Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: qteXSmB029re7I6CxDkuP/K37ANgM+xeag2V2VPRAmc=
Subject key identifier: 26:56:FD:20:44:24:5A:F3:1E:49:31:6C:B7:E8:0F:57:D7:65:37:7A
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 019E4F219D4F367CBAE7AD469CC11593DCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 0A62
Signing time: Fri 22 May 2026 10:01:03 +0000
Manifest this update: Fri 22 May 2026 10:01:03 +0000
Manifest next update: Sat 23 May 2026 10:01:03 +0000
Files and hashes: 1: 1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa (hash: hWaDKKuFN6+6e36Ikm8e0jjTVm6uyDQ92iqKklLnoi4=)
2: NEQkMGAJAfKugYCF_SBXZZt_zOA.roa (hash: 1zriG+EOUPPANFuX8FQR4exMMCMJ2lG+QMPasFhRCHE=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: EifwafvETlO/if22RpjHCa1LfSp1XPI2Qvi7KQ0lHKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:21:9d:4f:36:7c:ba:e7:ad:46:9c:c1:15:93:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: May 22 10:01:03 2026 GMT
Not After : May 23 10:01:03 2026 GMT
Subject: CN=2656fd2044245af31e49316cb7e80f57d765377a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:d5:8a:bf:23:11:b6:e5:c6:c4:ad:9f:a0:
81:5e:3d:83:31:82:9e:7b:a5:05:67:12:02:b1:24:
1d:84:28:1c:3e:04:87:a3:76:34:26:55:c3:4c:90:
5d:b5:47:57:de:14:1e:62:70:57:fd:7c:5f:60:e2:
a2:d2:e4:08:e9:94:85:34:2f:b7:53:82:24:7d:41:
81:3f:ed:26:1b:73:1f:b1:36:a8:19:be:a4:d1:76:
a1:34:b9:cf:0c:26:b0:4c:97:1d:0c:45:84:00:51:
fd:a1:e7:ae:2f:7c:69:20:9e:95:f4:15:31:fa:08:
60:00:c7:73:34:aa:19:af:a4:61:6c:6b:4c:91:e6:
4d:6b:11:11:71:05:34:7b:42:9f:ab:6e:d7:9f:87:
15:73:9a:eb:ad:3f:3b:67:59:b0:18:50:8b:bb:98:
44:30:50:c9:85:a2:f1:de:4c:84:a3:92:3a:74:cf:
02:a0:a5:65:f2:73:11:e8:5b:d5:8d:80:95:a1:2b:
61:34:1f:f4:9a:82:91:e0:67:73:11:a9:0b:17:4a:
ec:9f:1c:50:8b:68:bf:3f:66:0f:f4:b2:c2:e9:27:
95:8e:d6:e2:2f:db:3c:3c:d1:9c:cc:c6:3c:5e:89:
1b:7a:d3:3e:e5:67:d4:10:b3:18:28:db:74:11:52:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:FD:20:44:24:5A:F3:1E:49:31:6C:B7:E8:0F:57:D7:65:37:7A
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:51:a8:ce:f9:ab:16:34:3d:45:63:01:2a:5a:55:b6:15:2d:
57:84:8b:a8:8f:b5:18:91:86:6c:c4:5e:85:14:09:28:16:bf:
9b:5d:76:83:58:69:95:ae:1a:9e:c8:63:95:03:11:91:55:9d:
48:ae:be:23:30:b4:13:32:58:1d:b6:6e:83:f0:11:f6:43:12:
cc:f1:33:8c:f3:ed:b8:ea:05:fc:a7:c7:4b:8f:37:9b:62:46:
4e:f3:ca:da:50:c0:c9:73:b2:f4:82:f8:d2:00:d2:0d:76:db:
eb:e1:df:76:5e:db:62:78:5f:12:29:f4:f5:76:d0:a8:3b:c0:
82:fa:56:13:07:f0:c4:38:2d:17:bc:a4:bb:f0:a9:4b:b8:3f:
4a:bf:8a:70:c0:ea:73:37:ce:6d:c6:4b:bf:35:85:1f:5a:84:
e4:31:38:d9:20:ac:97:81:96:af:95:21:fb:13:e9:5e:3a:4a:
45:d0:59:29:fe:d8:2d:d8:ec:48:70:ad:e6:ef:6f:7b:94:b4:
48:73:b0:c1:17:39:fc:7a:b4:f9:da:9e:0c:9d:5f:b7:b5:e6:
64:bf:8b:eb:8f:88:d1:a6:f3:53:e7:b9:2a:de:73:a4:d2:bc:
c9:ec:98:68:4d:0c:b6:5b:5f:20:b8:47:72:40:ea:d7:74:89:
dc:14:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:17:33 2026 by rpki-client