Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
File: IqETXjyWLnRuT1fR6qSUoEnwOxs.mft (raw, json)
Hash identifier: dQBPO2A8s6XU1h+XiIrQ3drAiKNnWIngeAaXuIzAkyQ=
Subject key identifier: FA:FF:AA:AB:77:56:41:30:D3:11:A0:40:9A:3B:78:57:FB:E5:96:47
Authority key identifier: 22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
Certificate issuer: /CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Certificate serial: 019D322BEFD05DE129AE9C7746A3ACA86D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
Manifest number: 0255
Signing time: Sat 28 Mar 2026 02:00:33 +0000
Manifest this update: Sat 28 Mar 2026 02:00:33 +0000
Manifest next update: Sun 29 Mar 2026 02:00:33 +0000
Files and hashes: 1: IqETXjyWLnRuT1fR6qSUoEnwOxs.crl (hash: hi8QXRDOD2rY1D0OLt5hDhusdiuMOYk3Oh92ir2It88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:ef:d0:5d:e1:29:ae:9c:77:46:a3:ac:a8:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Validity
Not Before: Mar 28 02:00:33 2026 GMT
Not After : Mar 29 02:00:33 2026 GMT
Subject: CN=faffaaab77564130d311a0409a3b7857fbe59647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:eb:a9:8a:d3:27:d1:06:a1:d5:93:e9:f5:
97:b2:2a:a9:5e:b9:20:31:d2:0f:ea:79:44:6f:b9:
81:7d:11:f0:3e:5f:80:55:b1:82:a0:ef:ed:ec:f9:
fe:f1:15:e8:92:7e:a9:9f:77:cf:8e:7a:b7:3a:5a:
84:27:ae:b2:87:fc:b9:6d:2b:c0:c5:a9:20:56:0d:
5d:44:b7:ba:9a:18:af:86:1a:cc:ca:38:d1:50:91:
3d:a7:49:b5:17:5f:7e:91:d0:62:41:19:a3:4c:5b:
22:66:28:c4:98:32:f6:d0:9a:b0:24:8e:95:30:9c:
b9:98:fb:af:47:00:9f:9c:e3:e9:12:7a:24:25:14:
8c:0b:39:79:f1:42:9b:f5:2d:6b:89:bc:31:33:b6:
44:aa:75:0f:8d:b9:11:22:a0:70:37:ab:87:66:7d:
1c:e9:d3:b2:e9:0e:08:48:ae:af:79:97:ed:01:df:
84:b1:37:25:60:ca:8c:aa:9f:11:8f:2a:a9:ef:71:
a8:e0:c5:d7:ed:21:77:56:70:0c:2e:56:7f:6d:0f:
0f:2c:e9:a5:9b:d8:e8:b9:e1:e0:ef:90:36:d9:98:
6e:45:61:f1:22:2d:68:b8:c0:99:4a:7d:8b:1b:7c:
c5:56:41:11:f6:b0:b2:35:01:ac:ea:ad:22:a6:8e:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:AA:AB:77:56:41:30:D3:11:A0:40:9A:3B:78:57:FB:E5:96:47
X509v3 Authority Key Identifier:
keyid:22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ec:bb:fe:a4:22:d4:f4:41:ec:aa:dd:b1:05:e6:92:56:9b:
58:15:49:48:2f:29:6e:84:69:26:21:43:34:26:b1:21:cb:78:
99:0b:93:6f:84:39:4c:cf:d6:c9:6d:da:3b:09:87:d8:d7:55:
5b:6b:b2:d5:05:8f:1c:0d:eb:fa:b8:d9:f5:ab:c9:ce:72:1a:
93:07:b8:5c:4f:5e:da:6f:8b:90:a8:f6:45:22:a3:23:e6:cf:
0f:17:4d:81:63:ca:ff:1b:04:92:71:be:2a:f9:01:aa:35:d9:
57:c2:93:4c:a4:d4:f9:c9:15:89:a5:33:02:3e:52:13:f4:9f:
49:55:43:f5:13:23:e1:4d:83:1b:35:7c:c7:7e:eb:bf:8b:e7:
d0:5d:f3:96:67:88:74:84:49:24:91:46:b1:c3:0c:dc:05:19:
c1:d4:2b:67:df:50:f2:49:71:fb:af:e4:e3:94:f1:01:0d:9d:
da:bb:91:ae:ff:87:77:a4:2c:93:cf:3f:90:21:8c:13:1c:c8:
65:12:3b:55:cb:78:c4:27:b6:04:34:55:ed:79:49:2c:91:34:
da:fc:e1:25:14:92:84:fe:22:83:56:d6:56:07:af:a8:03:5b:
fd:73:04:61:59:e7:27:16:2c:70:4b:f7:1b:5d:c7:02:4a:bf:
ae:5e:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:25 2026 by rpki-client