Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier: FKzDgTitBXf/ntP3CMIK0wJyloSVk8gbmDbYuCO2S1Y=
Subject key identifier: 9C:06:0D:56:81:0C:E1:47:44:4C:19:A9:9D:D6:8A:70:5C:05:A4:9B
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019D26CD052453BC4DD41F1FB90DFD76B7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number: 0BB7
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: 1-Y24DkHX_YS8BQf944IXH_5kays.roa (hash: +VJRpnj8CgCWOeIl5a7z0P70ihS3i/FmFwSi/9utCPo=)
2: IY-cX-MNALu4IC_OTud7vyl-LrA.roa (hash: EREk8HtkB+3C+caNH7Ch6KSJNkDCyci86tLaep5Ej3s=)
3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: oDX4TJc52VlOB5QSHhL9YrNGoUT868NCSXqeN3WRwHs=)
4: KSxgyXQgmuvgD3hsIbjoWlYRqkk.roa (hash: MfPYx4d8dGraW1R0Aep23IPqwadZP9+eAkLv5cmiWoM=)
5: M6wnPrDmWw7o372pn664G-6XMUM.roa (hash: vz3Xt9QAg5obB1AHMtVF5JrXwk6u3qtnMl8SakINxdQ=)
6: QU7_3XfMPgpIQHQ50_jrWQFQx7o.roa (hash: LAB6ax0DqVCa39oB2jLFatVSxmBNDm8xZgfRNR237Ws=)
7: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (hash: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI=)
8: gr17UYbRi7cQ6eQ9EyDF-CuJIp4.roa (hash: NAQ/vI5+2VgZpVpsxQmGoZaiAZnJI/pT7XEYYA4d1IM=)
9: mwE7644yuRyikfXfTRLC6TQjC0w.roa (hash: KcHRogBcTVnQMGjCpBXC4Xr5iRWrDOZmEHuY1S/TOXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:05:24:53:bc:4d:d4:1f:1f:b9:0d:fd:76:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=9c060d56810ce147444c19a99dd68a705c05a49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:62:90:95:a6:74:79:ac:8f:3d:77:c5:00:
b1:b9:80:02:7d:75:87:7b:08:f9:5b:fe:01:d4:6a:
5c:63:bf:02:e7:c4:d1:02:7e:82:2e:cd:2b:05:2d:
cc:7d:eb:5b:21:48:58:08:f3:57:41:ed:91:41:b8:
33:37:c3:f0:b8:48:11:f3:d9:58:47:09:a4:e0:33:
4b:45:4d:18:53:63:43:27:60:13:5a:d3:79:d8:36:
c5:34:78:61:fc:d0:ce:6e:18:1e:85:b2:9f:d6:3d:
c2:2b:1c:3a:dc:36:f8:3d:94:40:8f:90:5d:04:1e:
88:64:99:de:0b:f8:ea:eb:15:f4:c2:04:17:08:79:
9f:f6:58:b8:f0:ca:be:8f:08:23:4f:b7:9c:50:d6:
4f:14:3e:c3:3c:40:e9:d6:6a:4c:aa:5a:51:8e:4b:
10:cd:a0:7c:5e:b6:b5:ac:10:a9:9a:07:b6:37:38:
3b:31:b3:84:1d:78:08:14:51:5e:64:1c:2c:5b:5d:
54:15:e4:8b:b1:cd:4c:8e:e3:03:2f:2c:b3:5b:bb:
a3:3d:b6:ef:19:b8:87:13:68:fa:2d:aa:72:da:57:
df:13:bd:4a:68:b4:6d:84:11:3a:8d:20:bd:51:10:
cd:b5:56:f6:fd:bb:a1:86:42:da:27:1f:03:b7:90:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:06:0D:56:81:0C:E1:47:44:4C:19:A9:9D:D6:8A:70:5C:05:A4:9B
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dd:ef:46:7f:2f:07:af:7b:31:01:65:d6:5a:71:c4:56:7d:
7a:9f:c0:59:5a:c5:25:08:35:04:89:56:16:d6:f6:37:0e:d1:
1c:a1:62:86:08:4e:1e:bf:9f:53:99:6e:13:d9:5e:83:0d:aa:
1d:ce:ff:29:d9:84:5f:53:59:a7:98:29:57:12:0c:b6:a6:eb:
c3:fe:c3:66:32:31:1e:66:77:c8:3f:0f:e5:91:c9:6c:d8:eb:
f0:16:01:f6:99:f6:42:d6:a3:c9:71:78:98:c2:ca:5c:33:48:
fa:0c:09:c8:de:68:ba:03:f1:f9:a9:be:27:14:6f:cc:60:41:
1b:24:02:d6:f4:bb:3f:9d:cc:e1:b2:77:b3:6b:90:6a:6f:24:
b1:4d:c9:a9:07:1f:c5:8c:0b:01:e6:b2:48:bf:fc:fa:19:94:
52:bf:36:12:15:c5:56:16:e2:75:24:9a:c4:bb:6d:b1:87:b8:
bf:ac:81:94:af:2c:a3:aa:f3:e4:3e:e3:97:72:cf:ad:af:12:
40:53:33:c4:52:5f:47:40:19:ee:5d:8c:d5:9d:79:a2:c3:a4:
75:a2:07:09:5b:e6:bc:0b:cb:58:a3:0a:7c:7f:45:26:3b:6b:
bd:e4:15:9f:c6:12:5f:c3:c2:a4:37:cc:f4:e1:63:82:bc:8b:
40:b2:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:17 2026 by rpki-client