJXY2ffl013
xrNBhfoTProCHteaRL9m2Kjphvwvcu2xJmZotpkdFBGJtfn1rfTNtR2M5IwcwVGw
Xbl4Q0l/2gti9A5Z36NdiSBhWkQULvFlLi4hnhbnEQcKdBPH+c9nE7HCy/qABmm7
cUPaMVAPcG8jKBDXInbsA3KMawcsOwOdiJySW8k145gtx9EdhdDfVKeYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlnqjwnWr9rqKyn+sKOxKmeQ41mMB8GA1UdIwQY
MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt
ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4
LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ//IGXpl
1RZYWVbLCa5Xv1EcFu/tLNVA2w2ZagVX7ZVQCAickUj9heRuHdEJKzY1LrzDY9BB
PCi4PL5vHSdr0DGGS03Wu1IGBsfGaCc7gbwEvkFon+wOjfKBc+mPR2pUtC/uGgLq
RiXd9iLwS59+Qr/HUEJQ9hW89TWFsXeTa3k1gc+OQ6HOfYRYHnnml8Mz0nAPTAIO
RmQnwkxhTKghKhT9DLaPXTyu4ZpgnxbjVN33wecEpLWhPMPURzVjqC5T1LssxaTZ
4dAPZt6yeqmRlrIdAj70H2HXjQsgVs6LsjDPgmg8mRCXlJ5M93cXcyz+oeeNSPBV
zV6v4rCEca5Yhg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:32:16 2026 by rpki-client