Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: SDPiOx2OZch+HmcsSS4UOTB2986MLL6+CBL7c6JSusI=
Subject key identifier: 7D:10:BA:02:EE:84:B1:08:9D:2D:88:42:21:9B:B5:AC:C0:2C:54:F1
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 019D284E0D3172D08ABAC2B1FECD6DF8389B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 12F7
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: ZG+mPeIpR3+iqT66hrp+sSM8loqRQkKQqA4uZiJBPYc=)
2: VCV7HyTUt8tm68B15fKOErx2kfM.roa (hash: nMzsEQ+m4fEfPNGdId/ALdJtSeiEKBWtGdiNADmVhPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0d:31:72:d0:8a:ba:c2:b1:fe:cd:6d:f8:38:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=7d10ba02ee84b1089d2d8842219bb5acc02c54f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:8a:16:25:51:91:1c:29:46:38:fd:e5:5c:
28:f5:ca:9f:92:c9:29:f3:4f:8b:2b:02:cc:e5:63:
38:68:2d:d4:1e:1f:58:c0:16:14:22:b9:e0:85:f8:
6c:36:3d:1a:76:17:54:a2:41:97:5c:58:8e:ec:3a:
1b:80:f1:c1:0e:1b:aa:12:3e:ce:67:d5:c9:6a:00:
21:37:c7:92:39:a0:7b:91:f1:dd:4a:f4:35:d1:1b:
8f:42:3b:0c:d4:6e:80:b1:23:b9:a1:8d:ff:a0:d1:
3b:45:f0:7b:9c:c3:e1:10:c6:23:83:c1:1e:42:35:
6b:b2:65:c1:96:7c:05:c0:f6:9a:c2:18:40:0b:be:
86:ea:bb:66:58:e8:a5:11:5b:19:69:56:4a:43:2e:
fd:f0:30:67:08:c4:90:15:4f:16:93:09:5b:8e:a1:
01:cc:3e:68:22:82:b7:a5:70:c0:98:93:3f:53:03:
ea:08:e9:2e:04:2f:84:a5:22:dc:68:37:03:91:e0:
7e:25:5b:b4:15:ad:82:b2:ed:be:78:4c:99:28:5a:
85:bf:06:90:38:3d:c8:69:ec:a1:01:96:d1:b6:7d:
9c:cb:e8:98:f8:27:54:69:63:1d:c8:98:73:b7:19:
57:7f:b1:ec:5e:45:57:22:0e:52:24:93:19:f9:0c:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:BA:02:EE:84:B1:08:9D:2D:88:42:21:9B:B5:AC:C0:2C:54:F1
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:62:c7:3a:3c:73:47:4c:b8:c8:9f:62:88:f5:f5:b8:42:
5f:6a:3f:42:c7:41:81:af:6c:ee:22:6b:5a:c0:4d:c6:52:97:
23:86:bb:53:66:44:38:17:30:3c:77:17:8b:f0:0d:61:b7:5a:
f3:f4:d9:b1:a8:66:df:95:ad:1d:19:2f:fe:a8:73:ef:e9:02:
3b:82:45:7c:15:c7:a3:09:91:49:62:a4:ed:0c:1d:ff:1b:27:
8e:82:0a:d7:39:d5:47:1e:3f:3d:47:4d:09:85:d7:3e:c1:c8:
9d:e1:1e:0a:bb:bf:db:af:9e:64:73:8b:38:9a:d3:e3:08:1c:
60:3d:3c:fa:fd:28:c3:98:f6:15:bb:1c:83:63:9b:b1:04:17:
88:7a:82:ae:a5:35:bd:78:39:b3:dc:0b:85:a7:f8:69:fc:c9:
7a:52:ce:6a:41:e1:77:80:cc:81:1d:95:fb:39:64:7e:e8:51:
85:ef:72:82:ec:17:87:1d:49:1a:b5:ab:9a:24:3f:90:84:38:
c4:fe:71:f3:88:8b:45:9a:c1:5c:6b:cf:f8:4e:05:1d:68:33:
8e:12:34:5d:30:99:45:a2:a3:b4:8e:d0:b3:d3:f8:39:36:07:
4f:f6:7d:3d:bb:e9:01:78:6b:16:9e:6a:bf:02:48:ce:9a:d7:
94:17:e1:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTg0xctCKusKx/s1t+DibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3
NTJmYTIwHhcNMjYwMzI2MDQwMTM2WhcNMjYwMzI3MDQwMTM2WjAzMTEwLwYDVQQD
Eyg3ZDEwYmEwMmVlODRiMTA4OWQyZDg4NDIyMTliYjVhY2MwMmM1NGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZWKFiVRkRwpRjj95Vwo9cqfkskp
80+LKwLM5WM4aC3UHh9YwBYUIrnghfhsNj0adhdUokGXXFiO7DobgPHBDhuqEj7O
Z9XJagAhN8eSOaB7kfHdSvQ10RuPQjsM1G6AsSO5oY3/oNE7RfB7nMPhEMYjg8Ee
QjVrsmXBlnwFwPaawhhAC76G6rtmWOilEVsZaVZKQy798DBnCMSQFU8WkwlbjqEB
zD5oIoK3pXDAmJM/UwPqCOkuBC+EpSLcaDcDkeB+JVu0Fa2Csu2+eEyZKFqFvwaQ
OD3IaeyhAZbRtn2cy+iY+CdUaWMdyJhztxlXf7HsXkVXIg5SJJMZ+QySAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0QugLuhLEInS2IQiGbtazALFTxMB8GA1UdIwQY
MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt
ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4
LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/5ixzo8
c0dMuMifYoj19bhCX2o/QsdBga9s7iJrWsBNxlKXI4a7U2ZEOBcwPHcXi/ANYbda
8/TZsahm35WtHRkv/qhz7+kCO4JFfBXHowmRSWKk7Qwd/xsnjoIK1znVRx4/PUdN
CYXXPsHIneEeCru/26+eZHOLOJrT4wgcYD08+v0ow5j2Fbscg2ObsQQXiHqCrqU1
vXg5s9wLhaf4afzJelLOakHhd4DMgR2V+zlkfuhRhe9yguwXhx1JGrWrmiQ/kIQ4
xP5x84iLRZrBXGvP+E4FHWgzjhI0XTCZRaKjtI7Qs9P4OTYHT/Z9PbvpAXhrFp5q
vwJIzprXlBfhNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:00 2026 by rpki-client