Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: OBWZK8KxOCl/gNImB5mN4w9sUnfDoRnoogtTKd3KWo4=
Subject key identifier: 58:CC:EB:0D:DD:41:74:70:B3:FB:C4:13:4F:0E:45:1D:04:6F:06:F7
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 019D29296CB9032A7A4AA9728AA5E5F396ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 0510
Signing time: Thu 26 Mar 2026 08:01:13 +0000
Manifest this update: Thu 26 Mar 2026 08:01:13 +0000
Manifest next update: Fri 27 Mar 2026 08:01:13 +0000
Files and hashes: 1: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: t1JT4djJCBuEm8u4CyLFz4Umzg5f4Beh5o2OiJO0FYA=)
2: x7f937Xy_FUIHRQkUrkm9MCxGxs.roa (hash: 0WmyBcbNw17aY5NG33htiVCGPfaVOrCshbMwX66ND3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6c:b9:03:2a:7a:4a:a9:72:8a:a5:e5:f3:96:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Mar 26 08:01:13 2026 GMT
Not After : Mar 27 08:01:13 2026 GMT
Subject: CN=58cceb0ddd417470b3fbc4134f0e451d046f06f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:85:e8:68:eb:bf:d9:85:2f:d8:e8:15:d9:
11:39:9d:43:96:92:5d:b1:2f:cf:84:f0:34:60:31:
96:3b:06:7d:29:84:d5:ba:c4:e0:7d:a8:b0:66:f3:
15:b9:79:43:ed:ac:59:02:19:cb:f5:3a:7c:23:4c:
27:c0:88:2a:30:7c:4e:42:76:a8:18:17:3a:62:ca:
31:6f:d0:0d:18:6a:7a:c6:6f:9c:86:3f:85:c2:e8:
38:1a:55:2a:1d:01:86:95:bd:4c:ea:0a:db:70:9f:
98:49:4e:41:ad:c4:f3:23:ff:e3:04:54:bf:ed:9a:
48:11:89:41:88:94:e8:ec:91:a8:a7:73:4c:78:df:
44:aa:37:20:f2:c3:2e:bb:80:3f:6d:4d:14:20:ef:
fa:cb:76:23:83:ef:0d:40:6c:35:b8:29:47:24:c3:
a9:9b:78:bc:5e:41:1e:f4:f7:4e:20:f0:0f:d4:15:
c2:cd:8c:28:89:f9:01:33:e0:0e:0d:0b:bc:e9:b3:
32:8e:fb:b7:66:50:3a:05:d7:56:de:a4:14:c5:ac:
8f:36:97:52:ce:c7:f9:52:01:fa:49:6e:2d:81:6a:
60:e7:74:0e:69:5a:c4:17:24:cd:76:06:52:5d:3b:
f0:73:65:0a:8f:e7:81:f8:d5:7c:17:c9:8c:56:5a:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CC:EB:0D:DD:41:74:70:B3:FB:C4:13:4F:0E:45:1D:04:6F:06:F7
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:67:9c:7e:e1:0e:3c:5b:2c:62:d9:f4:6d:90:a0:fa:20:
09:38:8e:6f:15:bd:08:ff:dc:fb:ff:6d:31:e5:fd:30:22:1d:
dc:7f:67:37:bc:2a:a9:b7:9a:45:ab:ea:b5:ba:9c:41:6d:d7:
98:36:28:80:25:56:58:a2:f4:7a:d9:f5:37:e6:9d:0d:14:87:
ac:1f:48:cf:61:2c:94:94:ea:bf:23:0b:c0:77:39:6b:3d:70:
bb:7c:f7:ad:b1:28:62:ec:fe:e9:b9:3e:08:be:d5:56:f1:4d:
a4:97:49:db:75:17:d5:ac:05:43:35:02:06:65:23:91:ea:87:
c2:37:a5:f4:14:a8:55:20:ea:47:29:35:b3:57:9f:95:66:4c:
18:2f:2c:3a:34:ff:02:cd:6e:0e:16:34:ab:88:b3:f6:ad:a8:
2f:9c:78:ac:5d:b8:60:77:37:5e:bb:5b:23:ff:f5:35:da:f3:
78:98:1f:61:13:c6:9b:17:02:d7:f0:10:83:fe:33:aa:cd:ca:
8a:e7:08:41:61:91:7d:bc:c6:51:67:cf:e9:72:76:95:57:2f:
4c:e5:9f:a6:63:43:5b:f9:88:e6:68:20:f1:60:ee:51:a5:94:
28:23:d0:97:e0:4b:1c:e2:55:ce:38:f2:23:bc:4a:73:7f:c2:
6b:02:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:54 2026 by rpki-client