Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: 7kaeOf7DGhrK8f7ed6U210yyqZxlY2arK3pctQp/RDM=
Subject key identifier: 87:BB:D8:6E:90:48:FB:A9:D7:C0:C3:46:95:75:6E:FE:A7:5E:B2:FF
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 019D2A3B94E875CE0E9966050CBC0AB5EEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 055E
Signing time: Thu 26 Mar 2026 13:00:40 +0000
Manifest this update: Thu 26 Mar 2026 13:00:40 +0000
Manifest next update: Fri 27 Mar 2026 13:00:40 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: hEfVgroYahSalM0w7ivIC4wmnKlJ+rPycfunNVTI4T0=)
3: T3pwpqAx_LdJ9PA4OdxVsrjZotQ.roa (hash: Iv53mpeLIF4jhLKuNnWEt8LtAUDhecBCNu6Oav+UHYA=)
4: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:94:e8:75:ce:0e:99:66:05:0c:bc:0a:b5:ee:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Mar 26 13:00:40 2026 GMT
Not After : Mar 27 13:00:40 2026 GMT
Subject: CN=87bbd86e9048fba9d7c0c34695756efea75eb2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:64:72:76:e4:49:9f:0d:b9:ca:69:a6:e1:
90:11:f8:55:a4:55:7b:28:ef:67:ca:bc:58:d9:5f:
6f:e0:0d:26:a4:7a:ff:b8:0f:de:6f:77:b3:2c:ad:
9e:98:63:89:1f:1c:86:eb:72:05:c9:8c:df:44:cc:
8a:6b:4f:3c:48:33:10:81:af:97:14:2d:f8:5d:f4:
4b:34:5a:0e:0f:88:dd:8b:f6:f9:6d:ba:be:5c:8b:
d0:7e:cd:f8:a7:4b:1f:49:89:05:ce:12:b2:0f:f5:
3f:b8:67:06:9b:4a:e2:7a:84:46:c5:44:3f:ff:7a:
e7:c9:e9:e5:16:7a:30:1c:db:8b:76:13:80:71:f8:
89:42:e6:11:ef:4f:4d:5c:ea:89:70:23:50:fe:8a:
d8:68:c7:b7:75:65:b8:99:0d:fb:1e:44:64:68:57:
f8:87:f3:92:10:cd:94:e2:d7:8e:5f:7a:21:eb:86:
00:2d:03:f6:1b:a7:bf:cd:47:73:c8:65:6e:b7:13:
2f:23:54:ae:5c:8f:d6:b3:12:55:2b:5f:81:80:29:
42:11:65:39:7b:b8:1c:e1:2d:cd:78:0d:05:f9:ee:
67:63:f7:0f:78:00:fd:de:0a:bd:b4:fe:eb:1c:ba:
32:d5:52:46:33:f7:2c:f7:27:19:37:7d:cc:18:ed:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BB:D8:6E:90:48:FB:A9:D7:C0:C3:46:95:75:6E:FE:A7:5E:B2:FF
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:21:bf:6c:d8:c3:ef:49:ad:95:c7:07:da:73:35:05:30:6f:
16:c9:f7:b8:74:98:33:a2:5d:aa:5f:89:e9:24:6b:bc:6e:1d:
63:a9:3a:58:50:16:63:d2:19:05:82:5b:f3:2b:a4:38:54:ca:
5e:94:42:a5:10:ed:be:3d:16:91:8a:7d:53:11:5c:a2:e9:05:
b7:3d:bf:ae:5b:3b:e7:0e:39:aa:10:0d:db:63:77:3d:84:15:
1f:c8:bd:40:93:8a:b1:11:99:d9:06:79:fe:56:48:c2:ff:7e:
eb:85:11:f6:a6:00:cc:c5:a8:72:cd:d5:03:cc:6e:ce:4b:d5:
64:2b:1d:26:55:be:3e:63:31:3e:ec:38:3a:14:28:a7:24:55:
74:ce:e1:b6:53:13:b0:09:74:dc:4a:28:bc:6b:ff:cf:31:b7:
06:b7:81:b4:27:74:67:77:8a:4e:2f:b1:4b:d0:10:09:38:42:
16:b7:5f:02:b7:20:36:19:1a:c3:7e:e0:01:f0:12:08:98:f1:
80:23:4d:ae:d7:43:d3:b3:bd:41:45:e3:35:65:6d:97:3f:bd:
e8:5b:36:73:31:b0:5b:0b:58:4c:d8:10:b0:4c:28:dc:38:15:
dd:7e:75:04:0d:a3:c6:c8:1b:4d:65:cf:f9:2c:e7:8f:00:b5:
e0:e3:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:01 2026 by rpki-client