Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: H+a26eqdaky0Cx3AsyWdoJ4lhw5VTn05hTpE1DQqb+w=
Subject key identifier: 9B:08:A6:0E:BE:6B:9F:48:AC:41:E7:8E:03:7F:7B:DD:32:DF:FB:6E
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019E1F7E901C507782B68D36F03FC6EAAD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 1678
Signing time: Wed 13 May 2026 04:00:48 +0000
Manifest this update: Wed 13 May 2026 04:00:48 +0000
Manifest next update: Thu 14 May 2026 04:00:48 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: ECSdIOYmmMGKSk/6zhzqytlkWUNTEP31UG9hKFpwheA=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:90:1c:50:77:82:b6:8d:36:f0:3f:c6:ea:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: May 13 04:00:48 2026 GMT
Not After : May 14 04:00:48 2026 GMT
Subject: CN=9b08a60ebe6b9f48ac41e78e037f7bdd32dffb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:be:ed:78:16:a8:91:fc:54:f1:cd:a8:f1:
85:ae:a0:39:ed:5b:45:4d:2a:41:ae:fa:f9:44:18:
1d:d5:6c:15:5e:9e:5e:fb:09:eb:fd:c0:49:7f:2c:
27:cf:2d:b7:eb:72:9b:a5:d0:80:bd:8c:58:53:0f:
f5:ce:8c:1e:df:e0:0c:6c:a4:7e:bc:ad:a5:ae:ea:
3f:3a:29:2f:ea:25:fa:f0:02:ea:d1:88:72:6a:5e:
dc:16:9e:47:1e:91:71:0a:73:ae:c1:f9:f6:4d:43:
4f:21:16:62:ce:82:4a:53:35:d4:8b:85:7f:40:f5:
8c:8a:17:75:92:e2:f0:e6:2f:8a:98:dd:67:b9:d2:
44:a2:8f:38:2f:63:e1:0b:3c:6b:7b:84:57:9b:42:
12:61:2b:cf:a7:d6:6c:51:79:e8:69:a3:0d:39:e8:
aa:1c:0e:c6:60:0d:c3:fb:c0:9b:69:09:e5:2d:3c:
6b:e2:e7:a7:5d:c7:73:ad:26:17:b8:dc:2a:f1:45:
4a:9e:2a:2f:ce:6d:ae:7e:9e:3a:52:93:67:40:9f:
62:a6:0c:f5:48:54:67:15:f4:38:70:b1:44:d0:16:
a4:eb:9a:9d:bd:57:53:99:70:22:97:00:df:43:19:
63:88:0d:ed:0b:4c:a3:04:5d:51:f3:c8:91:68:b6:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:08:A6:0E:BE:6B:9F:48:AC:41:E7:8E:03:7F:7B:DD:32:DF:FB:6E
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:41:82:7f:b5:11:e4:76:e2:1b:9f:b1:3d:18:d1:ec:f1:33:
ff:5a:93:93:c4:7f:32:82:61:ba:b2:d6:50:97:52:58:31:4c:
41:1e:9e:c5:77:f5:02:8d:8b:ef:03:b1:27:0f:06:4b:ac:82:
40:4f:3d:e8:3f:ab:2b:de:84:2c:c1:91:fc:bd:bc:2b:f5:48:
28:fe:93:fc:e9:00:14:39:74:51:8c:2b:97:f7:24:58:91:a1:
12:12:bd:ae:5d:7b:76:b1:93:fd:0b:0a:bc:fb:30:bb:92:10:
de:33:ff:86:71:34:ba:4b:1f:e7:6a:55:4e:38:7d:09:20:e2:
52:9d:67:3e:3d:c6:68:50:9d:89:be:35:0c:b0:20:2d:f5:ea:
e1:c1:50:45:cf:15:45:cb:75:cf:2b:85:d6:13:52:f6:7c:1a:
26:ae:34:1e:2a:81:56:4d:12:fc:22:a3:89:fb:b0:6b:c0:9c:
4a:b1:ae:6b:9a:c0:da:c4:da:5b:66:a2:e7:56:4d:54:3b:41:
37:9e:ab:62:5a:77:be:87:08:06:8a:c7:9c:92:42:4e:ac:8a:
a0:36:a6:43:8b:31:10:11:fc:1a:95:45:44:5f:e6:c3:8c:d8:
f1:b0:56:96:1c:dd:3d:aa:7e:5c:c0:01:d7:b7:98:22:a7:a3:
80:21:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:52 2026 by rpki-client