Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: 2PyX0hBhf5hPcOLEWwA1Ze5q7diBwr3tr1bTdTrdMpc=
Subject key identifier: F7:52:89:34:BF:FD:7E:71:C6:35:44:D7:68:91:51:A7:5E:94:14:09
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019D27A909A650B344F5318D1B63A9F0A228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 1732
Signing time: Thu 26 Mar 2026 01:01:22 +0000
Manifest this update: Thu 26 Mar 2026 01:01:22 +0000
Manifest next update: Fri 27 Mar 2026 01:01:22 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: JbtYxkKd0O/MacFX23Q7zZClLiZpOPZc5qFhLxA41KQ=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:09:a6:50:b3:44:f5:31:8d:1b:63:a9:f0:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Mar 26 01:01:22 2026 GMT
Not After : Mar 27 01:01:22 2026 GMT
Subject: CN=f7528934bffd7e71c63544d7689151a75e941409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:38:61:f6:9d:a1:8b:74:b5:54:5d:a3:1f:
cd:ee:b1:9c:80:ae:a7:06:20:cf:e9:3a:5b:ef:52:
0d:fb:09:f6:f2:f8:05:ba:73:e5:d2:3b:e1:0e:82:
8e:0d:e0:ed:09:6b:24:3f:47:60:40:6d:a3:27:be:
5d:b7:31:e2:5e:e2:3c:d6:e1:77:5a:4a:9a:48:e3:
ee:55:dd:09:3c:36:c5:8b:ad:ca:5d:f5:8c:2b:e1:
a9:7b:88:67:7b:ae:56:a2:bd:13:35:65:be:c2:c7:
50:d7:61:a6:98:55:b8:16:e4:b5:24:f9:f7:77:e3:
d2:20:e6:fe:59:f9:e9:58:2b:a7:81:92:d5:7d:f7:
0c:b4:17:bd:54:b9:50:53:67:19:44:ad:e8:13:09:
12:38:7d:1e:2b:48:01:c5:eb:7d:af:bc:e1:cc:90:
73:8a:2f:32:47:e7:86:14:84:15:db:cd:fe:18:3b:
11:4d:35:1f:cf:a6:5e:8c:92:49:f6:fb:ac:ea:b9:
2b:6a:08:c2:d4:a7:9c:7b:79:13:89:51:44:d1:63:
f7:dc:18:0e:ca:a0:43:5a:dc:e8:81:a0:8e:d4:60:
15:c1:9e:8a:c0:a3:de:c1:3a:8c:0e:23:15:c8:d3:
b0:e8:93:ee:c2:c4:28:a6:af:84:f4:61:55:49:cc:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:52:89:34:BF:FD:7E:71:C6:35:44:D7:68:91:51:A7:5E:94:14:09
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c3:64:86:31:00:a4:47:77:11:1f:52:a5:1d:db:3d:75:00:
e0:c2:7f:16:6b:3b:f5:48:4f:31:37:36:49:c2:e8:49:33:65:
90:a5:f9:59:73:16:e3:1a:51:6a:e0:62:c7:44:46:4b:02:d5:
9d:f3:cb:bd:bd:da:02:8a:4b:38:ce:30:f6:ca:53:01:4c:46:
50:7f:d7:5c:79:d2:f5:f4:71:32:90:f3:a2:be:5a:96:19:18:
b1:55:d3:65:95:67:3b:e2:4d:d6:32:df:0b:6f:39:e7:c1:5b:
07:1c:36:f4:98:a0:ba:27:56:7f:6d:56:db:bd:f9:50:98:cd:
47:da:3e:d7:0d:7d:c4:c7:f5:77:0d:da:91:80:9c:6d:63:1a:
6b:e4:37:34:cd:d0:64:8c:cd:17:40:f8:a6:70:4a:10:1b:de:
b5:2f:d2:94:7c:c4:38:c9:a8:91:b3:d1:53:75:8b:69:72:2d:
95:dd:3a:74:45:07:93:23:fa:40:be:1c:2f:4f:90:80:1f:7e:
ad:56:53:49:ac:d7:12:c6:ea:a5:55:5d:c5:b3:43:29:df:a4:
14:22:ea:ca:98:78:62:e7:63:7e:7b:3d:f7:fe:56:1c:41:2e:
f6:af:c3:57:ea:36:93:20:e4:b0:8f:be:bd:0e:4e:a7:38:c6:
46:09:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:23 2026 by rpki-client