Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: CeR1tOSs3piboowccWZ8z8Mn9cE7R9yhJp0FfP0BqTU=
Subject key identifier: BB:6F:46:A2:80:5F:91:8D:83:A0:6C:CD:EA:6D:56:0D:95:86:C5:FE
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 01A12D32AAFE0A246632584010EB00A44DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 0772
Signing time: Sun 11 Oct 2026 23:00:57 +0000
Manifest this update: Sun 11 Oct 2026 23:00:57 +0000
Manifest next update: Mon 12 Oct 2026 23:00:57 +0000
Files and hashes: 1: 6Vq6nX6qZxxpHxLNn7nD2R9p3vg.roa (hash: cCFRmS9OiVLkCF1BaRT3CqFY4I6S01WCAYWaFPvUJRM=)
2: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: JRory+vgffTKOezFP0lJybC5VpsGPpCnfmEBwXlBnTo=)
3: mFOcu9448pkWaJxj0W6CJ5qV7oc.roa (hash: sfdgi4ysoZDcqPEECniZSAvoWWAcCc3gl1/AmNd3E4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:aa:fe:0a:24:66:32:58:40:10:eb:00:a4:4d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Oct 11 23:00:57 2026 GMT
Not After : Oct 12 23:00:57 2026 GMT
Subject: CN=bb6f46a2805f918d83a06ccdea6d560d9586c5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:d3:6b:d0:bf:54:72:f6:5d:2c:cf:0c:c0:
5f:11:3d:23:14:1d:b8:eb:78:e3:7e:9e:fa:00:2b:
12:36:90:0d:d8:60:39:eb:39:2c:b3:6b:88:4b:ef:
b1:01:f3:2a:ec:e1:6b:4e:39:0b:16:04:33:da:7d:
63:88:92:f1:87:1f:05:bf:12:99:e6:81:5f:ff:0c:
58:1a:6e:b7:51:a6:60:3c:37:7f:b9:ba:64:ea:fd:
1b:17:67:a6:96:94:57:4c:a9:d7:8a:85:1e:2d:f3:
6c:a9:64:88:4f:3b:26:e0:9a:54:84:a1:e1:21:d5:
32:22:8c:83:35:5d:23:17:3a:a7:59:26:af:a3:5b:
ad:16:12:0f:5e:b1:59:15:55:13:7c:a3:52:01:ba:
0f:db:f2:a2:f7:d9:0d:c3:fd:3a:98:9d:9f:91:1d:
18:8e:e9:dc:8c:cd:9f:1e:b9:17:6b:99:db:88:dc:
3a:dc:b3:81:1a:4c:2f:b0:85:3f:ad:72:c0:96:28:
39:2a:c7:fd:cd:0a:5f:ff:27:bf:9e:de:bf:8d:67:
74:d2:e6:1a:94:ae:a4:6f:0e:de:34:d1:d3:2e:5e:
22:6e:23:fa:48:e4:15:a2:03:2b:f8:89:21:ef:84:
73:de:69:20:7c:16:fb:78:3d:d4:b9:6a:d9:0e:c4:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:46:A2:80:5F:91:8D:83:A0:6C:CD:EA:6D:56:0D:95:86:C5:FE
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:c8:92:81:cb:a0:e0:18:d1:62:e7:fa:e3:69:e1:c6:7f:
99:f5:7e:4a:75:ab:9a:22:cb:24:4b:93:20:70:ba:87:71:68:
b4:27:5d:ec:38:94:59:73:d0:d0:2f:b7:f4:c8:d1:99:78:22:
34:49:5a:9e:d5:9a:36:98:2b:25:0e:6c:5a:c2:93:29:0f:ca:
85:e2:7f:a7:bd:77:14:d4:bf:61:ef:ca:ac:4b:c0:5f:31:05:
3a:97:4d:ba:36:b1:24:91:41:80:6e:86:41:af:72:52:82:95:
77:41:d3:da:d2:10:90:5e:dd:2d:fc:69:f0:61:c2:28:b3:71:
98:11:1a:66:10:21:8c:ea:2e:0a:7f:47:c3:f3:90:43:90:0e:
10:60:76:df:e3:13:bd:06:d2:7f:bd:36:e4:3d:2b:d2:9a:95:
ab:a8:35:00:19:8b:4b:f4:4a:ae:52:a5:25:da:0f:51:90:d0:
b8:5f:50:8a:1f:65:5c:e5:5f:1d:a4:e0:fe:72:ad:3d:05:c1:
4f:d3:a8:4a:2b:19:79:08:de:f0:fe:b3:1e:53:13:74:8f:a2:
bf:5e:79:eb:b1:7e:dd:aa:1f:e9:22:c8:03:54:5a:54:1a:cb:
d5:60:0d:96:9f:4e:5d:52:f0:95:6b:e3:50:ba:4e:4c:75:e3:
0c:63:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:48:34 2026 by rpki-client