Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: QrtIk/GnSytEQMmcRmxXiU/hJhdHGpa8gmB378xnuY8=
Subject key identifier: 9F:0A:A1:01:B8:87:7A:D3:39:BE:55:3A:CA:55:F4:69:37:6D:26:BC
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01A1DCB94E451D137A878EE95B0A27E00E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 19A2
Signing time: Sun 15 Nov 2026 01:01:34 +0000
Manifest this update: Sun 15 Nov 2026 01:01:34 +0000
Manifest next update: Mon 16 Nov 2026 01:01:34 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: +idgROFe1PHbr0BbxHsJ1uyX7n183HLCUkDHFsseGFA=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:4e:45:1d:13:7a:87:8e:e9:5b:0a:27:e0:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Nov 15 01:01:34 2026 GMT
Not After : Nov 16 01:01:34 2026 GMT
Subject: CN=9f0aa101b8877ad339be553aca55f469376d26bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:29:b5:0a:89:b6:42:b5:37:b7:3d:ef:7e:
cf:a3:5b:63:29:60:80:b8:a4:49:b6:14:fc:d6:92:
09:74:54:8f:d6:14:15:e6:cc:7c:12:4f:37:63:78:
47:8d:3a:90:41:cb:31:1f:53:a1:5e:e0:01:a0:2d:
75:11:53:7d:61:ae:88:f7:08:ad:3c:73:7f:73:95:
49:db:20:84:06:06:95:1a:dd:3d:20:56:12:b6:b6:
9c:d5:ac:19:79:35:e8:9d:0a:fa:f9:28:7e:30:f2:
24:29:b7:c1:48:e6:c0:3c:cd:bb:43:49:1c:47:e5:
ab:f6:ba:64:39:c5:dc:a7:14:11:d2:16:00:63:1c:
bf:38:e2:40:98:57:65:b6:f0:bf:19:28:ea:2c:df:
18:84:bc:76:f0:7a:6f:b3:0f:4a:e2:66:f8:6f:7d:
27:c6:cf:37:8e:17:70:2d:ed:4e:b2:a3:35:a9:69:
87:49:dd:6a:0a:b2:f5:96:40:79:1b:64:6f:6a:ea:
1f:f9:ca:ba:d3:2e:e3:ec:4f:8b:7f:d4:1b:dd:7a:
66:f5:38:69:c8:03:b0:37:57:1c:da:1e:f9:a6:12:
ea:db:24:f9:f0:44:a6:b4:ff:e6:75:e1:69:e5:68:
8e:ce:3b:24:af:c0:d0:9c:3a:59:50:9e:1c:4c:fd:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0A:A1:01:B8:87:7A:D3:39:BE:55:3A:CA:55:F4:69:37:6D:26:BC
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b8:44:e7:98:99:28:af:56:da:f6:30:2d:8f:05:90:64:ab:
75:69:5c:8d:89:e1:33:4c:e9:76:24:46:cf:ef:69:f2:63:1e:
4d:05:8a:7b:19:3b:e8:ba:97:e3:07:c5:7d:c1:9c:72:ff:08:
54:03:fe:88:c9:b1:55:a6:69:98:68:28:b8:a5:a6:2f:42:5a:
0a:a6:da:21:1d:34:62:ae:0d:1a:ba:f1:00:82:7d:46:9d:b5:
d1:32:54:3e:7c:f1:a4:7d:5a:c0:b8:e3:04:8d:f8:c2:55:9e:
ae:46:7b:be:a8:21:42:0d:5b:33:65:ec:9c:5c:3f:f2:cf:93:
6b:77:5c:df:97:a3:e4:76:b1:37:e0:12:91:9e:8f:0c:38:c0:
8a:42:2e:e2:a3:b6:88:dc:21:3b:82:86:10:2e:b7:24:09:78:
2b:59:eb:a2:d9:ae:2c:cc:b6:da:d8:88:be:0e:2c:bb:75:d8:
0e:ff:c1:25:df:77:f2:2f:00:e3:b4:87:04:cb:84:13:32:7d:
e4:44:9b:59:b7:ea:9f:df:91:ae:03:2f:af:17:d0:a0:eb:a2:
89:49:eb:76:42:62:3f:a0:e8:e8:7b:1c:57:8d:77:36:7a:5c:
30:7b:2a:80:bb:7e:98:a7:3a:ac:0c:7c:d7:d7:c0:1d:36:52:
53:eb:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:08 2026 by rpki-client