Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: mRClg6r2zDA7kmmjk0VIlcOHMdxAQhHIok1vCQEj71o=
Subject key identifier: E3:CC:76:AB:AE:F8:0F:FB:2D:21:55:D4:AA:4A:81:6B:77:62:EC:B7
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019D37C07C93823646563B70B7175288F39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0F61
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: O8KzFFmzOxP4sXeVQovjfjmxNmCWs4SLJpJhxfxa7bM=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7c:93:82:36:46:56:3b:70:b7:17:52:88:f3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=e3cc76abaef80ffb2d2155d4aa4a816b7762ecb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:b4:2a:24:5e:0c:aa:ee:4f:35:a0:ed:f8:
d8:07:23:2e:e0:f0:e2:90:09:fe:fd:17:48:1f:ad:
df:80:65:6d:29:21:58:08:f2:e1:b2:7b:54:e4:c4:
de:f7:16:30:66:83:9d:72:ab:82:cb:67:24:76:ff:
d4:fd:e4:79:c6:55:1a:27:31:18:e9:2d:56:7d:36:
db:45:09:2c:c3:7a:0a:d0:43:3e:4a:ba:50:9d:7a:
67:d7:ba:67:7b:cd:4b:1b:27:5a:8f:22:3b:80:72:
9a:8e:fa:12:80:bc:bc:e6:3c:78:5e:49:a7:c0:3f:
a7:cf:a2:31:77:a1:04:57:6e:1e:58:3f:8d:d9:bd:
a4:04:37:12:db:59:d6:6c:8d:ca:83:27:fd:74:9f:
25:1e:a6:69:4a:f2:95:11:73:94:5a:2f:98:1a:e2:
b7:e8:b9:be:e4:14:65:1c:c1:2d:22:ea:88:18:9d:
3d:0a:9b:35:a4:b2:a0:23:74:8f:0f:ca:56:de:18:
02:2a:77:e2:c4:34:ed:b1:a1:78:06:ea:9d:45:80:
30:71:a2:bf:9f:57:d9:8c:cc:9f:63:7d:b3:de:71:
ce:a5:d6:03:16:f6:20:23:fa:f6:df:a7:c8:b0:92:
3f:c3:0d:9c:40:fa:d1:85:21:c9:4c:93:7b:8e:15:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:76:AB:AE:F8:0F:FB:2D:21:55:D4:AA:4A:81:6B:77:62:EC:B7
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:28:f2:85:bc:3f:ef:16:f6:51:58:9f:01:35:e6:c8:19:e1:
74:72:11:e8:cb:52:17:0c:00:5a:b4:28:f3:e4:6f:68:fc:0f:
fe:2e:4e:7c:a0:5b:94:f0:f4:07:2f:80:b2:02:1d:50:a4:f7:
a2:0d:59:b5:ef:49:9a:9e:59:64:96:84:70:e4:52:d3:d3:90:
46:d6:eb:ba:cd:20:b5:1d:cd:5e:fe:db:ce:80:7e:36:06:a6:
91:df:3e:fa:3c:d5:f2:69:60:e7:7d:f6:a5:e4:a8:a3:11:ee:
7c:aa:9a:3c:6b:66:e8:e7:9e:86:50:57:e2:87:61:2f:b2:91:
01:a7:7a:ac:51:a6:cd:b7:0d:5d:e8:e9:f2:6f:54:e1:83:e5:
d8:dc:c6:c4:51:d5:2f:4e:bd:8f:69:62:35:36:7f:17:92:a2:
30:de:46:40:1d:d2:0f:a6:93:46:d3:6e:1e:21:7a:c7:6e:c5:
6a:b9:16:98:7a:4e:8f:03:03:c3:86:bf:76:72:84:67:c3:91:
a9:a0:c7:f5:83:a4:aa:b5:81:75:d8:5d:c6:84:6e:e8:18:b8:
83:49:4d:4e:92:d5:56:f4:a7:8e:6f:6d:58:6c:ba:16:d2:c9:
07:9e:7c:c9:18:f7:2f:2d:2e:e2:43:41:9b:11:0d:e0:f6:28:
a6:a5:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:43 2026 by rpki-client