Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: nkX57XKuGfWWYnhdcoM0Sw6/fKZtmeSfILkgiR4y+iY=
Subject key identifier: 2E:0F:75:21:D0:1A:E0:AB:29:37:DB:09:17:0D:55:3F:7B:20:08:A2
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 019D2816B1147985BF1E3487B09CD181E464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0F26
Signing time: Thu 26 Mar 2026 03:01:08 +0000
Manifest this update: Thu 26 Mar 2026 03:01:08 +0000
Manifest next update: Fri 27 Mar 2026 03:01:08 +0000
Files and hashes: 1: 1-tufXICD9zpH9q97ukUAVzwwHjE.roa (hash: +wtE5yDBNjZJrgkiWy0XjsbVbjlePoHSNbtSgcMLmc8=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: 5cdjfReBr377guyw6TCNQq7t9sypZOkRgZznizuLfao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b1:14:79:85:bf:1e:34:87:b0:9c:d1:81:e4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Mar 26 03:01:08 2026 GMT
Not After : Mar 27 03:01:08 2026 GMT
Subject: CN=2e0f7521d01ae0ab2937db09170d553f7b2008a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:b9:8a:e8:c8:da:5c:fe:3d:5d:c3:3d:63:
a2:a0:7c:06:4f:6c:e3:ec:79:22:86:dc:71:65:73:
ce:93:52:c3:31:51:10:c2:f1:14:6f:08:5b:8c:2a:
f6:d6:73:aa:0d:da:fe:53:c8:48:9d:15:64:93:87:
68:c4:43:5c:18:78:e0:38:10:1b:32:d9:86:b4:50:
78:7b:91:d2:98:f8:81:24:9f:87:7b:0c:67:3b:42:
c6:4d:c0:e9:81:dd:69:c8:d5:56:30:e6:07:4c:4b:
3d:ab:29:de:95:74:8c:01:18:46:aa:0d:b2:71:11:
11:18:a7:52:4a:87:8f:42:d6:45:80:2c:e6:83:59:
43:49:2b:51:69:3c:88:84:8b:36:30:cb:67:f0:bb:
84:c4:ab:f9:be:e6:bf:8f:61:ce:98:de:2a:7c:e1:
46:70:68:77:fa:3a:fc:ec:d0:21:3c:16:42:35:bf:
46:61:a8:f6:ef:e7:45:12:1c:9c:03:86:0f:c1:de:
49:4a:b0:af:f1:fe:3f:1c:1b:c0:a2:04:6b:ce:0e:
47:e3:9b:32:97:cf:7c:27:50:b6:be:58:3b:6c:20:
c9:2d:4f:d3:de:9d:85:09:1b:f8:5e:9d:3d:1d:f8:
f7:21:5f:26:3b:2f:06:58:b9:2c:6a:c7:4a:77:4b:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:75:21:D0:1A:E0:AB:29:37:DB:09:17:0D:55:3F:7B:20:08:A2
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:de:23:85:c5:39:1f:bf:37:f1:8a:fd:0a:94:c6:46:8e:c9:
e7:7e:40:12:4f:6c:08:f4:b2:09:6f:95:49:c4:20:57:76:4b:
43:bf:10:fc:21:c2:02:9e:be:c1:06:ae:8d:14:90:42:b3:55:
d5:26:6c:c6:57:64:2f:42:65:98:c8:fa:92:08:02:e2:e5:8c:
9d:aa:53:83:ef:c5:9e:d3:90:6a:43:c9:73:97:88:7b:ae:c0:
91:24:f8:de:8d:fc:b7:f9:4e:97:d7:66:44:e1:32:14:19:83:
ae:7d:a6:a6:b0:1a:6a:b5:6b:fe:7c:31:2f:e6:44:7a:fe:d7:
b2:cd:b9:a3:bd:28:0f:c8:64:7d:34:b3:f8:09:ec:ee:4f:0e:
3b:fe:87:29:b5:b1:3f:84:f2:47:ee:e0:bd:cf:ea:3f:dd:a9:
e0:a4:23:d4:57:f9:b1:d1:77:d7:ef:01:c1:9f:34:78:dd:3c:
7c:c5:52:a9:94:77:cb:e2:a7:58:72:d9:11:72:96:4f:75:da:
d3:67:81:ef:b4:62:a5:f3:74:f1:7b:a8:92:c7:13:1e:15:e1:
89:3c:65:3c:75:f0:9f:7f:26:06:a8:2b:24:fc:b7:05:d5:88:
53:2e:39:68:1c:33:78:15:06:ce:34:54:11:c1:b7:cd:a9:94:
98:ba:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:05 2026 by rpki-client