Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft
File: iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft (raw, json)
Hash identifier: 02cUGiybzBq4MBcHmVBK+ap6wtXo0WRcQWu5NDCV89g=
Subject key identifier: 10:88:56:08:60:4E:FF:BE:9F:D5:CC:01:7E:A5:64:43:18:B0:FB:ED
Authority key identifier: 88:7A:38:68:65:EF:9F:87:CE:B7:97:E6:67:46:47:49:63:85:96:21
Certificate issuer: /CN=887a386865ef9f87ceb797e66746474963859621
Certificate serial: 019D33ACE3D221A04D0252E108AA15B12342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft
Manifest number: 30
Signing time: Sat 28 Mar 2026 09:01:01 +0000
Manifest this update: Sat 28 Mar 2026 09:01:01 +0000
Manifest next update: Sun 29 Mar 2026 09:01:01 +0000
Files and hashes: 1: DlCDvPsLyfCovsVIAJGyN69ajpE.roa (hash: r0hFqETAQa/pmuDs8mHeKOi2RSGD3PLOmZh2GwV/DTE=)
2: iHo4aGXvn4fOt5fmZ0ZHSWOFliE.crl (hash: fHpH7nLpueAS6RKUBsd4s+EMjrYhQjVyYEpgBClcRP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:e3:d2:21:a0:4d:02:52:e1:08:aa:15:b1:23:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a386865ef9f87ceb797e66746474963859621
Validity
Not Before: Mar 28 09:01:01 2026 GMT
Not After : Mar 29 09:01:01 2026 GMT
Subject: CN=10885608604effbe9fd5cc017ea5644318b0fbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:c0:27:c9:6d:c6:f3:13:2a:f4:bd:b8:1b:
09:99:4b:57:52:de:85:9d:fd:c3:b1:81:14:9a:a7:
7b:4e:8c:ea:2e:4f:fa:be:08:29:99:39:82:07:bf:
fc:99:03:e0:b8:f5:2a:3a:82:98:21:e3:5e:56:27:
4e:1d:49:30:65:da:08:01:4d:00:7a:24:59:2e:bb:
ac:4b:50:3e:82:c0:0b:e8:8c:99:ca:c1:43:43:cb:
31:60:64:22:f8:81:f3:f0:c2:f5:ea:86:e8:3e:e8:
f0:73:5e:34:d9:89:ca:64:52:15:e8:f4:ca:37:66:
8f:91:da:0f:f2:a6:b6:2b:23:e1:81:33:3d:19:9f:
a6:e9:2c:be:9a:aa:7b:6d:70:24:c4:6c:34:97:86:
d4:7f:b6:45:db:d5:eb:9b:9f:c1:22:21:75:f6:9e:
d4:fb:51:0a:77:2e:ab:9e:92:13:71:18:09:85:6c:
bd:80:97:52:e7:99:ac:4c:7a:96:20:e3:97:23:40:
7f:2f:e9:4a:a5:a7:94:6b:9d:10:8f:5f:6d:bd:81:
9c:9c:19:08:e2:60:0f:e0:6b:d9:48:9c:aa:0a:80:
5c:0a:4a:52:1c:7c:44:ce:1d:ae:ca:a1:71:67:fe:
3b:ce:40:6d:59:8a:11:98:91:d5:b3:79:fe:11:b2:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:56:08:60:4E:FF:BE:9F:D5:CC:01:7E:A5:64:43:18:B0:FB:ED
X509v3 Authority Key Identifier:
keyid:88:7A:38:68:65:EF:9F:87:CE:B7:97:E6:67:46:47:49:63:85:96:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:66:42:3c:96:b7:76:10:f4:67:ae:23:46:52:1e:d3:f7:f9:
2a:a1:45:16:d4:a6:a6:95:f2:3d:25:d1:2f:04:a0:d5:a3:5c:
68:08:f5:86:84:63:df:99:8e:e8:d1:d6:10:c5:50:91:be:4f:
15:4f:62:96:5e:3f:39:fe:22:9a:5e:75:22:51:23:7d:80:92:
c1:77:ce:18:f6:c9:4f:13:5e:43:a0:37:4f:1d:86:6b:f0:a3:
bf:c6:1c:a5:d3:2e:89:62:e6:67:6a:65:f2:44:ed:8f:e1:4f:
9e:a1:16:85:d2:7d:01:6f:46:8f:fe:37:07:9d:03:72:5f:18:
c9:64:f5:5c:1e:b0:00:47:ad:be:98:7a:df:26:8c:33:27:95:
0d:d7:ff:15:85:1c:11:69:39:a2:dc:07:51:10:24:de:01:6c:
27:6f:53:75:dc:35:4a:ac:8c:ed:62:67:76:45:9c:8d:6a:58:
fa:5c:7c:35:f2:1b:11:24:42:c2:d6:e3:cb:a4:d2:bd:70:60:
ad:a6:90:f1:e0:5c:5a:87:91:2e:f9:4e:99:f9:d4:ea:39:c3:
ff:8b:e6:3e:4d:de:8e:ce:de:13:2a:1c:30:76:ce:69:5d:22:
0d:2e:49:f5:f1:d2:c3:5f:6e:2e:79:fa:17:ee:28:61:4e:29:
68:39:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:42 2026 by rpki-client