Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json)
Hash identifier: g3/IIXci+8GGU53zjK6BjjGQXoGE2M2ov7PiEKX+30E=
Subject key identifier: 0E:D5:AA:44:CE:E0:0F:C7:59:DE:EF:9B:97:D5:06:C7:ED:DE:3F:73
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019CDDA122D0985A181BDFAB2E177D3FAB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
Manifest number: 1857
Signing time: Wed 11 Mar 2026 16:00:50 +0000
Manifest this update: Wed 11 Mar 2026 16:00:50 +0000
Manifest next update: Thu 12 Mar 2026 16:00:50 +0000
Files and hashes: 1: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: YQG1++P5QBpZdnwvPwujkObsHjihUe0jZOoz6SP+4IY=)
2: K8bI68ydbYD0aGoO_y4tC8a-6po.roa (hash: 7jWrWjgMEBXHFnrwJxNxcZvd3n/YILw9cksevC2VciU=)
3: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=)
4: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=)
5: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=)
6: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=)
7: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=)
8: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=)
9: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 15:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:a1:22:d0:98:5a:18:1b:df:ab:2e:17:7d:3f:ab:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Mar 11 16:00:50 2026 GMT
Not After : Mar 12 16:00:50 2026 GMT
Subject: CN=0ed5aa44cee00fc759deef9b97d506c7edde3f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c0:6d:6a:3c:d0:90:e6:56:b2:da:aa:4d:de:
25:95:23:d3:bd:19:85:69:c1:6c:ae:83:a7:b5:4b:
cc:c6:8f:62:a2:fb:60:9a:b0:02:8e:f4:b2:a3:ee:
24:ed:42:1f:4d:26:08:57:8a:82:e2:1c:16:08:b7:
c9:bb:3e:60:8b:57:20:30:26:f0:21:46:46:01:22:
7b:a5:d7:89:84:87:f0:e5:28:63:31:1f:95:85:e0:
99:cd:32:d9:05:ba:40:3f:1c:b7:85:eb:a7:e6:a5:
9b:2a:d3:c8:a5:c9:4e:18:0f:1f:0b:e2:fa:89:a8:
8f:02:2d:53:21:40:d3:31:fc:bd:7c:de:33:8f:b2:
e1:70:29:a8:3c:ac:78:f1:b0:a7:f8:80:7c:f5:81:
d3:7d:c3:5f:3a:91:74:56:4e:b9:9e:d5:13:09:13:
53:18:57:93:14:d2:fa:7b:a7:37:bf:c5:18:6d:1c:
51:58:40:af:e5:c5:a0:a0:47:34:a6:dc:7e:36:23:
65:41:e7:ec:08:56:c7:6d:f5:23:64:4a:8a:ea:49:
61:61:6b:2c:63:90:60:8c:67:eb:c8:0b:46:73:09:
23:3c:5d:26:2b:a8:79:45:af:12:84:0c:4d:d3:b4:
21:06:e2:1f:76:41:29:df:8c:66:ec:66:f1:32:10:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D5:AA:44:CE:E0:0F:C7:59:DE:EF:9B:97:D5:06:C7:ED:DE:3F:73
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:4f:89:7f:88:5d:92:74:a2:f0:13:e4:3b:1c:2e:22:4b:
d1:af:21:b5:a4:46:cb:3f:a1:11:44:06:b9:3e:9f:44:aa:26:
b6:87:14:e5:8a:bb:c7:9e:bb:d7:4d:c1:74:73:3d:30:50:47:
2d:b3:f8:8b:85:57:a8:cf:0f:31:28:72:0f:d0:cc:51:fd:42:
9a:43:4b:a6:f8:89:13:6e:47:5b:be:6c:03:0d:a9:82:df:91:
c1:13:f3:d6:84:ec:be:00:a8:bc:d6:74:be:cd:02:28:30:8b:
5f:93:86:de:0d:b4:b3:82:f6:9e:c0:94:e9:70:78:7d:2a:a4:
03:aa:a5:c4:94:96:a5:16:1c:0a:27:ea:77:23:b1:77:31:27:
d9:a2:9b:b6:d8:63:f6:aa:1b:a0:20:c8:4c:4b:0c:4d:c8:b2:
b9:df:41:57:bb:1e:59:5e:be:be:08:f9:ac:42:e2:92:3a:81:
b7:f3:fe:1a:bd:cf:18:d7:14:67:cd:4a:16:c7:2e:97:7b:2b:
13:c9:df:ec:8f:0a:a5:3a:a3:5f:38:2d:a8:dd:af:53:ed:1b:
81:1d:a9:5d:c4:75:17:8f:6b:c6:61:9f:b5:3c:6f:bf:ad:b5:
5e:30:e7:12:f3:58:76:99:2c:e2:d2:f2:1f:5c:ce:1f:6b:b8:
71:55:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 21:03:24 2026 by rpki-client