Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
File: IqyN_06Z0-IomvY7FdVdJFDIQsM.mft (raw, json)
Hash identifier: +TuU1qrIMYAMmjbqT2oZ+ULq9+e8BZS5wewFFCPDn5A=
Subject key identifier: E7:F6:2B:49:96:EF:AA:56:B7:15:53:F8:6B:A0:85:06:10:CD:EE:21
Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
Certificate issuer: /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Certificate serial: 019D37F76791E6F7D202A7A1ECBD6C709D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
Manifest number: 07B0
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: IqyN_06Z0-IomvY7FdVdJFDIQsM.crl (hash: oon6kUXKUkBVYNXG5Y31xOFLNzKgUdMB0KXHtqi32tA=)
2: vrES8ZRPn5zCw67vXGrWdsUrlYU.roa (hash: SIvQo4/UCnsgnMUPzKF2UlSpxTrczb6UXhWdfVUU1JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:67:91:e6:f7:d2:02:a7:a1:ec:bd:6c:70:9d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=e7f62b4996efaa56b71553f86ba0850610cdee21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:8c:32:35:45:0f:02:90:d2:c4:fb:dc:d2:
d4:35:cc:bd:16:4d:99:71:85:e2:e6:56:30:9e:8b:
51:ad:f2:19:2e:3e:b6:5b:a5:16:70:68:e9:67:7a:
a1:07:59:74:9b:90:d6:61:2f:41:86:5f:d2:b4:cc:
0f:6e:f7:88:72:54:7c:26:4f:2d:20:e7:df:72:37:
a5:4f:29:06:c2:d9:82:f9:48:38:68:95:db:03:4e:
f6:f3:a5:e7:07:7c:87:cf:e5:45:4d:2b:0a:79:cc:
9f:b5:2b:d9:d4:1c:31:7b:9b:64:88:3b:b3:a0:cf:
d4:c8:3c:a5:4f:51:fb:7b:94:08:4c:a4:6c:9a:e4:
5c:6f:ee:d3:cb:f8:fe:ac:39:af:05:69:73:83:39:
5f:43:76:5c:40:a0:2e:3d:5e:37:8b:eb:8a:08:4a:
ca:6e:f2:dd:56:72:52:47:00:37:82:99:6e:66:3f:
37:0f:90:42:87:2c:ee:8b:3d:45:61:97:9c:48:81:
f3:72:15:ad:1e:d8:f2:86:48:57:5a:2c:03:25:fa:
a5:f4:e6:71:17:56:f6:e0:8f:00:35:3e:ee:e8:87:
46:05:5f:18:3c:d6:33:91:67:8c:d6:bf:2e:89:09:
d5:c8:92:5c:a7:89:11:cb:bf:c2:c3:f1:f1:f2:47:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:2B:49:96:EF:AA:56:B7:15:53:F8:6B:A0:85:06:10:CD:EE:21
X509v3 Authority Key Identifier:
keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5c:82:9d:48:8b:52:9b:f9:97:b3:cb:70:f2:af:a5:0e:74:
27:d0:5d:b4:76:14:2f:14:92:f7:e3:ec:b8:8f:e8:0d:b5:67:
a3:94:d2:66:d6:75:4a:9d:a5:e4:be:36:81:04:0e:2e:0d:c8:
02:a9:30:1e:50:23:bd:64:02:b2:c3:d3:2e:cb:37:ee:35:16:
c5:14:b4:04:ec:f1:ad:f7:f1:ab:ff:04:ad:fb:ee:7b:8b:78:
2c:e3:6e:dd:ee:1c:b9:44:e5:d6:d2:7b:67:8b:93:fe:4a:17:
8d:f7:bd:4f:e4:c7:78:68:6b:df:47:f7:3d:34:01:7b:30:09:
79:a0:a4:69:a3:8c:9f:a9:99:c4:94:9e:75:21:6c:28:b2:a4:
25:51:d9:5f:5d:11:e5:0d:17:fb:57:80:63:0d:81:18:ac:a0:
3c:6b:12:a1:fd:e5:ac:b9:f7:29:ae:78:51:02:eb:2b:b1:e6:
18:cd:22:97:36:21:bb:3e:52:23:58:41:58:20:3f:2f:8b:2c:
6a:bb:c3:b9:c4:39:0b:da:77:eb:40:8a:58:54:d8:cc:1c:20:
29:6c:96:9e:b3:9c:97:13:40:50:20:35:89:d6:0a:57:9a:db:
e2:c9:f8:57:f4:3e:13:3f:3b:4a:67:41:ad:0f:4d:5c:8c:28:
37:cd:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:39 2026 by rpki-client