Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: ipHNR6xFwN4HEauCwU9MhhN+udsRgZ9h2R95trwRSNo=
Subject key identifier: CF:45:B8:68:AA:5E:69:82:F5:77:78:10:34:43:AB:6B:64:C4:33:AA
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 019F841F05C0C295736BC5CD1BE9937D00CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0D1F
Signing time: Tue 21 Jul 2026 10:00:53 +0000
Manifest this update: Tue 21 Jul 2026 10:00:53 +0000
Manifest next update: Wed 22 Jul 2026 10:00:53 +0000
Files and hashes: 1: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (hash: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E=)
2: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (hash: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI=)
3: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (hash: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI=)
4: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: 5kelx5wmRX3i6jvzDdOuNoIFhbLqQEUgsItsFodSZII=)
5: lEbUtLtNkfAyY2Y1bQXjNgffS1A.roa (hash: b/0/ySYWBBPjZPbNT3Q9pWagQbtfduFB4wZTve0Q5AE=)
6: mi7KJXHo-_cgynjrOEYKa7kVD8I.roa (hash: YGaCcIrn+IZQb5Rq3PZQYSYoXxlLsMVa6xxEh3lbzgI=)
7: tEbhK49lj9A2t1UjujH2qFk6A88.roa (hash: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk=)
8: vi3DjTDiHudyYK8w8VItrX_abyg.roa (hash: nMbONn7wYaL+5u0tqJSULFh7G6Nyiekz0kaTGUhg9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1f:05:c0:c2:95:73:6b:c5:cd:1b:e9:93:7d:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Jul 21 10:00:53 2026 GMT
Not After : Jul 22 10:00:53 2026 GMT
Subject: CN=cf45b868aa5e6982f57778103443ab6b64c433aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:60:a2:2e:a8:eb:28:e6:25:40:f4:62:9a:
29:db:6b:28:82:67:8a:d2:e0:22:e9:27:f9:12:a0:
6b:94:cd:59:a4:18:c7:fa:a2:be:06:db:20:07:76:
a9:3f:a4:76:6c:15:50:70:bf:44:1a:15:f7:82:b4:
19:6d:01:60:a8:69:01:a6:77:dd:9f:3d:fa:82:11:
ca:a3:3a:b0:b6:8b:62:4a:c4:9b:d9:1f:b0:8f:63:
c6:84:a9:e6:73:22:50:08:44:21:fe:44:68:09:8f:
66:aa:cf:f3:60:21:68:66:5b:47:66:61:b9:71:3b:
62:6c:af:3e:50:9e:03:f4:22:4a:af:93:1e:e0:9f:
e7:14:28:ae:a8:a1:5f:ff:f9:42:8d:27:3c:df:4c:
b2:ed:4e:73:d0:c9:46:10:e7:4a:0b:2e:1a:b9:67:
fb:f0:69:27:66:69:92:6f:37:8b:bd:64:00:db:01:
7e:59:e2:33:93:7c:49:6e:77:aa:7e:9a:ac:18:dc:
f5:bc:c2:f3:17:86:5f:a9:53:97:cf:00:33:ac:06:
56:32:c6:8a:31:8b:d8:40:6b:22:bb:b3:3c:ad:7a:
14:9a:d6:3f:34:57:27:7b:79:9e:80:e7:9c:af:bd:
3f:34:33:3a:11:79:dd:d2:42:6d:38:43:a3:8c:74:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:45:B8:68:AA:5E:69:82:F5:77:78:10:34:43:AB:6B:64:C4:33:AA
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5b:fc:5c:c4:1b:f4:b5:6c:3b:c7:06:2d:b0:27:92:c2:11:
69:78:cf:1c:b4:ff:d8:9c:80:16:0b:03:73:98:b1:70:8a:12:
98:7c:d7:b9:3f:1a:3d:6a:c2:e7:0a:f0:28:d1:03:4e:6e:49:
b8:db:08:62:3b:32:89:f5:d2:4c:4d:74:45:8d:d7:bd:a9:89:
63:cd:3c:a8:08:49:09:ad:3e:2f:12:e4:01:70:b9:70:8b:5c:
60:b9:20:ce:57:9a:ff:cc:20:57:fd:63:22:82:32:5b:39:39:
8a:d5:d5:41:1b:07:81:14:27:ab:20:45:31:eb:0f:41:7a:f8:
fc:5b:44:f0:fc:85:35:a8:bd:f4:7e:9c:4d:96:f7:2e:c3:43:
63:04:9f:68:28:bf:92:74:cb:72:04:84:b0:7a:15:6a:9a:3e:
b6:0f:ce:e7:71:18:97:10:ba:9c:26:be:b4:da:26:6d:7f:37:
f1:a5:b4:8a:a6:13:32:ed:94:52:a4:39:7a:ae:24:36:ed:7c:
7e:c9:bc:a6:ad:b5:7e:15:9b:df:10:84:2e:de:6d:74:e5:32:
eb:d1:26:a8:68:7a:70:68:15:d9:b5:b3:44:b8:ca:52:3b:c4:
dc:b6:e7:40:9c:de:b9:0f:6e:95:8f:60:2e:e9:9e:d1:8a:b3:
db:30:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:30 2026 by rpki-client