Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier: Y3zhnvnK2GZr1sZuIH0c+ibYeyF8C9N1f1Z0geEebTo=
Subject key identifier: A8:99:11:7A:79:56:11:C1:9A:55:CE:24:94:71:E2:86:A1:9E:97:C8
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 019D26961BD89FF2B2EF42022624E0AF8B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number: 10EE
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: 7JTMQURN2_pHQGeTlN5cBKnAiak.roa (hash: ArfyrR2wyEV/9BCepj0BUymEyLecGYVpjZ/467WPvZ0=)
2: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: iGJdLhA1FBi/ba58Ul+/qwdAT2S6onUUgXQXS1nL3RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:1b:d8:9f:f2:b2:ef:42:02:26:24:e0:af:8b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=a899117a795611c19a55ce249471e286a19e97c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:20:77:db:73:79:d6:35:bc:dc:71:8a:7b:03:
43:60:7e:5e:76:3f:59:91:c4:69:e7:91:31:e0:f5:
93:6d:79:20:a3:b0:2e:8d:d9:3f:b6:11:b7:00:50:
b2:d1:e0:91:e3:ec:e2:07:1c:5d:20:0b:72:a5:d6:
e5:ba:92:c5:c4:49:0b:ff:27:48:2c:f3:dc:60:59:
6e:37:16:c7:de:93:26:35:cb:fe:f3:7e:c6:b8:cb:
11:38:e1:1a:d1:a1:f7:14:9d:0d:25:2e:e5:93:0a:
32:b6:a0:67:81:29:83:0f:3b:ef:da:bf:33:6d:6a:
41:b8:0c:a4:ab:89:49:2a:5a:94:b1:73:31:f6:82:
58:65:77:6e:48:5e:be:52:b1:4f:3d:05:75:a6:a1:
34:49:d4:f8:f6:bf:f1:86:7e:95:48:90:66:ea:2f:
e0:bc:e2:d0:90:8d:1e:2c:a1:86:80:7b:34:ab:ae:
a1:14:fb:b3:3c:13:8a:15:af:06:ba:ba:d4:db:ee:
ed:c1:97:c1:46:b0:83:1e:55:89:01:1c:4e:76:ba:
19:cc:1e:cf:49:c1:70:5b:20:26:06:f5:2b:af:d7:
39:af:d7:44:82:2c:57:ad:bb:2c:26:a0:b8:77:74:
e3:f3:64:a8:a8:c1:e1:f3:22:48:d1:ec:17:5b:0c:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:11:7A:79:56:11:C1:9A:55:CE:24:94:71:E2:86:A1:9E:97:C8
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:86:3f:bd:0d:ad:08:a9:a5:09:53:f8:23:41:ab:ae:b3:
3a:8a:06:29:75:e0:87:e7:1a:d2:ed:66:ad:aa:5a:9a:d2:60:
c0:46:df:65:fb:c2:b8:6c:e6:1a:b3:46:4d:9b:1f:a6:45:6a:
ba:3a:2b:54:88:f2:a5:26:23:e8:39:6e:c5:2d:7b:60:02:22:
bd:d7:52:f9:6b:aa:15:2a:bf:fb:61:e6:44:f0:fe:84:61:73:
3a:ed:53:fd:e5:ce:81:a3:80:93:b7:6a:7e:d6:75:71:a6:91:
e2:f0:ce:2e:47:7b:6c:ea:09:bf:e8:cc:91:9f:c5:a8:6c:b9:
33:38:5a:36:5b:50:1e:16:b2:33:da:ff:47:19:f9:05:63:8f:
f1:49:e3:b5:53:3a:3a:76:d8:5e:7a:70:41:26:89:80:47:17:
0a:1b:db:18:ab:43:05:75:26:4c:00:24:5f:b0:93:d3:78:5f:
e0:98:59:9a:91:5c:03:e0:fa:e3:b9:c4:97:88:bb:e5:c6:69:
86:63:00:b0:b3:64:4f:bf:1c:d5:55:f8:c7:4d:d1:17:98:df:
db:b0:67:c5:fa:88:6f:7a:f4:2c:6f:96:83:fc:54:14:eb:b3:
2d:0d:05:11:68:b6:b7:30:74:12:d4:5e:ff:84:72:71:01:a7:
8b:5e:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:11 2026 by rpki-client