Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: F9Hr3adtBnj5pNOxvJ7NhKilWAe3LG+BgU37ULIEiFg=
Subject key identifier: 33:8E:0F:D3:D4:06:52:E4:69:8E:64:00:81:F9:4A:C7:6B:4F:4D:AA
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 01A15589E043AC1D1A9FB6AB954A4ECC10C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0E10
Signing time: Mon 19 Oct 2026 19:01:01 +0000
Manifest this update: Mon 19 Oct 2026 19:01:01 +0000
Manifest next update: Tue 20 Oct 2026 19:01:01 +0000
Files and hashes: 1: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (hash: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E=)
2: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (hash: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI=)
3: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (hash: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI=)
4: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: tH1/3MGYRxS00yUX74eeT1t8ush2pQpY6Cc327hHD08=)
5: lEbUtLtNkfAyY2Y1bQXjNgffS1A.roa (hash: b/0/ySYWBBPjZPbNT3Q9pWagQbtfduFB4wZTve0Q5AE=)
6: mi7KJXHo-_cgynjrOEYKa7kVD8I.roa (hash: YGaCcIrn+IZQb5Rq3PZQYSYoXxlLsMVa6xxEh3lbzgI=)
7: tEbhK49lj9A2t1UjujH2qFk6A88.roa (hash: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk=)
8: vi3DjTDiHudyYK8w8VItrX_abyg.roa (hash: nMbONn7wYaL+5u0tqJSULFh7G6Nyiekz0kaTGUhg9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:89:e0:43:ac:1d:1a:9f:b6:ab:95:4a:4e:cc:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Oct 19 19:01:01 2026 GMT
Not After : Oct 20 19:01:01 2026 GMT
Subject: CN=338e0fd3d40652e4698e640081f94ac76b4f4daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:50:da:ee:1e:33:84:74:82:f4:85:c4:13:
14:0d:42:d0:a6:da:07:10:13:e2:b4:79:89:fa:59:
ce:ef:ae:35:05:ff:ab:36:c7:01:b5:57:ea:29:50:
3b:06:2e:c3:d5:cf:07:2a:b8:52:97:12:0d:0e:23:
25:05:11:5b:f6:aa:38:da:5a:90:5a:7f:dc:20:86:
9c:ed:c6:c1:40:d1:bf:6a:59:91:1d:a9:0b:e5:56:
27:65:10:64:be:38:be:b4:0c:93:25:e4:df:3b:25:
52:93:50:09:5f:a1:8c:d6:63:80:0c:ec:f2:3c:c1:
9b:11:e4:a2:51:39:da:fb:69:4d:59:5b:37:07:21:
5c:1a:91:d3:bb:61:34:d7:b8:40:14:d0:65:c9:31:
9b:4c:0e:0c:10:bb:a3:8d:92:ea:b7:da:12:63:e3:
56:15:9f:0d:ef:a5:ae:fa:90:97:32:b1:90:f0:fd:
c7:db:f0:a7:9a:ae:94:d0:59:66:67:43:eb:a7:9f:
ec:4d:c0:46:ce:ed:f0:44:ab:13:15:03:74:c3:3b:
a0:71:1d:a8:7d:b0:9a:8b:81:1d:ee:fa:fa:73:f2:
4e:9f:2a:e7:1b:c1:29:08:fb:54:29:13:d8:bc:85:
e7:7b:ff:1f:b9:39:cc:b6:02:00:25:20:fe:66:1f:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:0F:D3:D4:06:52:E4:69:8E:64:00:81:F9:4A:C7:6B:4F:4D:AA
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:eb:3c:14:f9:84:3f:54:a9:ea:3f:d1:2f:5c:98:58:1b:
2b:10:c0:56:04:b7:66:bf:83:fd:3b:ad:a5:3e:54:ad:08:f9:
d3:9e:cb:2c:a1:9c:97:cd:7c:b4:da:96:1a:14:f0:4f:8c:a0:
98:ed:ef:0f:45:3a:8d:49:2b:59:c6:39:92:51:23:82:74:2e:
6e:99:e9:4f:76:bb:9d:00:90:0c:81:21:10:78:fa:1c:c1:ad:
4c:34:00:6e:01:c7:27:15:95:58:83:7c:7e:2d:3a:99:23:64:
b9:99:a0:9d:6b:07:fd:63:3f:1b:1f:5f:35:9a:d7:d1:bc:7f:
ef:84:13:7d:08:0a:6f:1a:00:e7:c8:b3:d8:a4:a5:5e:2f:75:
96:bc:32:93:86:c7:0d:88:c7:60:5c:58:f9:e9:c3:a7:c9:32:
5f:53:9e:75:a4:10:d2:40:2f:da:37:a3:f9:a8:dd:ed:20:da:
03:1a:87:0e:eb:2e:32:fe:83:de:12:85:ea:46:80:e3:dd:da:
d2:80:f1:c0:91:11:af:05:eb:0f:11:e0:5e:22:50:cb:94:1b:
78:71:7c:00:79:b5:a8:d6:0f:01:c2:fa:9a:18:fa:e3:c3:f1:
94:f0:73:3c:84:94:7e:85:7f:ea:fe:b1:84:fa:b8:72:3f:1e:
9b:f4:7b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFVieBDrB0an7arlUpOzBDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj
NjdlMDAwHhcNMjYxMDE5MTkwMTAxWhcNMjYxMDIwMTkwMTAxWjAzMTEwLwYDVQQD
EygzMzhlMGZkM2Q0MDY1MmU0Njk4ZTY0MDA4MWY5NGFjNzZiNGY0ZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupdQ2u4eM4R0gvSFxBMUDULQptoH
EBPitHmJ+lnO7641Bf+rNscBtVfqKVA7Bi7D1c8HKrhSlxINDiMlBRFb9qo42lqQ
Wn/cIIac7cbBQNG/almRHakL5VYnZRBkvji+tAyTJeTfOyVSk1AJX6GM1mOADOzy
PMGbEeSiUTna+2lNWVs3ByFcGpHTu2E017hAFNBlyTGbTA4MELujjZLqt9oSY+NW
FZ8N76Wu+pCXMrGQ8P3H2/Cnmq6U0FlmZ0Prp5/sTcBGzu3wRKsTFQN0wzugcR2o
fbCai4Ed7vr6c/JOnyrnG8EpCPtUKRPYvIXne/8fuTnMtgIAJSD+Zh9AmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOOD9PUBlLkaY5kAIH5SsdrT02qMB8GA1UdIwQY
MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt
N2EwZWNlOWMwYWY4LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4
LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8XrPBT5
hD9Uqeo/0S9cmFgbKxDAVgS3Zr+D/TutpT5UrQj5057LLKGcl818tNqWGhTwT4yg
mO3vD0U6jUkrWcY5klEjgnQubpnpT3a7nQCQDIEhEHj6HMGtTDQAbgHHJxWVWIN8
fi06mSNkuZmgnWsH/WM/Gx9fNZrX0bx/74QTfQgKbxoA58iz2KSlXi91lrwyk4bH
DYjHYFxY+enDp8kyX1OedaQQ0kAv2jej+ajd7SDaAxqHDusuMv6D3hKF6kaA493a
0oDxwJERrwXrDxHgXiJQy5QbeHF8AHm1qNYPAcL6mhj648PxlPBzPISUfoV/6v6x
hPq4cj8em/R7fg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:26:49 2026 by rpki-client