Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: U7mjy+4s3KczrtpNUBkH/xd/8Dqe8LxJOvUVS3cqbeM=
Subject key identifier: 0C:AD:40:57:A2:7B:1A:58:C4:48:69:EE:5F:32:8F:D7:D3:7B:B8:C3
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 01A16044A3F00F8E43351B351A280D72E888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 1599
Signing time: Wed 21 Oct 2026 21:01:13 +0000
Manifest this update: Wed 21 Oct 2026 21:01:13 +0000
Manifest next update: Thu 22 Oct 2026 21:01:13 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: 8rzyMQpGdYLImRikxkUx3t/zTn32wYmzW2txGBYpids=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:44:a3:f0:0f:8e:43:35:1b:35:1a:28:0d:72:e8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Oct 21 21:01:13 2026 GMT
Not After : Oct 22 21:01:13 2026 GMT
Subject: CN=0cad4057a27b1a58c44869ee5f328fd7d37bb8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:43:dc:fb:3d:dd:5c:70:07:c3:3e:ec:f2:
7f:8f:dd:3a:42:84:b0:e4:a6:d9:a4:54:64:ca:57:
95:42:3f:cc:57:64:95:a5:b6:d3:bb:91:12:e6:de:
7f:30:60:46:e1:ec:e7:9e:66:e3:69:e9:67:93:f6:
00:d9:68:f3:99:d6:92:77:82:c7:e7:d2:16:51:70:
3b:22:a2:f5:5f:ad:9c:37:3d:63:cc:60:cf:5a:47:
1d:53:b9:7b:84:bc:57:ce:3a:1e:48:c0:94:ac:c2:
2c:33:61:26:01:27:f0:7f:6b:7f:cb:f4:fb:c4:ec:
78:bf:c8:7f:d3:80:a7:66:aa:06:ab:24:6c:d9:5a:
cc:1e:d7:42:7f:be:e5:f9:13:48:fe:ea:a2:73:b7:
61:2b:83:00:4f:10:97:57:19:97:32:c6:3a:dc:90:
41:87:4e:da:54:dc:04:bd:9c:2d:c9:1a:c2:70:af:
71:d8:33:38:5d:9a:28:33:5f:10:04:90:39:51:91:
62:9e:56:74:38:01:e3:03:1f:13:7a:2f:36:ab:79:
f9:63:ba:30:71:22:b9:76:41:72:73:c8:06:dc:d2:
cc:ef:cc:ad:fd:9c:96:09:28:d2:a3:47:93:51:2f:
11:65:17:bc:8e:c1:85:ed:04:57:76:77:c1:e4:2c:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:40:57:A2:7B:1A:58:C4:48:69:EE:5F:32:8F:D7:D3:7B:B8:C3
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c0:27:b7:f7:86:7a:86:8f:23:31:93:74:77:f3:f7:e2:a5:
b8:8f:7c:29:4a:64:fd:5e:db:d6:9a:5e:c1:d3:34:30:c7:f4:
74:cf:73:b9:57:4e:69:8d:42:81:5c:66:0a:b2:d7:d3:32:f9:
91:40:57:3c:af:7c:f1:14:61:25:2d:22:1a:b5:a2:aa:76:f6:
c9:34:5a:e3:77:25:a3:fa:e8:91:29:7d:ba:0c:23:0d:f8:3c:
b2:83:11:14:a6:5d:42:67:30:31:2b:9d:c3:61:fe:bd:8a:86:
05:a2:de:16:d9:74:ea:4e:26:8c:1e:c0:8a:af:89:da:ad:51:
5c:f2:d1:e9:8a:a5:b5:3a:75:b6:6b:63:67:4b:c1:53:df:0c:
43:a0:57:88:49:23:1f:43:45:7a:81:84:91:94:ba:5b:56:46:
c5:a7:ce:b4:2e:de:9c:3e:80:63:9a:7e:b6:14:c9:12:45:95:
76:ab:29:28:63:1e:d3:d8:06:c1:f1:17:64:c3:48:a4:d8:43:
06:38:9e:4d:30:b8:53:d6:4a:e5:b7:52:10:d4:48:e0:26:c7:
77:cd:f8:6b:0a:6c:c6:22:82:4c:e1:7b:67:c2:97:f8:41:c1:
a4:12:48:b7:46:72:73:09:b5:7a:df:dc:6e:3d:c6:25:98:08:
e4:c2:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:09:02 2026 by rpki-client