Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: X5QN32SKUJHl75s86fJ3jILOxbLfaChVOZmdc+aCSXc=
Subject key identifier: 6C:AC:AE:A3:4B:BD:05:BC:C9:72:7E:92:30:98:F5:40:0B:E0:DA:A6
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019F9392080CFA11D1B89067073398F8C9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 1873
Signing time: Fri 24 Jul 2026 10:00:48 +0000
Manifest this update: Fri 24 Jul 2026 10:00:48 +0000
Manifest next update: Sat 25 Jul 2026 10:00:48 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: Aqr6rpNrHdNK/soCz4zSwE+WehB264Gbr5DBSJDoS34=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:08:0c:fa:11:d1:b8:90:67:07:33:98:f8:c9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jul 24 10:00:48 2026 GMT
Not After : Jul 25 10:00:48 2026 GMT
Subject: CN=6cacaea34bbd05bcc9727e923098f5400be0daa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:bf:54:88:70:e4:55:ba:61:f5:09:2e:36:
bb:1e:d3:d4:fd:36:f3:ff:3b:b9:14:35:de:86:fa:
0d:a5:68:1c:e9:b3:6c:e8:47:9d:ef:dc:4a:4b:e0:
43:3d:b7:99:2a:b0:88:e4:9c:bf:f6:b9:6f:c1:d1:
e0:42:44:b6:3b:45:fc:ef:95:11:f5:07:15:27:0a:
42:fb:3b:0f:56:a0:52:ed:ab:20:e2:9c:21:07:0c:
c3:b6:94:54:ef:bd:1e:18:2f:6e:f8:2b:bb:f7:3f:
5f:1e:e8:de:1c:6b:31:d1:1c:51:df:bb:09:cf:7d:
66:f9:d7:f1:3f:31:ea:30:6c:25:18:38:18:6a:94:
f7:90:7d:9b:36:63:33:c6:94:36:6b:5b:b9:e2:7b:
01:b2:fd:5c:7e:88:e9:50:a2:d5:b6:c3:5e:ef:95:
73:20:d6:f6:d5:12:ee:bc:e3:c2:5f:9b:93:b2:57:
02:29:e4:31:d9:4f:ab:57:30:92:2d:3e:fa:20:db:
26:21:b0:35:86:ae:31:d2:fc:b7:1d:11:ec:85:cb:
64:95:7f:99:a6:11:9d:d8:4d:02:f0:b8:b1:21:e0:
ba:84:41:de:95:98:09:00:c9:b6:09:08:18:6a:42:
bd:d8:bf:ab:52:c8:50:3a:12:df:d1:71:2f:a5:7f:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:AE:A3:4B:BD:05:BC:C9:72:7E:92:30:98:F5:40:0B:E0:DA:A6
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:01:da:de:fc:30:5f:9c:02:91:22:5b:5c:39:f1:4c:02:91:
04:11:90:35:60:d2:ff:c1:e4:36:56:74:f7:63:b9:95:01:98:
6a:20:e9:2c:2f:71:4b:a5:3e:b0:97:f6:ad:e9:c5:01:b9:98:
50:52:0c:a7:78:58:97:77:94:4e:9a:ab:df:07:21:ff:d1:d1:
80:28:e9:e6:20:15:48:95:49:a5:63:39:d1:4f:4e:da:0b:1c:
ae:49:56:50:3f:c3:76:0c:dd:b9:3e:1c:51:74:88:1a:f9:f7:
86:f9:8d:57:9d:44:62:60:60:c1:19:be:6d:f2:46:34:18:52:
07:f9:e8:79:46:2b:ec:cd:6d:4f:92:42:b0:cd:f9:9d:ef:37:
02:14:c5:67:8a:e7:da:f0:49:58:ef:42:5e:d1:63:b8:97:c5:
02:e9:56:2b:0b:71:53:66:a1:08:76:ad:47:92:01:a9:eb:49:
44:75:c0:0b:82:e3:82:dd:6e:c0:a1:9a:e4:5b:78:5f:74:5f:
f5:1a:64:55:08:ff:67:2f:80:0f:56:fc:36:63:7a:65:18:3c:
5d:b4:48:e8:0a:e0:63:d2:e4:5d:c6:a9:71:c1:26:93:2b:da:
99:16:a4:c9:86:25:9f:82:5f:2d:d7:c5:f8:55:89:b5:c7:fa:
17:e1:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:26 2026 by rpki-client