Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: JV6Qpw8LzmhW7GFjTCkeLSIfcMjkwhMmebGd2AXDRl4=
Subject key identifier: D6:6B:D5:09:36:89:CF:30:CC:99:82:A0:A8:C1:64:F7:B7:D2:0B:AF
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 01A06DCBD51C77150738D55441DC2B30624B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0D98
Signing time: Fri 04 Sep 2026 19:01:09 +0000
Manifest this update: Fri 04 Sep 2026 19:01:09 +0000
Manifest next update: Sat 05 Sep 2026 19:01:09 +0000
Files and hashes: 1: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (hash: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E=)
2: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (hash: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI=)
3: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (hash: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI=)
4: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: 1eyY1E6UrY82LNkCVBOXfdE8TSuZoNm28SQ/g9aNTX0=)
5: lEbUtLtNkfAyY2Y1bQXjNgffS1A.roa (hash: b/0/ySYWBBPjZPbNT3Q9pWagQbtfduFB4wZTve0Q5AE=)
6: mi7KJXHo-_cgynjrOEYKa7kVD8I.roa (hash: YGaCcIrn+IZQb5Rq3PZQYSYoXxlLsMVa6xxEh3lbzgI=)
7: tEbhK49lj9A2t1UjujH2qFk6A88.roa (hash: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk=)
8: vi3DjTDiHudyYK8w8VItrX_abyg.roa (hash: nMbONn7wYaL+5u0tqJSULFh7G6Nyiekz0kaTGUhg9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:d5:1c:77:15:07:38:d5:54:41:dc:2b:30:62:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Sep 4 19:01:09 2026 GMT
Not After : Sep 5 19:01:09 2026 GMT
Subject: CN=d66bd5093689cf30cc9982a0a8c164f7b7d20baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:ff:ff:56:bf:fb:cd:53:67:13:73:22:e6:
89:d7:d1:56:ef:2d:40:b8:85:d4:98:ec:70:e0:34:
88:a1:74:5c:56:49:4d:f5:ca:c7:3a:eb:e3:07:15:
80:bf:11:21:3e:eb:b6:7e:78:04:cf:3e:15:57:1d:
fd:d1:46:6d:e1:ad:56:03:93:42:dd:25:2d:0b:77:
ba:69:6a:6c:99:63:60:4c:38:ad:ae:10:e7:f7:6c:
a9:38:c9:e4:06:72:63:7a:70:fd:4f:e4:ec:ec:db:
f8:7b:e4:7e:b5:68:a8:d4:b8:13:23:8e:1e:ff:fd:
60:26:19:30:28:6b:49:be:4f:48:9e:b4:0f:45:b3:
df:26:fc:75:aa:2a:e5:5c:1e:0e:13:b9:4a:19:cf:
1f:42:e1:7f:71:3d:23:7d:19:cf:11:de:f9:a1:bc:
de:b3:bd:57:00:6d:b2:c8:87:be:ff:12:da:ad:07:
47:d6:99:f9:cf:54:71:c5:fd:d6:9f:ab:f6:b6:c7:
f5:db:3a:58:31:8b:63:de:07:fd:15:d9:5c:8e:4a:
ec:49:0d:40:ae:67:b5:96:e1:df:01:a3:ef:ea:c0:
79:a4:f1:d7:af:90:fc:59:26:5d:e4:93:ec:89:d6:
7a:e7:a1:b4:17:12:ae:6a:01:7d:dc:39:f8:29:cb:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:D5:09:36:89:CF:30:CC:99:82:A0:A8:C1:64:F7:B7:D2:0B:AF
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:17:9b:ca:6c:53:fd:06:75:e9:d9:22:8e:2c:67:68:5c:5a:
b1:e2:3a:e9:dd:c4:21:fd:8f:2d:09:42:e2:87:31:3e:c7:0d:
88:d2:b2:04:36:81:72:08:18:43:ef:ad:4f:46:35:17:a6:61:
22:85:47:6c:a4:4c:45:11:43:73:ed:22:f0:d0:43:b5:fe:6d:
e2:e7:df:ce:50:ff:97:c8:37:54:fb:89:03:a9:73:9b:40:c9:
98:10:18:f7:74:59:7e:30:98:07:68:d9:4a:7d:f5:49:84:8e:
ad:ae:ae:ff:35:72:e7:a2:51:46:e4:2e:03:8f:ac:8c:70:27:
82:9b:69:e9:4d:a8:b7:d4:1f:67:da:14:61:53:c4:46:05:2d:
6f:46:ea:f0:d8:0a:ce:7e:09:2d:b2:7c:34:5c:ac:63:0e:3d:
98:83:82:0f:ae:e5:0c:3b:0f:ea:ba:0d:6d:ad:1e:f4:df:38:
a9:38:78:fc:6f:db:07:8d:33:92:34:42:9d:10:ca:d1:ca:76:
de:97:2e:2f:85:15:10:ff:68:63:61:eb:dd:d4:02:ed:ac:86:
2b:0a:75:03:b2:17:b5:89:32:d6:7a:9d:8b:b1:84:92:60:1a:
1c:5b:4a:71:a7:e3:5a:26:b6:34:30:62:a3:dd:f1:14:b8:af:
6d:39:18:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBty9UcdxUHONVUQdwrMGJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj
NjdlMDAwHhcNMjYwOTA0MTkwMTA5WhcNMjYwOTA1MTkwMTA5WjAzMTEwLwYDVQQD
EyhkNjZiZDUwOTM2ODljZjMwY2M5OTgyYTBhOGMxNjRmN2I3ZDIwYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEb//1a/+81TZxNzIuaJ19FW7y1A
uIXUmOxw4DSIoXRcVklN9crHOuvjBxWAvxEhPuu2fngEzz4VVx390UZt4a1WA5NC
3SUtC3e6aWpsmWNgTDitrhDn92ypOMnkBnJjenD9T+Ts7Nv4e+R+tWio1LgTI44e
//1gJhkwKGtJvk9InrQPRbPfJvx1qirlXB4OE7lKGc8fQuF/cT0jfRnPEd75obze
s71XAG2yyIe+/xLarQdH1pn5z1Rxxf3Wn6v2tsf12zpYMYtj3gf9FdlcjkrsSQ1A
rme1luHfAaPv6sB5pPHXr5D8WSZd5JPsidZ656G0FxKuagF93Dn4KctFvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZr1Qk2ic8wzJmCoKjBZPe30guvMB8GA1UdIwQY
MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt
N2EwZWNlOWMwYWY4LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4
LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBebymxT
/QZ16dkijixnaFxaseI66d3EIf2PLQlC4ocxPscNiNKyBDaBcggYQ++tT0Y1F6Zh
IoVHbKRMRRFDc+0i8NBDtf5t4uffzlD/l8g3VPuJA6lzm0DJmBAY93RZfjCYB2jZ
Sn31SYSOra6u/zVy56JRRuQuA4+sjHAngptp6U2ot9QfZ9oUYVPERgUtb0bq8NgK
zn4JLbJ8NFysYw49mIOCD67lDDsP6roNba0e9N84qTh4/G/bB40zkjRCnRDK0cp2
3pcuL4UVEP9oY2Hr3dQC7ayGKwp1A7IXtYky1nqdi7GEkmAaHFtKcafjWia2NDBi
o93xFLivbTkYEw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:46:23 2026 by rpki-client