Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: p+UnY2ZDM/dzlS4ArFXiej/he1yBscOs/8J1Z3D9mpI=
Subject key identifier: CC:B9:DA:71:F3:5B:A7:DD:EB:6C:02:8B:B9:88:6D:CD:E7:A5:8A:13
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 01A0CE91419DCC5C7194643BFDA1B6D61889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 121A
Signing time: Wed 23 Sep 2026 14:00:21 +0000
Manifest this update: Wed 23 Sep 2026 14:00:21 +0000
Manifest next update: Thu 24 Sep 2026 14:00:21 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: k9FKBQgAd0uf6GBTnMHS1Lao2sqmxNYlbOK3HLQNe2s=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:41:9d:cc:5c:71:94:64:3b:fd:a1:b6:d6:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Sep 23 14:00:21 2026 GMT
Not After : Sep 24 14:00:21 2026 GMT
Subject: CN=ccb9da71f35ba7ddeb6c028bb9886dcde7a58a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:ae:39:ee:cc:9c:8a:90:e5:ed:e1:ce:dd:
4b:12:ba:55:09:0b:65:94:70:d6:39:36:d9:c5:ed:
2e:be:10:1e:82:6b:3b:e2:7d:40:7b:d0:87:1a:87:
5b:e6:53:f7:15:bf:df:d5:22:47:54:dd:39:2d:3e:
5b:74:0d:3b:81:d5:5e:6a:d6:61:fc:24:f7:f9:9b:
e0:33:3d:67:29:d9:7d:b3:17:92:ff:be:6c:eb:1a:
fc:6e:f8:77:0f:0b:26:e2:fa:89:4c:6a:97:29:4c:
a3:6f:52:ac:d2:f1:d5:f8:29:31:5e:96:b4:d9:f6:
32:39:64:33:7d:d9:fc:02:d4:a5:20:65:a4:8a:cc:
85:01:88:41:26:a3:a3:98:e5:ae:bb:a4:f1:90:a6:
ae:f3:b0:cb:4d:2a:cf:25:39:1c:bd:f8:22:31:36:
21:ec:87:43:25:91:bc:fb:bf:f3:a5:b3:37:87:e7:
a6:9d:9f:10:ce:fc:61:57:38:e4:f8:48:ba:e9:92:
ea:5e:13:d3:b2:a8:7b:27:c4:77:ef:64:bd:47:15:
b0:03:05:e1:f0:a6:37:12:0b:1d:19:4e:37:40:9b:
aa:6d:29:d0:8a:68:7f:6d:27:9e:1f:5c:0d:ee:36:
9a:13:9d:a8:f8:91:63:a2:42:ff:9a:3b:90:f3:d5:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:DA:71:F3:5B:A7:DD:EB:6C:02:8B:B9:88:6D:CD:E7:A5:8A:13
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:81:56:9a:71:96:b9:38:0f:bf:7a:28:2d:0d:0e:8f:e7:ba:
bb:b4:e5:5a:35:72:14:95:3d:4b:c7:2e:bc:ba:99:0e:f7:e1:
ea:28:91:7f:00:b2:df:7d:a8:9d:56:0a:ab:41:00:54:8f:f5:
42:c2:85:d4:40:e9:48:99:e7:de:8b:d9:5f:4e:01:bb:b5:c7:
97:71:7a:40:b9:97:4a:e9:93:f1:76:04:8c:2a:ed:c8:42:a7:
83:87:24:ed:60:db:aa:5d:c4:8a:27:fb:ce:ae:09:01:88:1a:
46:1b:f1:16:01:74:d9:b0:90:08:06:7b:a0:86:e9:ab:a4:43:
a5:d8:33:67:59:71:c7:28:be:cf:92:86:1d:4c:33:da:a5:69:
41:aa:d0:f7:f2:46:ba:df:fe:38:a6:bb:ea:a7:47:73:62:50:
dc:76:16:d3:eb:6f:e4:ed:5a:a5:0c:fe:d0:61:f3:60:74:d3:
78:69:d3:71:47:a2:b5:14:a8:64:bb:97:47:93:78:79:69:76:
03:01:da:1b:89:40:42:d1:40:18:d7:d7:a5:e5:80:48:b4:20:
d7:9a:13:87:4c:8d:c7:cd:54:9c:a6:fd:4b:92:f7:fa:e3:bb:
d7:e8:80:e5:1f:ce:fc:e8:f6:fb:11:64:e6:bb:12:5a:50:0f:
27:4a:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:36:33 2026 by rpki-client