Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: KDDqTRDRyv2sEbIoLH7FoUKkPEGE9DYR9CtN29CisoU=
Subject key identifier: 0D:39:4A:49:DE:BD:A3:5C:E4:A4:F2:30:F4:00:A2:8A:EE:0D:CB:59
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 01A0D9F1FD0DCB8F6E650D70D0E430E434FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1A77
Signing time: Fri 25 Sep 2026 19:01:49 +0000
Manifest this update: Fri 25 Sep 2026 19:01:49 +0000
Manifest next update: Sat 26 Sep 2026 19:01:49 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: bSO2mpkel4KUZOJ58leHj/vwkNcYRaUnhQksPHl1prA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:fd:0d:cb:8f:6e:65:0d:70:d0:e4:30:e4:34:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Sep 25 19:01:49 2026 GMT
Not After : Sep 26 19:01:49 2026 GMT
Subject: CN=0d394a49debda35ce4a4f230f400a28aee0dcb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:3e:7b:ac:63:f8:40:97:9a:1a:54:46:cb:
45:75:55:ad:23:15:a8:78:fa:52:ca:82:3a:d8:88:
6a:50:2d:11:fb:61:e0:1f:a4:72:4e:ab:1e:00:87:
43:d7:8d:f8:53:00:a5:58:6a:56:60:88:bb:43:14:
e1:bd:55:ba:e5:f8:64:39:05:75:f6:ca:13:49:d2:
ce:f7:69:f5:ec:5a:65:20:3d:35:3e:be:3a:13:79:
15:8b:44:5d:c9:2b:a1:a3:b8:d5:07:77:c8:98:9d:
bc:9e:8c:a2:5c:d3:5c:27:cd:94:a7:4f:51:48:dd:
1d:4c:6c:ec:38:fb:e2:80:96:2f:b9:1f:4c:5c:be:
8c:14:ac:aa:37:5f:f5:55:5e:72:b8:1f:e3:c2:08:
68:dc:c3:c8:6d:86:ff:52:32:2d:7e:92:7c:18:53:
da:1e:23:0b:d2:35:c8:1b:06:af:46:76:a8:86:84:
b9:fd:a2:8f:bc:0c:22:72:84:0b:b7:5d:16:f3:6d:
be:2e:8d:e0:1a:d1:6b:57:14:d2:eb:79:48:0f:7f:
8d:7f:a3:f0:56:65:b8:06:72:e9:30:39:50:96:6a:
76:b7:61:10:2d:d1:c6:a5:28:83:50:ec:4a:64:8a:
a3:ee:b0:dc:68:2a:46:1b:3a:ef:5e:17:91:f0:70:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:4A:49:DE:BD:A3:5C:E4:A4:F2:30:F4:00:A2:8A:EE:0D:CB:59
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8b:83:5e:a9:40:5c:4e:94:17:af:95:20:4f:de:51:35:d9:
ac:90:4e:5b:31:17:bc:84:33:82:35:cb:0b:e6:c3:43:69:10:
3b:d8:08:24:1a:e7:d2:a6:90:52:a6:81:cb:4c:4f:1b:49:fd:
79:5f:03:e2:76:04:62:7e:24:8c:e3:df:1c:89:d3:70:e6:48:
f9:a1:50:4d:a9:5a:32:d4:a7:92:b2:71:b9:5c:5e:7e:3c:28:
ff:99:0f:9c:9c:a5:2b:05:6f:34:7e:2e:08:a4:b4:fd:33:7a:
bd:e4:e5:d9:bb:41:25:3c:fd:aa:4f:be:7a:7c:4a:89:49:9a:
2d:0c:cb:17:ae:0b:6e:d2:ec:0b:b6:49:dc:b7:44:7d:65:4c:
73:ce:16:b4:51:d4:3d:e2:e7:a8:f6:f0:f6:e0:4a:01:60:39:
ec:cc:d8:55:81:94:d7:9d:c7:22:1a:2d:17:15:a6:72:97:b1:
f5:1d:08:df:5e:df:ff:9e:37:72:1d:08:12:43:ac:10:b6:04:
94:c7:01:72:22:25:0c:7c:70:35:67:a8:04:92:da:14:cb:e6:
44:0c:a9:fd:ec:1a:7d:39:fb:88:c6:70:ca:e6:5a:1e:f4:21:
5f:34:ea:d1:63:62:c9:df:99:88:38:db:b2:3f:b5:53:c2:e0:
b7:af:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:43:54 2026 by rpki-client