Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: L0UdRj85gXNq+WOCWwtCqEiWychdOpUK/6uJioYv0js=
Subject key identifier: F8:72:8C:A8:DF:F7:92:E3:6F:79:A9:FC:84:BF:30:A7:8A:F4:8C:07
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019E1CEBD0500F684E408149A811562C9C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 17B1
Signing time: Tue 12 May 2026 16:01:16 +0000
Manifest this update: Tue 12 May 2026 16:01:16 +0000
Manifest next update: Wed 13 May 2026 16:01:16 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: g2elyX0UWLU30FnOHLaOt9CJDXJ5RGWLokuqLbbDwJw=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:d0:50:0f:68:4e:40:81:49:a8:11:56:2c:9c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: May 12 16:01:16 2026 GMT
Not After : May 13 16:01:16 2026 GMT
Subject: CN=f8728ca8dff792e36f79a9fc84bf30a78af48c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:26:48:30:86:dd:ca:12:cb:3a:b6:af:04:
9c:7b:88:b5:aa:e8:94:77:f3:a2:ad:22:68:e5:09:
12:94:31:4b:fe:9f:e8:d7:06:b8:5f:aa:5f:98:ce:
2c:19:8e:b7:5e:5e:36:53:4a:0a:b0:22:ab:4a:38:
45:4f:80:74:73:a6:70:d8:c3:ad:f8:8d:5a:1e:a8:
17:57:44:8b:4b:32:45:32:2c:f5:11:a4:7a:cf:44:
3e:8a:b3:13:1c:6e:c1:15:12:07:43:b5:c4:14:21:
aa:08:7b:51:73:dd:90:1a:c1:4e:07:98:c0:90:ec:
18:99:6c:70:f7:16:bf:f8:d6:5b:d9:61:15:9f:b8:
42:d4:fc:ab:13:23:c9:72:39:d3:64:66:0d:33:2a:
92:70:3b:0b:00:5c:f9:f7:a4:7c:31:f5:6e:35:cb:
51:1d:b0:4f:91:b4:79:0d:31:1b:c7:23:15:f1:86:
27:46:b3:9c:18:60:16:38:7e:d5:5b:fe:24:b0:55:
e9:4e:e6:12:94:78:fe:7f:18:7b:e8:67:c6:43:8a:
db:a1:c5:33:0d:1c:6e:e9:8e:bc:10:db:04:17:21:
3c:93:30:2c:a8:06:6e:3e:ba:94:f4:88:2e:64:46:
ee:bd:4c:46:60:52:55:38:f2:79:b4:1d:43:b6:06:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:8C:A8:DF:F7:92:E3:6F:79:A9:FC:84:BF:30:A7:8A:F4:8C:07
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:73:b4:6e:6c:24:24:39:6d:01:66:ab:c9:5a:82:75:a4:ed:
cf:22:fc:52:81:ee:ea:68:ef:13:bb:ae:8c:41:50:a8:2f:da:
1f:d9:70:6b:3d:72:ff:9b:5c:1c:32:e8:4b:3a:fb:aa:68:8c:
85:7a:1c:60:87:f9:0c:a2:52:c0:a6:e6:d0:04:1f:c2:20:58:
15:60:07:96:25:63:b3:f6:6a:f0:09:c8:72:64:6d:28:7b:a9:
bf:5d:36:50:34:31:1a:fe:8d:9b:f7:01:4b:de:7c:90:59:1e:
74:0f:3e:99:91:ed:1b:06:11:61:64:6b:c6:35:6a:d9:09:db:
6e:77:cb:94:ed:63:fd:25:24:46:ae:cf:e3:17:3b:b3:23:a8:
56:d9:33:38:6f:5d:e5:3d:bb:e3:ef:2c:aa:b8:19:c7:9f:36:
df:a8:cf:47:24:b2:b2:35:82:e2:6d:aa:46:2c:b5:85:4b:b8:
fb:84:63:52:f5:16:7e:d1:97:5f:dc:85:6f:dc:73:90:ed:9f:
31:8d:3f:3b:c2:a0:01:38:cd:d3:3c:c0:58:48:21:00:99:e0:
ff:ba:68:9e:13:d2:ec:90:ba:3a:d5:1d:9c:3b:80:a6:42:13:
d6:26:f3:76:8c:d9:ca:b5:23:3f:11:21:1a:dd:6f:6d:37:ab:
e9:cf:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:58 2026 by rpki-client