Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: M5XVvZ9G+hZW9DrmAP14j8eYtlbaI4CRnDuRsi0+xyc=
Subject key identifier: 96:52:3E:B8:0F:AE:C5:B7:60:6D:90:E2:10:DF:F2:3B:2C:FF:09:30
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019E1F10FDC387FBA0B9A7802612CAE8AA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 10B6
Signing time: Wed 13 May 2026 02:01:07 +0000
Manifest this update: Wed 13 May 2026 02:01:07 +0000
Manifest next update: Thu 14 May 2026 02:01:07 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: p8aXpFQaP5b9ETM7nqJusj4/+PEhuARFE6AZQ/rU3j0=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:fd:c3:87:fb:a0:b9:a7:80:26:12:ca:e8:aa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: May 13 02:01:07 2026 GMT
Not After : May 14 02:01:07 2026 GMT
Subject: CN=96523eb80faec5b7606d90e210dff23b2cff0930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:b5:17:59:97:9a:5e:62:3c:53:23:01:e6:
26:c9:d5:a9:97:01:29:cc:e9:fd:5f:10:88:0b:39:
cb:0a:40:79:f7:7a:29:73:d8:ce:21:ad:c8:aa:d8:
19:2f:1a:35:34:cb:40:68:3f:4e:89:d5:19:80:04:
25:59:0a:2a:a5:11:ac:0b:2f:8b:e0:51:23:5f:a4:
d0:10:d4:b2:9e:be:a7:cb:1e:c1:06:53:5a:d0:b4:
5c:29:b0:6e:91:42:f5:47:52:de:df:f5:21:57:88:
e9:be:7c:19:c2:3c:93:3f:77:e5:9e:13:5f:b1:92:
df:9d:88:e2:86:30:fd:18:7e:f6:7b:80:32:1f:bf:
16:08:ab:c6:77:44:a9:83:d1:35:f2:0a:34:5a:e2:
6f:0c:c8:6c:74:d7:3a:65:7c:df:81:d4:6c:55:eb:
4e:ba:c9:4f:9d:72:c4:64:05:8a:16:66:9e:3f:b9:
8a:ac:a7:a3:9e:90:ec:a0:7f:5e:9f:05:5a:a3:84:
af:41:67:fe:43:d1:18:aa:15:b1:4c:6d:dc:42:51:
1a:fa:21:11:a2:38:e5:dc:a9:6d:4e:84:57:a8:db:
78:f6:8d:b9:6b:b9:2b:a8:c9:26:d9:37:4e:66:b3:
6f:09:64:7a:90:97:bd:48:79:5d:ec:e3:2f:b7:57:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:3E:B8:0F:AE:C5:B7:60:6D:90:E2:10:DF:F2:3B:2C:FF:09:30
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ea:56:8f:84:e3:be:26:d9:a2:56:73:86:6c:83:e8:92:59:
a0:c8:79:f4:8d:20:3e:62:c1:5e:d5:e6:6c:a3:0e:86:d8:72:
ef:11:c6:32:1a:c3:3c:b8:99:54:ee:b3:c2:24:8b:8c:34:dc:
33:4e:c5:68:80:f3:80:51:f6:75:82:5e:c8:9b:11:6f:3e:26:
17:e1:dc:40:c5:36:34:2d:ce:52:ec:b2:a6:ee:83:43:c2:b4:
eb:39:50:f3:2c:dc:ea:94:cf:45:8e:e2:88:8c:f0:3a:80:6c:
94:30:9d:e7:c1:6b:34:f9:0e:eb:7c:ef:f0:dc:d8:57:59:41:
97:a0:ee:ed:8d:3c:9f:aa:98:b0:c4:17:c7:f6:62:43:2d:1c:
2b:a8:ab:19:d1:b0:e1:52:58:7b:16:f3:2a:65:41:5c:2b:28:
b7:c9:7b:f7:32:70:50:d8:94:31:7d:b5:14:3d:be:16:0b:f8:
c5:f5:29:16:8d:bc:30:59:af:9a:6e:e3:16:e6:8c:6a:46:91:
52:69:82:56:df:8a:15:53:d8:ed:1a:06:70:5e:80:8b:af:7d:
49:d5:0e:3e:b4:3c:02:bf:1a:ef:f1:fc:42:71:e2:dc:98:01:
03:ff:5f:e2:1c:02:cf:44:78:69:fa:a9:2f:5c:98:1c:8e:ab:
88:0d:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:27 2026 by rpki-client