Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json)
Hash identifier: 4Hf32vw9KzGiUujirj1SGPOBIW3T3EK+i3J4JzqPgW4=
Subject key identifier: D8:D4:79:E5:24:9A:DC:A6:CE:DF:EB:1C:A9:72:7F:58:C7:F9:78:B3
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019CF8AB6C9F97CD255F98A36464574CBAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
Manifest number: 1865
Signing time: Mon 16 Mar 2026 22:01:49 +0000
Manifest this update: Mon 16 Mar 2026 22:01:49 +0000
Manifest next update: Tue 17 Mar 2026 22:01:49 +0000
Files and hashes: 1: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: ZQtIZLDGJ6n8YlbJVyrKR87tYq62y/EcGHymZDz4vyE=)
2: K8bI68ydbYD0aGoO_y4tC8a-6po.roa (hash: 7jWrWjgMEBXHFnrwJxNxcZvd3n/YILw9cksevC2VciU=)
3: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=)
4: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=)
5: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=)
6: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=)
7: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=)
8: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=)
9: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:ab:6c:9f:97:cd:25:5f:98:a3:64:64:57:4c:ba:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Mar 16 22:01:49 2026 GMT
Not After : Mar 17 22:01:49 2026 GMT
Subject: CN=d8d479e5249adca6cedfeb1ca9727f58c7f978b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:3b:dc:2b:2d:f3:03:60:1c:0d:e1:a4:1a:
41:ef:8a:87:ff:89:ee:97:e2:cf:8a:c2:f3:48:84:
d4:9c:a2:25:57:cc:8e:66:ce:f4:ee:7a:4b:61:91:
33:53:84:4f:f2:c4:ec:cc:3f:d4:85:32:03:c4:f0:
2d:0f:84:95:03:35:4c:83:aa:7c:7a:db:9a:4c:cd:
31:b9:6f:0b:96:d1:50:88:33:e4:5c:79:70:ae:44:
48:16:7c:b7:83:c8:13:d1:b4:a0:28:8e:bd:56:62:
38:66:49:cd:37:35:53:18:95:21:a3:4b:01:a4:01:
ef:71:8c:0e:21:6e:88:2c:92:61:cf:6c:9a:a3:ca:
15:5a:4b:c1:30:d3:e0:fb:eb:d5:98:b3:47:63:5c:
06:f1:c4:31:d4:a4:f9:16:7d:8a:4a:42:0e:0a:d5:
28:c2:7f:47:8f:36:57:d9:ce:3e:67:6b:96:9b:0a:
0a:9e:f8:b8:4f:fc:b7:bf:2b:14:3f:f5:a5:d3:5f:
64:c3:8b:dc:53:52:8c:b2:f0:06:9b:81:7c:1f:80:
3a:6b:cb:60:2b:6d:eb:13:bf:ed:16:a4:78:9e:8c:
c1:b1:0c:44:d4:5a:2e:ef:69:c9:be:c6:ec:10:82:
62:e7:0d:75:9d:b9:13:5b:8a:8c:b6:f9:8a:9d:22:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:79:E5:24:9A:DC:A6:CE:DF:EB:1C:A9:72:7F:58:C7:F9:78:B3
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8d:c0:70:37:c2:45:2b:28:e4:7d:a7:16:14:b7:d3:7a:89:
cc:32:28:c8:fa:db:a3:18:41:12:e1:8e:8a:0e:7a:17:f2:db:
71:4d:34:e3:66:80:4e:ff:5c:a5:92:a0:46:9b:f6:98:ff:ab:
14:01:83:26:4c:b2:4c:8d:e7:51:78:1e:4b:5a:0e:8a:f3:91:
94:e9:2e:7f:05:28:6a:a8:ed:78:f8:69:51:08:62:1c:b7:df:
5d:c0:02:3d:00:d8:18:40:5e:6f:fd:c3:e5:8c:25:30:2d:e2:
12:e5:2c:27:fb:9b:0c:5d:4f:cd:73:f8:ac:9f:a8:9a:5f:6f:
eb:3c:73:b8:ae:f3:2b:91:70:69:5f:ef:95:09:70:3a:2f:6e:
87:47:2c:2a:f4:96:33:ae:13:89:c6:58:a8:ec:11:e5:f8:6f:
cb:5d:77:48:e0:98:14:0b:7e:c4:38:cf:04:0a:a3:41:c0:24:
df:6d:10:6c:16:f1:32:a4:2f:7a:6a:a9:90:20:92:d4:43:bd:
d1:38:b5:fc:c1:44:f1:f1:94:04:b2:42:9a:9a:38:2a:d1:1f:
e2:29:84:1b:e1:f7:1f:67:1c:d1:2d:5b:c8:3a:70:f4:8b:82:
61:d5:f3:a5:61:fe:38:c9:44:b6:dc:d4:73:14:fe:42:80:9d:
45:ad:2b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 05:44:03 2026 by rpki-client