Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: cNLhRx0mmNBaN8qBxJFNfbaVK90aktJAmGacQDT3EMA=
Subject key identifier: 9A:DC:7A:C6:C6:F9:3F:51:B4:A8:31:49:1E:3D:6C:E1:F7:DB:AD:4A
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01A0D049436E31DF5890D452BD69CB37A3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 1917
Signing time: Wed 23 Sep 2026 22:00:57 +0000
Manifest this update: Wed 23 Sep 2026 22:00:57 +0000
Manifest next update: Thu 24 Sep 2026 22:00:57 +0000
Files and hashes: 1: 2-_2_IDxpsQLzWDQlDdWQeC93So.roa (hash: C/sYDCh+7z4k95NlXshO5H+2hd7q3+hoSmGrG/dEb88=)
2: 5vrsmyjFleJ0yUVHYDa_0rWWAj8.roa (hash: nIs8/R3vM6q19N29/Vbny98FGr35vW2896YebXXJgRc=)
3: BkI2fqSz1Z-B7JTGfER5sgZJw0g.roa (hash: U/pXYfDq5FlIWhoXhJrg1WEdVHjoMWTvfpnvFpHwiwI=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: rO3ivzFjPy2v6pUMwJSnZ/ShCR4okSG1ZcSj89lD1gk=)
5: YTs7F7QKGSd-NXieHlPiyocSg84.roa (hash: XfRVE9RR/F+C43UX85HP1GLPJW4Zovxkh+VSdknXbS0=)
6: fZGYXSekbTVSZPpMcboxBS2NZ7k.roa (hash: 66iWEZmHP0If1Bq1w2+shdZ1SJ7zwsXYFDBhoczAtsY=)
7: hLe9Xa1rDMaunSX5UD8tCHRgLLc.roa (hash: 9qvXC/uilYEYnlhtLr2bokb3DyBNi92EuqBrDngnP80=)
8: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (hash: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:43:6e:31:df:58:90:d4:52:bd:69:cb:37:a3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Sep 23 22:00:57 2026 GMT
Not After : Sep 24 22:00:57 2026 GMT
Subject: CN=9adc7ac6c6f93f51b4a831491e3d6ce1f7dbad4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:e7:76:82:f3:63:ae:0c:6a:0d:ca:8a:c8:
2a:c6:c3:43:f3:0c:95:27:1c:1f:73:bd:3a:ee:d0:
fb:a4:44:4c:95:98:3e:96:af:90:0a:b0:c5:92:60:
39:86:30:94:66:ac:60:0a:f2:43:b1:da:9f:34:1c:
2d:0a:cd:46:12:68:8c:eb:23:39:89:c8:57:97:21:
3e:48:7d:ec:09:59:12:5d:22:59:f6:fb:36:df:40:
7d:40:0f:63:d1:63:01:26:c2:f8:03:76:e0:19:0a:
47:e9:e9:5e:b5:73:a9:09:d2:1d:61:bd:0f:9a:b7:
df:00:65:bf:a6:fa:60:c2:6b:5f:86:d0:24:49:17:
ef:0d:fe:e0:24:0d:eb:80:c5:ea:ce:b4:03:07:db:
be:d4:c6:ad:0f:92:51:9f:66:cc:4a:56:39:f3:6f:
ea:61:8b:63:67:e4:a1:18:92:88:84:ad:44:9f:32:
ed:2f:43:ce:dd:55:77:4a:8b:5a:d1:69:76:7f:4e:
29:bc:0a:35:78:d0:13:dc:66:e8:b7:78:91:4b:b3:
7a:8f:65:ab:ab:de:e0:0e:1d:4c:5a:09:75:34:30:
03:70:a4:71:24:5e:5d:14:e1:f1:d3:e4:c7:15:59:
