Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: JMdD9bxOA1zFWpB+cmCHO9fg79EabkFCVyvhE46o5yk=
Subject key identifier: 8A:26:D3:15:9F:DA:7E:72:A5:B9:1F:78:6C:CC:4B:81:3B:C4:94:6E
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019F8FEC76D91C0F08AFA2329A72F9D32ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 1175
Signing time: Thu 23 Jul 2026 17:01:06 +0000
Manifest this update: Thu 23 Jul 2026 17:01:06 +0000
Manifest next update: Fri 24 Jul 2026 17:01:06 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: a9dK7Z8T+j1pnmlAnKy2B42IxY3EFtj+ROP/RGfCgxI=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:76:d9:1c:0f:08:af:a2:32:9a:72:f9:d3:2e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jul 23 17:01:06 2026 GMT
Not After : Jul 24 17:01:06 2026 GMT
Subject: CN=8a26d3159fda7e72a5b91f786ccc4b813bc4946e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:e1:6f:ad:b0:f0:6f:c6:4a:49:dc:17:2e:
85:35:6d:1f:c8:e8:53:78:34:6a:f1:24:7d:4c:30:
a3:c7:a9:bd:0b:c5:c5:5f:45:53:16:51:0a:59:a3:
dc:8b:0e:ac:90:99:a0:b7:45:c4:ad:07:c2:24:a5:
bd:a7:1a:24:13:38:1d:7d:96:bb:32:9d:0b:5f:b3:
ca:ba:7d:7d:b6:46:b0:0a:dd:e8:be:4e:83:6f:6e:
7b:eb:c3:d4:88:2b:c5:63:86:ec:1f:e3:18:bb:ae:
04:46:7d:69:b5:a3:aa:20:9c:b9:05:81:28:27:f7:
f2:8b:44:0f:f9:df:4f:f5:86:70:5f:e6:66:f2:34:
b9:d0:05:14:71:4f:14:f4:82:51:76:32:74:93:65:
ff:63:08:20:c7:48:16:0a:b8:26:aa:8e:3b:ea:21:
64:ca:58:cc:48:92:f3:c6:19:0d:97:a9:25:aa:ab:
aa:70:81:1f:06:f3:53:7a:63:11:c9:6c:52:1b:10:
6f:ec:c0:98:39:f6:a9:8d:f0:a9:a7:fa:ac:c7:a3:
e8:03:1f:71:b9:e0:a3:5c:33:b1:b0:df:24:b1:6d:
64:70:8b:b0:f0:db:b6:e1:99:f1:af:66:b8:e8:56:
9d:ef:91:f4:bc:f8:29:3d:a1:ad:ad:e9:f2:16:35:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:D3:15:9F:DA:7E:72:A5:B9:1F:78:6C:CC:4B:81:3B:C4:94:6E
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ab:e5:f6:41:bf:3d:ec:9b:00:47:6b:98:f2:88:42:96:a1:
6b:4c:c2:8f:54:c5:96:13:4a:47:e8:9b:2b:dc:a6:32:23:9f:
be:28:0a:64:cb:46:57:34:5b:51:8e:9e:0a:a2:d5:62:95:33:
a0:75:c3:76:4f:30:9b:50:8b:91:20:0a:34:b3:81:6c:c1:55:
72:49:6f:a5:62:d7:c3:6c:05:08:6a:d1:c4:93:ff:58:f3:44:
46:71:df:1e:1f:98:7f:9d:38:66:1c:ec:94:f9:77:e4:71:60:
36:68:aa:d8:36:c1:77:bb:bc:b0:a6:89:4e:b0:f7:04:2a:ec:
97:f0:83:17:4e:da:54:0c:d0:07:55:48:68:6b:ef:05:23:9c:
1a:14:79:bc:fc:b9:88:60:4a:a7:0c:95:ad:a3:89:8c:96:fe:
35:ad:d4:b1:fa:99:2a:43:e3:58:18:1b:27:04:28:2c:29:a4:
fb:54:a0:34:35:6f:4b:a9:36:60:77:ce:ef:83:e9:81:25:f5:
7a:64:18:44:00:09:af:7a:00:12:9a:50:1c:e0:43:e9:04:df:
23:2c:fe:01:38:0f:1a:8a:3f:c2:1e:fa:8f:17:da:2f:31:ff:
ec:c7:c4:9d:c2:c5:b3:8e:0e:78:9c:42:bc:c5:04:be:54:7f:
96:d9:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:02 2026 by rpki-client