Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: vu9HCRco0uyQ1Nuvu8FTHPGpB/yS3RyqibNeMnXGdAw=
Subject key identifier: 30:DF:39:86:88:BB:77:6E:2D:CE:1C:E3:49:E2:9A:79:D1:72:34:42
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 019D38D2C56E72AAA1BFC29A432EB38ADF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 1676
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: JhvtBzhQwZn8G08e3s77DaQuieB40FOciE7tvbj3AQA=)
2: m7ka3GTgMeqm1ki2dDpAuEKjwdM.roa (hash: 77rePDrGBduV4VbCULV3j9BdzB+b3yDNJM//8C/mjto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c5:6e:72:aa:a1:bf:c2:9a:43:2e:b3:8a:df:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=30df398688bb776e2dce1ce349e29a79d1723442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:58:b2:02:f9:bd:ce:77:68:cc:72:99:52:
24:ba:77:26:e3:f2:e9:6d:e8:20:14:f6:29:88:9a:
f7:10:ec:fb:ce:17:63:e6:3f:14:91:49:6d:1c:a4:
a2:32:ae:50:22:2d:2a:ea:93:02:ee:2f:ad:99:dc:
9d:40:46:54:7e:8b:f2:a5:46:e8:ad:b5:0f:b9:5a:
6c:f6:44:2f:df:e7:d5:a2:7d:f2:6c:9a:5e:f9:8d:
19:a2:9a:35:36:f1:85:46:95:81:bb:5f:2d:94:55:
dc:b2:7e:d8:49:b4:ac:01:b9:ba:d8:bb:bf:27:4e:
4e:19:6d:7f:26:5a:e3:39:7f:3e:e1:b8:a9:59:91:
66:f5:89:4a:de:6a:07:79:01:a6:a8:06:98:38:3a:
69:da:e4:c4:df:89:2c:8a:0e:a1:b0:e7:7d:5b:c2:
ac:f6:35:92:53:34:2a:43:37:a2:b6:d0:6b:be:d0:
a8:96:8f:fa:c6:6e:b2:8d:0f:38:de:46:b0:48:37:
03:93:1b:d7:d0:4e:56:d6:d3:0d:e0:20:e1:6a:c9:
bc:98:e1:2a:5e:92:29:c5:77:48:40:bd:d2:29:87:
c5:1f:f3:26:52:36:b9:d1:7b:48:1d:b8:4a:c6:77:
8a:f5:23:8e:06:10:42:bf:87:29:74:72:1d:b7:12:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DF:39:86:88:BB:77:6E:2D:CE:1C:E3:49:E2:9A:79:D1:72:34:42
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:aa:c2:76:c8:6b:ad:e7:de:8b:13:4f:e9:d0:2b:05:f7:d2:
07:51:ae:5c:eb:b0:2e:20:89:f4:c6:71:a3:bf:e3:b3:1c:12:
04:87:67:c8:eb:c7:7e:27:eb:33:54:b0:8b:34:0d:bb:ed:9e:
c8:b9:58:cb:8d:15:e4:dd:f5:9a:ba:05:53:19:94:d7:a3:b1:
75:b0:b2:ec:6f:8b:70:7b:97:df:f6:60:03:3a:2a:02:b8:36:
00:4b:ed:b6:67:53:89:c9:64:98:32:96:54:14:96:c5:5b:48:
bb:d6:4c:07:e4:71:c9:73:0a:15:a9:ad:df:bd:6f:5c:6c:5b:
41:45:02:9a:5e:40:00:57:94:38:8a:04:6d:a5:30:26:37:15:
19:08:7c:f5:92:56:96:76:bc:58:52:75:28:2f:30:b4:82:f0:
26:de:4e:5c:ab:ba:cb:53:c2:f4:33:ff:6a:c4:cc:54:58:d6:
46:6f:79:0b:d8:88:e1:71:69:97:b0:4a:e1:63:6d:71:e9:a7:
a0:cd:49:ec:7f:00:43:27:a2:76:d9:e4:26:7c:a3:6f:3a:59:
f2:40:ef:0d:8b:ce:c2:81:18:f0:52:01:92:f0:74:c4:9f:07:
44:fa:35:46:51:9d:4b:fe:2b:52:bf:03:16:c4:15:c1:ed:65:
7c:21:0f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:48 2026 by rpki-client