Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: tL9q0jzZ+SyGPlzrfvtTClO9Bfu8mT+ttNt73TT41W8=
Subject key identifier: 8E:70:C4:43:4B:D9:17:FC:3E:48:B4:4A:55:C6:3A:2E:51:8C:03:09
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 019E1F4791BFC3450FFD266BBC5090C116F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 082A
Signing time: Wed 13 May 2026 03:00:44 +0000
Manifest this update: Wed 13 May 2026 03:00:44 +0000
Manifest next update: Thu 14 May 2026 03:00:44 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: GhKX+O+B/E3KLaG7sPtQlknUOFx1nVLZSDGWrw1L2Y0=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:91:bf:c3:45:0f:fd:26:6b:bc:50:90:c1:16:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: May 13 03:00:44 2026 GMT
Not After : May 14 03:00:44 2026 GMT
Subject: CN=8e70c4434bd917fc3e48b44a55c63a2e518c0309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:9d:d9:6d:5c:c5:2a:a1:3e:39:dd:38:2c:
21:85:c8:7d:84:dd:29:4e:5f:98:48:e4:b3:a8:00:
5b:e6:00:ed:ac:66:c2:e7:19:7d:ff:35:6f:d1:e0:
22:45:b3:08:ff:1a:9d:ca:80:f6:90:75:36:16:23:
e3:09:67:47:c5:6b:5d:9e:ae:c5:c9:a4:b3:db:cc:
5c:13:08:9e:c8:1f:35:c3:4d:e0:92:d9:24:c4:e8:
4c:0b:c2:91:07:60:41:ab:de:65:fe:97:d2:e9:ba:
0e:43:bb:1a:91:98:dc:46:27:ae:f5:9c:67:cb:90:
4f:20:7e:a9:70:1a:db:1f:3c:0d:46:37:0f:27:4a:
97:fb:64:99:ab:4c:dc:31:f6:7c:7a:97:a8:d6:ca:
b4:83:86:c2:59:15:6b:e9:b5:f5:91:b8:bf:fa:3a:
6f:14:26:83:24:c1:41:a1:dd:f8:34:8a:e1:d8:1b:
de:58:ae:91:e8:93:6d:4c:3a:4a:da:c0:16:e3:49:
2f:9d:5b:23:63:dc:ff:3b:a3:bf:7f:27:6f:7b:8a:
85:b3:63:94:c2:5f:2a:2a:67:b5:e3:9d:cd:62:31:
10:3a:d7:69:1d:3c:78:fe:b4:fe:9e:78:26:a4:0f:
29:0d:04:a6:70:12:2c:dd:0f:ea:37:2a:54:d9:7f:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:C4:43:4B:D9:17:FC:3E:48:B4:4A:55:C6:3A:2E:51:8C:03:09
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:53:b5:4e:3c:6d:eb:07:91:e6:9f:dc:5c:b0:a4:26:1c:
fd:d9:af:6f:4a:c4:18:97:33:72:34:d1:04:a8:1c:42:97:ea:
87:58:f8:53:ee:0b:f2:4e:a9:67:b3:76:3c:17:7f:c5:8a:9b:
0e:ab:56:69:be:1f:b7:76:37:6d:72:59:6c:65:f6:77:0d:15:
59:6b:bb:b2:28:6b:fc:bf:dc:92:b0:19:11:ff:bf:7a:55:eb:
c0:25:f1:fc:bd:0f:a4:a1:d5:05:34:f4:9a:f1:fa:e6:9b:74:
67:ce:dd:c0:4e:fa:9c:11:2d:54:2e:c1:e0:02:87:e5:b9:c3:
cc:25:3e:6f:d7:ff:7d:e0:93:f7:fe:67:ea:33:06:47:b0:29:
31:62:a8:43:08:98:1a:30:c3:11:d7:3c:62:02:e3:8a:4b:20:
99:07:67:d9:0f:5c:d8:cb:ec:68:f9:97:8c:5d:72:e9:7d:5b:
26:22:56:67:e4:93:23:e0:b1:ec:32:12:a4:8c:9d:cc:cd:ab:
4d:a5:c8:3f:8c:52:9c:1d:64:3d:0b:f6:0e:be:b3:fe:2b:90:
18:36:45:e8:ae:b9:ce:b8:6d:c9:0f:08:3a:9a:52:8c:4f:fb:
0a:5f:d9:45:19:2e:cb:bf:56:a4:09:0a:1d:31:dd:f5:ce:c1:
f0:de:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:46 2026 by rpki-client