Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: MB0pxGo3kEFVCE56PjF1JNv/2EoXD0ZA5WdGcd9Hg6w=
Subject key identifier: 4A:54:BB:56:77:BD:BF:76:34:9F:EF:EB:44:E8:DA:EE:B9:D6:0C:F6
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019D25BA67745DD9C106DF86839C6108708B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 16:01:06 +0000
Manifest this update: Wed 25 Mar 2026 16:01:06 +0000
Manifest next update: Thu 26 Mar 2026 16:01:06 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: gWUdeF2Uj6tCmimCsYBDlMfFm5akzLTwke4XnbCKXac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:67:74:5d:d9:c1:06:df:86:83:9c:61:08:70:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Mar 25 16:01:06 2026 GMT
Not After : Mar 26 16:01:06 2026 GMT
Subject: CN=4a54bb5677bdbf76349fefeb44e8daeeb9d60cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:3f:0e:97:7a:a3:b1:44:3f:8e:38:82:d9:
a9:5f:fe:3a:51:ef:5d:bd:ce:7c:a0:22:cf:a3:3b:
1f:c2:0d:ce:da:10:17:ca:31:17:60:63:fb:62:4a:
f9:af:1e:8f:f7:e4:cb:01:1d:4e:07:1e:4a:db:51:
2d:9c:fe:bf:b5:f8:70:46:85:e9:89:49:73:ff:d2:
40:8c:a8:cc:81:b3:84:67:e5:43:5b:1b:86:52:fc:
9c:86:2a:4e:36:c7:7c:e9:aa:de:1a:5f:2f:15:7b:
ea:56:40:2a:56:dc:cd:2e:ac:2d:6b:ba:ac:60:b5:
9e:23:9d:b6:17:d0:42:b4:e1:c2:f5:71:11:a9:73:
a7:b3:4c:8f:ad:48:3f:b2:8e:23:2d:f4:87:d2:b2:
37:83:f8:80:10:22:ac:74:e5:cb:67:b7:13:81:dd:
c0:de:5c:de:73:de:90:8c:56:66:73:e3:5e:1f:4d:
3d:c0:d0:db:e9:aa:b7:b3:38:46:c5:1d:8a:c4:ab:
b8:34:95:22:ce:24:35:4d:f1:51:78:60:ce:ee:30:
aa:a9:a3:a2:55:fb:57:01:ac:f9:03:72:0b:ee:7e:
5c:ca:0b:32:23:94:89:86:67:09:2a:c2:2f:a4:b3:
15:20:a5:47:dd:ad:03:b3:6c:46:24:3e:84:db:89:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:BB:56:77:BD:BF:76:34:9F:EF:EB:44:E8:DA:EE:B9:D6:0C:F6
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1f:fb:34:7c:6c:65:9a:18:6e:39:82:da:8a:a1:66:47:62:
1c:2a:e3:46:78:b3:bb:e1:75:86:44:16:44:ba:b8:0d:fb:79:
e5:ab:4f:e2:02:f5:9e:a4:eb:79:fe:2c:78:16:1e:47:ff:a9:
ce:94:ba:5e:b9:d8:26:57:3f:fa:3a:88:dc:6d:35:1f:91:95:
bf:b3:38:be:19:b0:a0:54:3b:7c:6d:95:49:b2:41:07:ba:9c:
00:f6:b4:8b:7c:d1:64:28:cd:3b:ef:cb:9f:c5:86:1a:4c:ed:
6d:97:6d:5b:98:99:55:87:0c:38:b4:55:b7:04:d1:7f:48:52:
65:17:9b:9d:20:9d:48:eb:c9:28:98:bd:78:2c:7a:10:1d:9e:
38:d8:2c:bc:0a:2c:1e:f2:81:28:36:39:01:ab:b6:27:cb:22:
d1:da:a3:de:f5:63:7a:ef:55:81:87:56:60:43:da:07:39:ca:
93:be:a9:9d:1d:33:ed:5b:11:76:a2:75:6a:64:7b:87:7e:93:
b0:90:72:97:c3:b8:d4:e3:71:83:5b:6d:b3:85:59:69:d1:f0:
58:ad:2b:c7:39:8e:84:6f:61:b6:a0:47:2d:74:64:47:89:71:
7b:d3:dd:27:7c:24:47:28:96:d5:ee:40:ff:a1:c8:45:34:d6:
c9:71:0e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:30 2026 by rpki-client