Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json)
Hash identifier: yerURAPqhVtij8r5snpVAGquwqaIHurOekqRvgJ8/nQ=
Subject key identifier: D4:9C:FA:63:18:0A:8F:F4:D5:A3:1D:B5:2F:DD:B1:68:CD:46:DD:9B
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019D27044193636C2D2DB60E12EBCFC9E7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
Manifest number: 187D
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: 5zWiMO3boP5ix4/1RW2OsR3WSXXy8wT8DBH3QI86IYg=)
2: K8bI68ydbYD0aGoO_y4tC8a-6po.roa (hash: 7jWrWjgMEBXHFnrwJxNxcZvd3n/YILw9cksevC2VciU=)
3: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=)
4: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=)
5: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=)
6: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=)
7: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=)
8: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=)
9: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:41:93:63:6c:2d:2d:b6:0e:12:eb:cf:c9:e7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=d49cfa63180a8ff4d5a31db52fddb168cd46dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:d6:e4:0b:ca:1f:05:80:cf:45:44:8d:60:
28:76:77:a4:dc:16:99:89:fc:fd:e4:fc:24:2f:87:
39:e3:46:ac:a4:f5:9e:9e:d5:68:6a:06:48:83:9f:
31:e6:47:95:5f:93:77:5d:96:5d:d8:88:21:fc:8f:
f2:a3:06:8d:2b:29:e7:d5:2d:06:3f:7e:d1:3b:b3:
b1:87:73:e4:fa:33:5f:94:fa:6e:0f:ae:b3:38:31:
9d:c3:68:a5:e3:58:72:e5:ec:5e:b6:dc:6d:c4:c4:
09:ec:33:52:e7:27:82:92:a5:e5:32:2e:a3:0d:00:
86:29:ee:90:32:58:96:98:08:a2:36:2f:f9:26:59:
8b:99:9c:b6:1e:3f:bd:b0:be:0c:7d:f5:58:53:88:
aa:44:0d:66:de:a0:71:7f:be:f1:a6:bd:ee:9a:64:
61:a5:f0:a5:6c:54:32:92:2c:ff:19:8d:f2:3d:11:
27:7c:d0:c9:fb:1f:77:9b:5c:ea:f7:cf:04:ff:06:
9e:26:f2:c7:41:59:0e:a9:74:ee:9e:e0:c4:96:1d:
cc:c6:71:c0:5f:d6:d8:90:b0:1c:f9:3d:34:81:91:
7a:78:09:4f:05:bd:e4:4d:d0:b0:e6:84:8a:2f:a7:
1e:07:d9:84:88:2a:5c:96:1d:c0:d7:9c:3d:82:89:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:FA:63:18:0A:8F:F4:D5:A3:1D:B5:2F:DD:B1:68:CD:46:DD:9B
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dc:d7:6f:6d:6c:0b:64:ee:88:41:f0:b8:53:21:28:b8:e8:
7d:4b:97:d2:8d:1f:89:dd:4c:22:ed:52:a3:32:cd:e5:e2:bf:
63:02:a7:25:60:1b:be:8c:1d:e3:6f:fa:11:55:a7:46:8f:77:
10:f3:85:72:34:9f:76:84:9c:04:ae:72:aa:84:b7:2a:f1:7a:
d4:b0:b4:80:eb:32:36:e8:c7:8e:fc:e9:1a:78:2e:ee:5e:b1:
aa:9a:be:6b:96:fd:24:4a:5c:97:1e:a6:a2:3b:b3:91:ff:a6:
03:c3:ae:a1:2f:d7:0b:68:69:41:aa:cc:a9:e6:35:d3:b7:6c:
dd:c5:6c:15:22:1b:1b:f1:68:1b:f0:78:c7:49:a5:b8:29:95:
91:60:f0:35:61:da:20:d8:01:1f:b7:fa:8b:d5:16:bc:ee:d8:
d2:d0:14:5e:f9:0d:db:2a:72:07:25:99:0d:5d:0c:ff:0e:93:
6b:28:ef:e9:9e:bb:d6:1e:63:36:b9:67:51:aa:5d:cc:9b:eb:
61:b8:27:1d:61:0a:ab:11:ea:a9:ae:46:8d:6d:0c:73:4d:22:
b3:11:0f:93:3d:66:e5:27:92:aa:d4:76:3b:ec:c5:8f:91:fa:
c1:07:e0:25:07:30:bc:b7:62:ba:43:0b:95:57:84:3f:2a:95:
9b:d5:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:49 2026 by rpki-client