Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: UWpecyLTkrG7ND1vvtHEZWJZZXmMpB+i99N1rJCLi4Q=
Subject key identifier: 22:BE:6F:50:CA:D0:31:C1:70:C9:0D:D8:B5:BA:C0:45:3A:A1:C2:51
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01A0D49481BC08B5EA427C12135DFC7B6921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 0991
Signing time: Thu 24 Sep 2026 18:01:37 +0000
Manifest this update: Thu 24 Sep 2026 18:01:37 +0000
Manifest next update: Fri 25 Sep 2026 18:01:37 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: celu2T+s8YOtfebt1woJSh+HhRduFD9n/wbdIPKrIUE=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:81:bc:08:b5:ea:42:7c:12:13:5d:fc:7b:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Sep 24 18:01:37 2026 GMT
Not After : Sep 25 18:01:37 2026 GMT
Subject: CN=22be6f50cad031c170c90dd8b5bac0453aa1c251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:2e:a8:f4:ad:06:c2:c4:15:8d:a6:95:96:
33:56:ce:59:33:71:25:c7:52:c5:13:83:21:9b:cc:
75:96:6c:a9:7e:e8:90:66:f9:11:a1:c6:9e:50:91:
09:6d:fd:d1:9c:66:67:ef:de:1f:6f:34:2e:37:9e:
c1:e1:30:a5:e6:a7:99:c7:70:54:0e:cb:b2:a2:3e:
30:a0:4e:21:f1:de:1f:0f:3b:33:54:a1:13:5f:26:
0e:84:7b:10:84:dd:d8:e3:d1:77:da:25:a3:95:5c:
aa:f0:0f:49:f8:3d:cf:29:07:1c:43:74:12:f8:c1:
78:4e:e8:dc:f5:b1:06:79:28:28:f0:d7:99:77:16:
9d:7f:df:09:d1:ee:6f:62:5a:bb:bf:e8:f0:fc:9a:
8a:55:c7:8c:71:cc:fb:73:be:98:9f:e2:f3:97:26:
8d:25:37:2f:73:1a:a6:00:f4:f6:df:bf:1f:1d:aa:
9f:a5:c5:cd:b4:e8:92:71:35:bd:9b:14:db:f6:d9:
1c:67:a6:57:fa:f7:7c:e3:1e:a8:5a:48:89:c5:7a:
07:af:90:f8:9a:bf:f4:e5:7a:24:3a:ad:ff:b3:07:
ac:73:d9:40:69:14:1f:1f:7c:f6:90:eb:15:2b:3f:
41:93:b0:54:38:77:dd:4d:93:ed:5d:c5:2a:40:0c:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:6F:50:CA:D0:31:C1:70:C9:0D:D8:B5:BA:C0:45:3A:A1:C2:51
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:0f:4c:52:70:c0:3d:0c:04:3a:a6:26:5b:df:1b:f0:c8:
53:56:b1:08:20:28:bf:2f:9e:af:5d:00:ed:87:43:58:63:78:
c0:f9:14:7f:94:95:5c:d4:01:95:57:d7:09:73:9f:18:69:fe:
c0:f6:4e:5a:c0:15:c9:dc:b8:e4:4e:1f:1d:a0:65:62:bd:51:
e0:0b:27:18:c7:48:87:a0:bf:50:67:85:4a:91:00:f6:f4:a7:
0e:fb:aa:ab:0f:34:1f:e3:92:ab:23:1b:be:c1:45:c8:3d:02:
5f:4c:9c:75:9b:7f:28:9f:d9:2f:fb:82:b0:0e:3f:26:f5:96:
df:3a:9e:2c:8c:8a:ea:3c:51:33:5e:03:51:4c:eb:07:ce:5b:
94:12:ab:38:c7:06:78:02:0d:cc:1f:04:5f:0a:a0:b6:e6:0b:
10:11:31:1a:fc:e2:a2:c1:21:43:bb:f3:a5:77:5c:8c:39:86:
4d:fe:6e:41:15:3d:f6:aa:5b:1f:92:07:18:a7:6b:bf:35:ae:
38:54:1f:a2:e0:6b:18:11:c6:a5:74:c7:36:d2:1a:cd:a9:89:
12:8a:a3:53:76:df:92:51:aa:79:99:e6:03:01:de:50:c9:4f:
06:ca:8a:aa:a6:92:16:68:e4:59:75:16:96:26:c4:c7:15:0c:
9c:68:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:46:55 2026 by rpki-client