Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: +R25ndLKyjf4WX+DDofnIpV7ss3LyzOMXkwihSwsPzM=
Subject key identifier: F7:6C:C9:A8:C4:4C:C9:F3:99:3A:A8:39:9B:52:32:79:32:7F:BF:88
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 019D262818B9C04925DE27CD5ABD1742E29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 07A9
Signing time: Wed 25 Mar 2026 18:00:55 +0000
Manifest this update: Wed 25 Mar 2026 18:00:55 +0000
Manifest next update: Thu 26 Mar 2026 18:00:55 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: UhUlGJD+7A+BRVLCM6pjIG//1SAc9lLqnQGaxBIV64k=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:18:b9:c0:49:25:de:27:cd:5a:bd:17:42:e2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Mar 25 18:00:55 2026 GMT
Not After : Mar 26 18:00:55 2026 GMT
Subject: CN=f76cc9a8c44cc9f3993aa8399b523279327fbf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:83:2c:23:64:56:20:2e:c5:90:c8:10:61:
e1:85:74:b2:1a:31:fe:28:e8:e6:48:92:8d:1e:4a:
b1:46:20:9a:09:53:c1:9c:8f:71:b7:49:56:4b:4b:
e2:3c:65:19:03:e3:62:1b:58:64:ec:d6:80:c7:7b:
15:44:d2:30:79:3d:9f:db:81:5f:bd:a4:27:1c:d2:
ac:03:8e:61:3d:4d:7c:a1:6a:c2:d1:39:4c:92:60:
a3:b3:ed:ba:c4:a8:a8:ee:e8:c1:1c:96:10:4b:bf:
3c:84:cb:83:7e:e1:34:e1:4a:ba:0a:63:42:b4:a4:
b9:8d:50:8a:58:e6:7c:a1:32:aa:87:f2:fb:a3:14:
d0:26:e7:0c:82:a0:c0:25:6b:21:25:85:f7:96:15:
61:da:bd:e7:ab:d9:f3:55:c3:01:aa:3b:4f:18:c7:
84:53:f4:2f:4e:c0:33:bb:09:62:42:ae:a2:b6:61:
7c:0f:66:f9:74:6f:74:96:ea:1e:3c:e4:dd:fb:d2:
28:6f:4e:d9:a7:e1:a9:47:d4:41:ef:89:bc:3f:69:
36:b5:30:72:57:c6:ea:00:20:c6:c8:8a:23:aa:db:
92:26:b8:00:b5:25:27:8d:68:c6:f1:3a:1a:03:09:
0a:ae:95:37:b5:75:64:28:8b:c7:69:a6:7a:ff:65:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:C9:A8:C4:4C:C9:F3:99:3A:A8:39:9B:52:32:79:32:7F:BF:88
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:58:78:42:df:75:3e:b4:48:eb:8d:6d:ef:92:a3:9a:bc:28:
01:b5:bb:fa:a3:3d:72:23:0b:6f:3d:31:ae:e9:30:ec:f1:38:
53:fb:5d:6d:28:db:50:e1:cb:34:bd:37:a1:d5:82:cc:74:ef:
dc:52:08:b7:8a:90:1d:36:30:dc:09:73:51:8a:80:64:a2:a9:
db:25:b2:98:fd:dc:f9:b8:63:a5:07:f5:6e:4f:d3:ec:53:86:
3a:75:06:7d:5f:c0:5a:28:87:58:ee:22:27:a8:66:1e:bc:4c:
ae:c4:13:24:d5:29:6a:e2:e1:46:f9:c9:3e:57:ee:ca:60:92:
45:35:48:1f:6c:9c:82:85:05:98:aa:da:c0:3b:61:3f:db:a5:
24:ec:49:d0:1d:5a:48:b8:49:44:88:96:20:25:ac:ef:35:54:
1b:cc:3a:b8:9a:5b:38:7f:73:ba:73:02:e2:ee:4d:8e:68:39:
a1:a4:2a:e8:28:7c:53:d2:c5:d3:62:5b:5c:d2:e7:ee:ff:ec:
7f:b2:0f:e5:4c:87:08:c1:f8:8c:d0:59:da:13:ed:44:94:a2:
4a:4f:78:71:1d:a3:27:55:e8:d1:d7:cb:d0:b6:70:f6:b2:9b:
da:49:ea:42:29:5b:60:0b:46:ae:65:63:f1:48:ae:a9:ba:8f:
5a:e4:92:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:20:53 2026 by rpki-client