Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: 1vr2CRQPPom5OQ8Ld1r+HijLQXjKCvII+DD8d6qTKmM=
Subject key identifier: 4F:DE:14:A7:D0:88:25:DA:34:12:50:66:1A:70:D0:86:FF:12:DB:F4
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019E20FFFA2B025B41F3EAE48AD2DF3ED4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 05DE
Signing time: Wed 13 May 2026 11:01:46 +0000
Manifest this update: Wed 13 May 2026 11:01:46 +0000
Manifest next update: Thu 14 May 2026 11:01:46 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: Ru7ah+iGjEA/7jfAHns7F4+aaI8sr3kZ1NtgEe6yllk=)
3: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:fa:2b:02:5b:41:f3:ea:e4:8a:d2:df:3e:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: May 13 11:01:46 2026 GMT
Not After : May 14 11:01:46 2026 GMT
Subject: CN=4fde14a7d08825da341250661a70d086ff12dbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:e0:84:01:82:c4:2b:a4:0c:c2:d1:25:43:
66:4f:fa:9b:a8:b4:63:9e:3d:31:5c:0b:9e:06:19:
1d:c9:cc:c0:9c:3d:2e:d1:9f:c7:28:d3:e0:92:d2:
be:98:fb:f4:5f:85:51:68:ba:1c:b5:45:be:f6:bb:
85:c6:b1:cc:6d:22:61:ee:93:bd:bf:80:09:ae:e0:
1d:6c:61:94:4a:bb:5d:00:ea:84:31:80:c2:72:04:
c4:50:e5:1c:77:fe:ed:99:cb:87:71:87:51:09:36:
b6:27:80:50:85:e6:df:91:78:90:db:b4:88:cf:6d:
c5:0a:47:51:26:36:7d:30:ca:86:ce:e7:7b:75:84:
3b:cc:85:1a:21:a2:36:bd:68:b4:a8:e0:fa:3e:51:
60:4a:f1:ea:fd:0d:93:21:c0:8c:dc:f4:6e:ec:e1:
05:09:3f:d4:f9:48:44:cb:a5:7c:fb:3a:5c:3b:95:
f5:99:30:20:ca:06:e7:70:00:73:50:71:53:04:bb:
6e:ae:d0:b1:72:3f:c5:38:81:23:38:22:56:06:3e:
7e:c0:64:42:c9:2c:2f:38:8a:88:5d:5a:55:7d:89:
ec:37:46:9f:95:a0:9b:01:67:27:a6:36:cc:54:23:
b7:14:9c:5c:32:8f:30:a3:af:36:8e:5d:e1:4c:ec:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:14:A7:D0:88:25:DA:34:12:50:66:1A:70:D0:86:FF:12:DB:F4
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:37:f8:e5:da:00:80:91:1c:e0:78:cb:3c:a6:f1:f5:cc:bd:
4d:9a:9a:10:b5:c3:70:04:1b:cb:ae:62:e2:24:dd:78:c5:4d:
49:64:d7:4f:29:24:12:33:d1:df:86:a7:db:43:7f:4a:67:83:
1a:bb:e0:a7:c7:cc:8e:da:bc:d4:02:3b:cb:a6:8f:90:12:6e:
e7:85:2f:d0:2b:d8:6c:58:09:39:ff:dc:64:19:26:66:c9:ef:
d6:86:cc:db:94:76:2f:81:6a:ec:d4:74:8b:dc:fe:11:fc:2e:
52:ee:0e:eb:04:4b:ba:7a:fa:8b:e6:f9:fe:a4:a3:a7:2f:3d:
65:20:b4:99:2d:66:5f:a1:4e:33:e0:b7:d8:2d:fd:1e:75:5b:
0d:92:17:54:1e:39:22:00:05:31:1c:d1:3b:3c:14:48:b3:9f:
5f:6c:25:5b:0a:59:78:f8:c2:0d:a4:9f:f5:c6:05:50:b1:dc:
81:79:b3:db:3d:38:56:4f:e9:6d:44:c9:06:b5:bf:e8:7b:9b:
af:cb:84:39:28:b8:a3:fd:86:88:1b:1b:88:90:a7:9f:f6:5c:
d4:3c:3a:42:19:88:5e:88:fa:40:e5:ef:3e:26:0a:e0:0c:59:
28:2b:cb:78:9e:1f:d2:9a:13:b9:9a:a9:1c:8c:68:06:17:76:
f9:80:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:59:13 2026 by rpki-client