
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: O4uZT9MNu/fYbYsjrIkLn91m3U6wUva9MZXsPQt9++c=
Subject key identifier: 79:BF:A4:12:42:7C:40:5A:BB:4A:FC:C0:8C:4A:4A:B6:83:58:D0:3D
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 019F9211CA0EA07C96508E4AD380B201D1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 08EA
Signing time: Fri 24 Jul 2026 03:01:06 +0000
Manifest this update: Fri 24 Jul 2026 03:01:06 +0000
Manifest next update: Sat 25 Jul 2026 03:01:06 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: mzv98e2Nl4nAcqGyUpHALVUPPkcDqCsOkf93awxWsI0=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:ca:0e:a0:7c:96:50:8e:4a:d3:80:b2:01:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jul 24 03:01:06 2026 GMT
Not After : Jul 25 03:01:06 2026 GMT
Subject: CN=79bfa412427c405abb4afcc08c4a4ab68358d03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:ac:d4:86:78:4b:fd:ac:c6:0d:30:21:fb:
c0:11:47:04:32:88:6f:e9:17:05:6b:84:0c:c2:83:
45:f7:76:0a:c7:69:d3:c2:aa:6e:ff:59:84:bc:60:
b4:3d:6c:52:f4:85:fb:87:29:c1:86:54:78:e0:2a:
63:f8:08:88:79:2b:6f:9f:b0:84:64:f4:de:0c:73:
a4:5b:00:5f:a3:a8:4b:dd:35:00:0c:1f:d3:2d:c6:
56:54:f9:2e:c3:03:f3:02:c1:14:60:ab:65:09:88:
d6:8f:34:fd:a2:18:14:0a:7b:d2:ec:fb:24:ba:a7:
65:2b:fa:a6:5d:d8:2c:04:5c:9f:e3:87:42:7f:a2:
d8:eb:06:31:f2:b2:cc:13:72:c7:ce:a6:ec:a6:fe:
ac:c1:bb:fa:28:05:67:0f:6a:2e:49:d8:04:26:6f:
aa:27:3c:f8:a9:10:27:3b:35:82:c1:97:64:5c:bb:
f7:b6:83:0e:2f:11:b9:d0:b4:de:ee:b4:88:ba:f8:
24:ee:54:b9:fa:6e:93:a3:9e:ce:dc:fd:85:83:4a:
ae:8a:9c:5d:bd:ff:0a:52:c7:56:50:7c:e8:5c:e3:
a4:60:46:ac:08:5f:59:76:dd:c8:dc:89:18:78:40:
ee:f4:67:f1:a9:90:93:af:32:48:0f:18:8f:89:08:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:A4:12:42:7C:40:5A:BB:4A:FC:C0:8C:4A:4A:B6:83:58:D0:3D
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b1:be:81:b9:3c:cd:59:e2:18:21:3b:b0:fa:9e:b5:40:fb:
c4:ec:34:3f:67:38:b0:f8:7e:5e:2a:73:e5:ed:86:4e:22:39:
e0:6d:bb:74:54:0d:af:1b:31:ba:7b:db:bc:5c:07:17:6f:60:
ea:b7:f2:4a:a1:75:8c:1a:d5:86:4f:da:1d:cc:37:f3:3d:67:
23:2f:62:a2:52:71:cf:5d:b4:bd:33:aa:b7:94:01:63:f0:a7:
e5:7f:4c:b3:28:6b:b6:77:ad:b3:41:aa:eb:c1:ea:d9:53:e9:
90:72:81:b2:c0:04:9c:c7:07:fd:9f:38:28:84:68:78:73:cb:
31:21:fc:13:ee:c2:a1:d2:95:e5:b3:fa:c5:24:61:94:c1:e3:
36:8c:c0:0a:28:9d:74:14:3c:6c:3b:85:f0:46:61:37:04:17:
7c:99:14:2a:5a:32:4d:5e:fe:2b:ea:46:f5:e1:64:a3:c9:0f:
0d:a0:cf:bd:1e:c5:3d:37:df:f2:0e:0a:60:0a:7e:e0:31:4f:
dd:a7:e6:b3:b3:6c:7c:d0:c8:42:3e:3c:cb:37:e1:4c:d1:bc:
b3:14:19:1c:cf:6f:4f:03:06:2a:ad:3f:32:c6:1e:bf:a3:6e:
61:38:79:11:13:dd:2c:9d:38:ea:f6:25:53:a9:74:d4:f8:f0:
75:23:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:33:02 2026 by rpki-client