Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: 9/gYyYJTl+zb/u1dulIol2xBalJ+F8A5qxTz47e9De0=
Subject key identifier: FE:D4:35:47:84:8A:D4:38:E3:3C:14:01:92:6C:F0:2B:03:99:DE:0C
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019D26CCE3CF18F1481FA6556473C37812F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 1369
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: 9+A338Uzz8XK8EvAYNVJs62PHsbV9W0denM+zM8QmMI=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e3:cf:18:f1:48:1f:a6:55:64:73:c3:78:12:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=fed43547848ad438e33c1401926cf02b0399de0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:63:c2:27:6b:c2:47:48:bc:fb:b3:3e:13:
fd:09:1d:44:78:70:04:0f:cd:6f:3f:ad:b2:a5:7c:
43:e8:f0:84:a1:7e:39:6a:aa:ff:c0:2e:dc:3d:80:
af:ed:a8:cc:84:38:3b:19:25:5a:a9:b4:7f:b7:0f:
60:69:5c:29:98:93:80:22:98:d7:8b:3d:0d:cf:99:
37:ef:53:ae:78:56:01:54:f3:3e:f1:a8:78:85:76:
94:41:0a:c3:e3:67:25:97:94:9a:0f:4e:6f:dd:4c:
9e:62:c5:da:19:32:72:c2:47:0f:59:76:9c:d4:46:
b4:91:90:e5:41:18:a5:20:36:e3:46:d4:29:29:f7:
27:fa:26:8f:5b:b8:97:cf:7f:18:34:aa:3b:d0:d1:
24:4a:a9:27:65:09:2b:b5:db:b3:58:72:3e:d7:98:
92:9c:0a:1b:02:93:45:b5:dc:07:57:4c:c5:35:a2:
27:39:fd:a5:4e:66:1d:20:72:90:00:2b:47:4c:2c:
ce:22:fe:5f:5d:76:32:7c:fa:51:88:26:84:6f:0b:
e5:e0:81:ea:43:64:e4:df:05:12:df:5a:10:88:bd:
8a:05:4b:42:de:5c:bd:9d:15:b8:d7:a9:b6:aa:70:
a9:37:8c:a1:19:d5:c7:29:85:e7:d2:70:58:bb:40:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D4:35:47:84:8A:D4:38:E3:3C:14:01:92:6C:F0:2B:03:99:DE:0C
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b2:92:f4:c0:df:14:e9:ac:d3:dd:c4:2e:0a:e1:e9:88:40:
16:11:48:10:d5:20:79:e6:35:fb:d7:e6:d2:e0:a5:00:e5:3f:
be:57:23:27:e5:32:ca:00:b0:f3:34:3a:44:f5:a3:a9:16:81:
72:4d:4f:95:a4:ee:32:19:fd:49:d9:26:6d:9b:b8:5a:2c:46:
d0:29:9f:c4:4f:e0:92:6a:1b:14:94:a6:e3:e0:f1:46:18:84:
41:39:5d:b4:82:16:ad:eb:92:0a:52:61:9f:9f:ba:6f:ae:3d:
c1:9d:91:92:f2:e8:9e:2f:fb:60:6b:33:65:14:b6:28:11:83:
9b:38:70:3d:14:83:23:fd:31:09:2f:b7:c2:5a:ff:d1:a9:25:
2f:51:dd:b4:18:bb:ff:85:db:d9:78:c2:34:88:77:00:b4:82:
5a:bb:7f:1e:da:f4:5c:bb:8c:b4:8a:6a:90:c6:18:bf:e0:2e:
12:8d:9e:b9:17:b1:d4:56:a4:c9:f6:04:d5:df:73:de:e5:f8:
9e:b8:39:de:9e:50:fd:52:9d:a7:09:56:0b:e5:d8:ba:a0:93:
d1:48:49:dd:fe:e7:4a:95:8d:c5:1c:03:3b:7e:6e:c0:54:81:
ec:60:ae:f7:3a:41:5b:a2:68:dc:3a:f1:ec:81:8a:d0:b0:e3:
9f:f8:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:20 2026 by rpki-client