Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: /umgapdwJyqL7hVPJ2NmUy/5NjmyO1pVfCWPXtN3COU=
Subject key identifier: 91:20:10:C8:03:16:F4:FA:B2:FF:50:86:4D:13:44:76:D5:04:C5:65
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 019DA189F2573CB862824C58E0F9F9D4131C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0C25
Signing time: Sat 18 Apr 2026 17:01:05 +0000
Manifest this update: Sat 18 Apr 2026 17:01:05 +0000
Manifest next update: Sun 19 Apr 2026 17:01:05 +0000
Files and hashes: 1: Lte4Gj7HvnpBCaOGUd7AOzRaBV0.roa (hash: yVkM1zt/EykUfazBUe+F76pn3O1M/hLY9A7dh99ee7E=)
2: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (hash: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI=)
3: XEYiiN3BOEIRPz4xSOYL_41xhiw.roa (hash: 0ywms5lLpzQH6FFtmE9+FqNLyVuKgqHknSLCPnwXsEI=)
4: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: hADABUTtNrgNm4wwVU6dJc7P8+M4cuuyg8PiOrtOMso=)
5: lEbUtLtNkfAyY2Y1bQXjNgffS1A.roa (hash: b/0/ySYWBBPjZPbNT3Q9pWagQbtfduFB4wZTve0Q5AE=)
6: tEbhK49lj9A2t1UjujH2qFk6A88.roa (hash: 7LJLF76QvPCjlTh8Y9wGeCk9+DPapbJzwhv04lpZotk=)
7: vi3DjTDiHudyYK8w8VItrX_abyg.roa (hash: nMbONn7wYaL+5u0tqJSULFh7G6Nyiekz0kaTGUhg9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:89:f2:57:3c:b8:62:82:4c:58:e0:f9:f9:d4:13:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Apr 18 17:01:05 2026 GMT
Not After : Apr 19 17:01:05 2026 GMT
Subject: CN=912010c80316f4fab2ff50864d134476d504c565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:ed:fd:95:56:db:ae:ac:33:59:a0:63:40:
2a:5f:84:09:3d:e4:99:61:bd:7d:68:30:8c:01:14:
b6:50:3b:32:e3:c5:4c:3f:7a:b2:e8:a0:c8:2c:41:
cf:05:a0:9c:02:f1:6d:5d:35:c7:5a:ed:52:91:47:
4c:93:36:a5:83:c1:ec:f9:c4:46:a8:5d:6d:b4:ff:
7c:43:94:87:e7:b8:f8:38:b6:29:18:b9:87:ad:72:
f4:c3:60:d5:3c:c8:17:94:f5:40:fe:d0:e0:9a:2d:
47:2c:3c:5d:d2:b6:76:52:89:e5:30:6c:e3:61:de:
c5:18:b0:ff:bb:33:0a:18:32:eb:66:ae:d6:b2:36:
8d:94:ad:29:d7:84:b1:d8:89:07:ed:aa:0a:3b:71:
7a:5e:dd:df:37:ca:56:56:b4:4d:cd:d4:a1:f1:71:
ba:d8:42:e8:68:87:b2:85:bb:75:4a:cc:4f:02:7c:
9b:3c:ea:99:70:04:ca:a6:29:81:57:d9:35:24:77:
79:56:12:86:5b:77:95:cd:66:61:46:cc:dd:d9:48:
7d:17:9e:7c:66:a8:fc:eb:b3:74:2e:d4:92:20:85:
41:e1:a8:0b:86:27:eb:b6:ec:6b:4d:e0:45:6c:09:
b4:09:38:34:fc:ed:1c:0c:df:39:38:9c:31:3d:eb:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:20:10:C8:03:16:F4:FA:B2:FF:50:86:4D:13:44:76:D5:04:C5:65
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:90:3c:44:d5:f2:71:73:65:29:8d:b6:d0:6f:2f:1f:7a:2a:
cd:42:a5:23:bd:1f:6a:1d:d0:49:99:89:2b:e7:b0:88:39:f1:
25:77:ee:c9:4b:52:4b:b5:3f:b7:38:15:82:ea:17:89:ba:80:
dc:a0:ec:53:69:3f:be:12:dc:99:fd:d3:c4:f7:cf:db:e3:71:
a2:74:74:20:48:87:78:f1:1e:df:cb:9d:c2:89:df:e4:a1:63:
0f:d7:e4:c3:7d:73:6f:72:68:a9:e3:e9:63:29:cc:27:4c:41:
78:07:b0:e6:1a:03:e7:e1:b5:87:9a:d9:8b:f6:80:a8:4e:aa:
28:c4:03:cf:04:f6:78:06:e5:9f:cf:43:aa:06:b2:82:f0:5c:
84:81:4f:48:43:4e:b0:2e:14:81:b1:3e:f2:69:a0:58:f6:b7:
3d:e6:e6:c7:c9:1e:a8:74:e0:59:e3:7e:7e:b1:4c:9d:62:71:
9b:e2:e9:aa:ec:42:3e:0a:27:6b:4c:12:e5:cb:ae:09:34:8e:
1d:0e:e4:f1:6b:40:03:1c:2b:33:14:f6:4a:63:12:51:c7:f6:
fb:c2:22:b3:ec:81:ec:90:c6:86:3c:c8:a0:0c:a1:b4:79:9f:
ba:80:ef:2a:cd:c1:43:a6:60:d3:ee:e4:51:59:59:f6:0d:bb:
13:97:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:54:32 2026 by rpki-client