Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: jez0pNdEhSTHS/T0pfoRpAUyAb+3RdWCzxBbNX9aams=
Subject key identifier: A7:00:E1:2F:48:1C:76:3D:69:0B:D1:58:D7:C1:E0:74:F7:7F:70:A9
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 01A17AE0061E17A57538A44C11E668527A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 1196
Signing time: Tue 27 Oct 2026 01:01:04 +0000
Manifest this update: Tue 27 Oct 2026 01:01:04 +0000
Manifest next update: Wed 28 Oct 2026 01:01:04 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: RahN2aKA0GtG0Z6fsrEvWpnzgzjAf7CMgUk7EtR0TGU=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:e0:06:1e:17:a5:75:38:a4:4c:11:e6:68:52:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Oct 27 01:01:04 2026 GMT
Not After : Oct 28 01:01:04 2026 GMT
Subject: CN=a700e12f481c763d690bd158d7c1e074f77f70a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:81:45:46:0e:47:41:f6:b7:12:fd:74:24:
73:c4:85:1b:8f:1d:70:d0:0e:1c:10:c0:9c:39:82:
9d:01:10:42:e7:09:bd:f7:7e:bd:03:c8:87:47:78:
c3:4d:00:7e:02:1a:83:2d:4c:f7:2e:bb:ce:3d:1e:
a2:8c:53:22:30:c7:f2:08:d3:bd:7b:4c:9b:e0:62:
0e:b8:71:88:02:51:de:34:92:8b:c5:35:ca:99:d1:
1c:06:aa:d2:b0:86:f0:a7:1b:70:51:a0:77:5b:5d:
6a:b7:de:d7:97:5c:0f:f6:3d:ff:cf:e4:dc:6f:51:
6a:4a:f1:7c:81:ea:21:ee:8d:00:35:f2:ac:75:f2:
28:4f:41:59:fc:39:35:eb:b0:88:41:11:1f:9d:ee:
4c:d5:b7:3c:60:04:13:1b:f2:55:77:7c:2e:94:12:
dc:a9:7b:38:04:be:e7:d9:e8:2c:33:1a:f2:05:d2:
99:db:09:df:15:19:5b:6a:95:7f:42:27:1d:60:1a:
24:29:aa:65:8c:af:67:78:02:28:f4:91:66:75:73:
6a:05:18:43:10:ff:a7:ad:ee:f3:4b:cb:92:7f:ed:
64:b1:1d:51:fe:fb:8b:04:32:d2:27:8d:90:c3:5f:
a0:89:2c:8d:f2:1c:6f:84:25:46:f8:61:44:c6:d7:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:E1:2F:48:1C:76:3D:69:0B:D1:58:D7:C1:E0:74:F7:7F:70:A9
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d2:31:4e:c2:e8:de:51:1a:c2:74:06:e4:5e:e4:35:b9:be:
16:71:3f:70:4e:aa:a0:70:22:42:0c:b3:f1:ce:61:df:dc:01:
4a:da:02:03:13:5f:06:b6:1e:5d:97:f3:6e:eb:8b:d4:03:da:
be:06:e4:ca:71:26:3a:76:27:64:6c:27:7b:5e:99:f8:a6:a7:
82:47:a7:de:81:8f:10:52:89:d9:00:98:aa:bb:5c:4a:36:b4:
c5:b6:ba:84:d3:67:a9:d0:1b:d6:6f:03:c7:12:c2:2f:62:a2:
b5:39:41:43:57:d1:ef:e4:5a:12:2a:35:ce:9d:48:40:eb:b9:
4e:32:fe:2d:f5:6d:50:3c:46:09:a6:b5:64:7d:65:3e:9a:0f:
e6:fb:e6:81:fd:38:52:08:25:e6:ad:9e:4c:aa:55:5a:9b:3b:
e4:45:0e:36:88:00:ca:b2:b7:0e:d6:14:17:9e:c2:de:28:f7:
4f:b1:6d:9c:75:45:f4:dd:4b:be:52:eb:83:8a:f4:3c:90:3f:
94:8d:39:37:f9:16:8a:91:65:e9:d9:c8:d9:8a:fa:f6:8a:1b:
72:42:19:77:7b:e9:d1:99:84:0b:aa:91:1a:5b:10:03:01:33:
a7:e0:d2:02:b8:06:21:2c:2a:8f:83:38:2f:59:57:65:a4:a0:
e7:9f:a2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:43:36 2026 by rpki-client