Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: CiHdzQv2Te19ETMdAI74wjSjZIFz0+bn0unF1hKYhyg=
Subject key identifier: 84:6C:E4:A7:00:71:FB:FD:45:0A:AF:48:3A:81:3A:36:43:83:1E:7C
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019E1E6C0B4ED295DCEB04C7301F93B70CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 09B9
Signing time: Tue 12 May 2026 23:00:57 +0000
Manifest this update: Tue 12 May 2026 23:00:57 +0000
Manifest next update: Wed 13 May 2026 23:00:57 +0000
Files and hashes: 1: 0O9vWC_vw7OUH6qBouhrAzEg9nc.roa (hash: ikuJBuSdoGWkG2wBAzVqA4TgxffZfq78hbpeayBzWqc=)
2: 8UaUU7He9Yv29kZRYVxM02CQ6Go.roa (hash: TPMPD8z4BbyqW0UZlFEZ6YpvhPgmje5aXLJzkHd/hwk=)
3: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: aCukIDWrFMl0Lyuau516etlh+UHHuvUlr2ytFn473F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0b:4e:d2:95:dc:eb:04:c7:30:1f:93:b7:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: May 12 23:00:57 2026 GMT
Not After : May 13 23:00:57 2026 GMT
Subject: CN=846ce4a70071fbfd450aaf483a813a3643831e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:e6:2f:23:26:2a:54:58:1f:37:4b:14:be:
cb:80:e2:ca:68:cd:43:3c:65:30:38:1c:49:01:fd:
c1:38:09:44:19:e7:86:0a:f4:34:24:24:6a:fd:cc:
c1:1f:c8:54:df:89:8c:ea:35:2f:05:72:53:0a:cb:
a4:8a:f7:99:ee:63:04:bc:09:20:8f:40:d7:79:7b:
f4:9a:9a:fc:2b:f8:9d:49:24:2e:13:cf:86:17:1b:
cb:ab:d5:a4:69:16:06:31:24:9b:6c:28:2c:eb:51:
43:7d:73:e2:ec:e0:83:7f:1f:75:8e:ad:b9:7c:8d:
9e:64:da:de:1c:d7:5e:93:e0:f5:2a:ce:3b:c0:45:
f7:cf:9c:80:c0:3c:c8:a2:6e:d6:50:69:f6:ee:cc:
87:d3:25:fb:4d:e1:1b:79:69:40:0a:45:84:0d:dc:
b3:2b:7d:f5:e2:a9:39:be:25:f4:c0:21:8b:ba:f0:
95:1b:0f:d4:63:59:9f:00:55:89:34:b6:1a:7a:96:
54:aa:91:c5:de:fa:03:ac:97:19:5f:50:ed:6d:14:
1d:e6:08:62:76:01:be:3c:a7:ee:1e:a8:3f:9e:97:
2c:26:cb:d0:f3:dc:6c:12:19:eb:51:4f:d6:d1:8a:
32:34:c5:ca:8d:e9:2b:d4:85:3a:09:a9:7e:29:b0:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6C:E4:A7:00:71:FB:FD:45:0A:AF:48:3A:81:3A:36:43:83:1E:7C
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:20:8f:2a:bc:a4:2e:8c:09:ae:b0:36:d4:ca:cc:98:cb:
03:19:2f:45:0b:13:40:a6:d4:92:5a:cb:7c:86:e3:3f:77:4e:
ea:f7:19:33:61:c3:f3:b2:9a:4c:20:a6:16:53:2b:a1:28:85:
0e:e3:e1:8f:24:b7:89:1a:da:b5:7a:5e:19:38:01:68:c8:10:
bc:e3:da:1d:52:25:b4:ce:52:0d:23:25:29:87:19:6b:48:6d:
b9:1c:30:1b:97:ae:80:65:a2:eb:5a:5c:25:a0:35:d0:a0:4a:
11:75:d1:38:db:15:44:9b:71:28:d2:74:bc:2e:f0:b5:ca:ff:
48:fb:b8:8f:24:c8:a4:f2:eb:f7:9f:f9:ce:9a:2b:7d:56:7b:
bc:b4:19:e5:df:03:01:b9:20:4f:40:3a:ba:08:96:da:9b:2d:
a3:49:72:5b:56:2e:fd:d1:80:d0:14:72:ba:3d:d2:11:0a:db:
f7:ef:3b:cd:2a:05:87:ce:0d:d8:a6:01:ff:e3:cf:da:51:af:
ea:d1:f2:18:61:73:77:b4:05:e4:3d:5b:1c:c4:7a:24:83:f3:
70:29:12:28:1f:52:df:ac:dd:58:83:ed:cf:62:7b:93:c9:40:
eb:56:c1:ab:58:8d:60:b5:d0:b9:64:28:38:41:a1:b7:06:11:
c6:01:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:10 2026 by rpki-client