f8:95:ff:a3:6e:f5:86:1a:6e:2b:25:31:1d:bf:42:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DC:7A:C6:C6:F9:3F:51:B4:A8:31:49:1E:3D:6C:E1:F7:DB:AD:4A
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8d:ed:0e:74:2b:0e:1a:d4:29:41:8f:4b:5e:59:78:f4:dd:
36:74:51:6a:e1:b5:f3:aa:ca:41:9f:c0:4a:86:3d:56:8e:6c:
6b:10:66:c4:3c:42:6c:b3:e5:1a:3b:19:a1:e1:81:16:5d:b8:
4b:a3:2e:55:18:a2:8c:f9:5a:e8:1d:e8:f7:7d:ec:77:ff:ed:
16:ca:b9:e7:97:7a:7b:fd:bc:5e:59:4b:24:7f:da:a7:98:41:
4d:22:05:ed:0d:de:08:83:4f:8e:aa:69:71:3b:84:0a:0f:05:
57:c4:82:8f:93:36:28:14:37:4d:a1:3c:6c:37:53:6a:6d:17:
0f:c7:83:3a:4a:99:78:21:e7:30:d0:2d:c0:d1:79:5c:13:c2:
b4:e0:d3:88:f3:71:a8:b6:58:7d:97:25:3d:ba:cb:31:92:3d:
c9:d4:6c:96:8f:e7:0e:a2:50:7a:c2:99:01:45:0b:17:57:a2:
2f:ce:d1:88:35:f4:ac:a1:19:19:84:31:3b:d3:ce:a7:3e:94:
a0:b6:70:33:31:e2:ec:36:d2:cd:c7:74:b9:8b:b6:0c:44:72:
9b:77:67:db:0a:2b:01:82:55:1f:4b:fe:90:64:b7:3e:f3:f0:
23:a1:0a:22:3d:e3:ce:ed:a5:ae:f4:b4:79:96:b1:a4:d1:c2:
1d:7b:49:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSUNuMd9YkNRSvWnLN6PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh
M2JhODYwHhcNMjYwOTIzMjIwMDU3WhcNMjYwOTI0MjIwMDU3WjAzMTEwLwYDVQQD
Eyg5YWRjN2FjNmM2ZjkzZjUxYjRhODMxNDkxZTNkNmNlMWY3ZGJhZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aHndoLzY64Mag3KisgqxsND8wyV
Jxwfc7067tD7pERMlZg+lq+QCrDFkmA5hjCUZqxgCvJDsdqfNBwtCs1GEmiM6yM5
ichXlyE+SH3sCVkSXSJZ9vs230B9QA9j0WMBJsL4A3bgGQpH6eletXOpCdIdYb0P
mrffAGW/pvpgwmtfhtAkSRfvDf7gJA3rgMXqzrQDB9u+1MatD5JRn2bMSlY582/q
YYtjZ+ShGJKIhK1EnzLtL0PO3VV3Sota0Wl2f04pvAo1eNAT3Gbot3iRS7N6j2Wr
q97gDh1MWgl1NDADcKRxJF5dFOHx0+THFVn4lf+jbvWGGm4rJTEdv0JONQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrcesbG+T9RtKgxSR49bOH3261KMB8GA1UdIwQY
MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt
MzJmZWViNTY2ZWU2LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2
LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY3tDnQr
DhrUKUGPS15ZePTdNnRRauG186rKQZ/ASoY9Vo5saxBmxDxCbLPlGjsZoeGBFl24
S6MuVRiijPla6B3o933sd//tFsq555d6e/28XllLJH/ap5hBTSIF7Q3eCINPjqpp
cTuECg8FV8SCj5M2KBQ3TaE8bDdTam0XD8eDOkqZeCHnMNAtwNF5XBPCtODTiPNx
qLZYfZclPbrLMZI9ydRslo/nDqJQesKZAUULF1eiL87RiDX0rKEZGYQxO9POpz6U
oLZwMzHi7DbSzcd0uYu2DERym3dn2worAYJVH0v+kGS3PvPwI6EKIj3jzu2lrvS0
eZaxpNHCHXtJTg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:01:15 2026 by rpki-client