Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: JOzv8g6+TLvy7nYnj1stwANLFsJSYCIHYUif8TzZZDE=
Subject key identifier: FA:43:78:1A:A4:76:04:96:3F:B4:01:45:BE:6C:EE:C2:E0:05:C0:FE
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019F95B7DC728A46B26B91375D0E05DF9600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 069F
Signing time: Fri 24 Jul 2026 20:01:22 +0000
Manifest this update: Fri 24 Jul 2026 20:01:22 +0000
Manifest next update: Sat 25 Jul 2026 20:01:22 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: pwcdiZymxrt/8X5Zl9TthXfk1ZWHbXBGNiQQaAWuspU=)
3: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:dc:72:8a:46:b2:6b:91:37:5d:0e:05:df:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Jul 24 20:01:22 2026 GMT
Not After : Jul 25 20:01:22 2026 GMT
Subject: CN=fa43781aa47604963fb40145be6ceec2e005c0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:e0:4e:ed:bc:de:58:f1:4a:8d:d7:8f:97:
e5:57:fa:c8:f4:46:4d:89:0d:2d:2b:68:1a:da:f0:
b1:63:06:6f:41:ef:66:ad:2b:20:58:ac:c8:26:8d:
68:00:33:bc:b9:f1:b7:8c:21:c2:f3:7f:02:f8:9c:
3e:da:39:cd:7f:19:81:61:99:25:35:d3:7c:b4:b0:
b5:fd:8e:d6:88:4d:48:d7:54:df:29:47:aa:14:1a:
f9:a9:bb:c5:b1:a3:3a:3e:f6:aa:2e:65:75:9c:7b:
85:80:fc:88:a6:51:2a:3f:30:ca:74:c3:8c:a3:3a:
02:66:be:49:0c:80:a9:ec:9b:37:93:78:6b:e3:fa:
25:e7:46:cd:d0:09:8a:ad:49:b8:b0:b4:e8:ad:85:
53:28:4c:6d:aa:a8:21:07:72:54:fb:5a:90:6b:89:
59:be:93:74:57:26:46:b0:25:00:7f:4e:d6:40:5d:
92:5c:d1:00:40:35:f3:2b:af:16:78:cb:9b:eb:d0:
aa:a0:8f:95:89:94:ce:8e:72:c4:9e:fc:fd:da:d9:
fa:ec:a3:5e:be:68:a9:6c:c5:a8:5f:33:c5:3c:4b:
7d:4d:ee:9a:29:60:50:03:50:03:b1:91:07:61:74:
30:62:37:e9:2a:34:f9:e4:d7:15:93:e1:4a:67:e1:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:78:1A:A4:76:04:96:3F:B4:01:45:BE:6C:EE:C2:E0:05:C0:FE
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a3:d5:f3:0c:6e:7b:34:16:7f:4f:8a:60:58:a4:fb:f0:d6:
1d:e3:c3:d6:ae:19:c3:42:24:58:72:8c:74:d2:7d:f1:6f:48:
13:0e:d9:8d:a0:9f:94:8e:f8:32:ed:a7:64:c1:f6:e0:c5:a2:
b7:02:72:4d:82:5f:71:12:96:8d:eb:b4:e7:16:26:e9:7d:47:
20:43:05:89:c5:7c:27:ee:9a:ad:d2:ec:5c:f2:b1:e0:ad:fd:
b9:3a:d4:fd:9d:d3:35:e8:b7:bf:df:f7:b9:63:8f:b9:4c:c9:
e3:e6:c1:43:13:ec:a1:ed:e1:53:a5:51:59:a8:b8:dd:06:f7:
48:29:7d:76:98:0f:9e:88:d9:c4:db:54:86:81:cb:e0:a8:ed:
30:ac:47:97:a9:63:c4:94:5d:07:0a:3a:a0:21:41:12:d8:78:
d2:51:6b:f7:0a:db:91:f9:5e:7e:08:67:7c:69:7b:f5:ad:51:
ee:49:d5:6e:89:b4:43:9b:c0:4b:e4:4b:8f:d2:cb:05:f8:88:
54:36:ee:90:c3:25:4b:20:ae:f8:61:c4:ae:23:54:cd:01:de:
4b:35:6f:62:0e:b4:51:43:dd:3f:f2:53:f4:09:70:8c:93:34:
06:f0:c0:d3:b9:6e:80:96:bf:0e:f4:af:fd:57:b9:84:ba:22:
8b:60:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:18 2026 by rpki-client