Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: sQ4CmKAo/9pV++0OGX/tPJScTXtMpp/Tyq+ovbXb3fk=
Subject key identifier: 43:4E:B8:89:32:71:37:80:E3:40:0F:D8:67:E5:1F:2E:5B:CA:61:F5
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 019F8FB55F92216CC71E28814EAD9FC3F1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0D25
Signing time: Thu 23 Jul 2026 16:00:55 +0000
Manifest this update: Thu 23 Jul 2026 16:00:55 +0000
Manifest next update: Fri 24 Jul 2026 16:00:55 +0000
Files and hashes: 1: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (hash: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E=)
2: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (hash: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI=)
3: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (hash: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI=)
4: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: 7SyDmkqvb3imQN65ApCiRfLuKBQDGIW2IZtQkbB+nz4=)
5: lEbUtLtNkfAyY2Y1bQXjNgffS1A.roa (hash: b/0/ySYWBBPjZPbNT3Q9pWagQbtfduFB4wZTve0Q5AE=)
6: mi7KJXHo-_cgynjrOEYKa7kVD8I.roa (hash: YGaCcIrn+IZQb5Rq3PZQYSYoXxlLsMVa6xxEh3lbzgI=)
7: tEbhK49lj9A2t1UjujH2qFk6A88.roa (hash: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk=)
8: vi3DjTDiHudyYK8w8VItrX_abyg.roa (hash: nMbONn7wYaL+5u0tqJSULFh7G6Nyiekz0kaTGUhg9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:5f:92:21:6c:c7:1e:28:81:4e:ad:9f:c3:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Jul 23 16:00:55 2026 GMT
Not After : Jul 24 16:00:55 2026 GMT
Subject: CN=434eb88932713780e3400fd867e51f2e5bca61f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:d6:cf:10:43:b6:fa:14:2e:e6:f9:77:db:
86:40:22:76:06:28:7d:e2:56:ae:d2:61:4c:ea:83:
03:dd:7a:00:6e:4d:fa:e9:02:6e:54:1b:0a:cb:aa:
04:08:b1:99:9d:e5:01:6a:ba:87:df:aa:3d:c9:e0:
e6:c0:e5:6e:50:3b:3c:e1:79:6f:92:af:cf:b0:b7:
9f:a1:25:1c:c5:5d:91:74:8d:16:d5:59:cc:6c:f5:
1b:2e:46:15:27:92:2b:cd:90:d1:a4:2f:7a:f4:5b:
d2:28:df:46:f5:59:2a:0a:4b:15:45:1c:0f:51:3e:
36:58:e7:3a:42:5e:a1:54:cf:71:f0:4b:37:47:77:
4a:86:52:4a:9b:0d:12:5a:6c:5a:cf:93:28:2b:71:
0c:42:f3:53:90:44:2c:5f:10:e3:13:41:bf:e4:d0:
15:65:67:33:dc:1a:b1:80:3e:1d:59:7b:0e:b5:10:
d6:db:be:21:30:10:63:29:9f:90:1a:0b:e7:51:82:
77:86:43:b4:89:fd:39:03:72:0f:d5:db:6f:13:56:
4c:d4:b1:21:5e:a9:64:55:73:17:f5:63:26:0d:3e:
85:51:31:56:37:92:c7:57:a4:63:5c:5b:fc:4d:8f:
08:96:32:70:2d:de:69:0d:4b:06:49:42:18:20:37:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:B8:89:32:71:37:80:E3:40:0F:D8:67:E5:1F:2E:5B:CA:61:F5
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:03:44:28:c1:d6:0d:bf:a3:22:b6:af:d4:dd:a2:d7:86:c2:
0d:ce:fb:a1:74:3a:51:34:4c:a2:48:32:e1:ba:44:3a:17:d6:
62:f8:c1:d7:b0:c9:bd:75:9b:68:e1:e4:e8:11:1b:ad:05:a1:
92:ad:7b:98:d7:98:c7:f8:1d:dd:b0:4d:15:3e:55:dd:29:5e:
1a:51:4c:75:7d:75:12:7d:58:0c:3e:67:d7:68:40:87:0a:a2:
04:0a:30:fc:3d:f9:55:aa:2c:9a:8c:cc:09:11:3c:01:f5:c1:
57:20:a6:f8:a2:5b:3c:a0:f2:26:51:4a:5b:0a:1d:96:cd:38:
91:10:93:3f:b9:da:47:fa:9f:ec:ed:9c:27:a0:21:ad:c6:af:
66:c7:96:13:e5:c7:5b:c7:56:64:9a:bc:6d:33:b1:73:ec:80:
a9:01:36:22:ab:03:68:cd:5f:82:39:44:c4:d4:42:fd:a9:f6:
8d:dd:fe:99:d7:34:9a:2a:66:af:44:40:3d:30:16:f2:b0:bb:
31:ad:e1:2f:0e:38:5d:73:a8:c6:e6:c5:67:23:c1:25:25:fd:
fe:bb:82:bc:80:73:dd:bc:d4:90:b0:09:3a:a5:fc:a2:f7:89:
c9:77:f1:38:a3:ac:f7:40:15:8b:50:87:d7:8f:61:a3:45:c5:
1c:17:50:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:28 2026 by rpki-client