Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
File: IqETXjyWLnRuT1fR6qSUoEnwOxs.mft (raw, json)
Hash identifier: DsTLfDoOimqK0ZwCWrx6igWtul8eUGrUE6tNkVxa6QE=
Subject key identifier: A1:C9:F4:B7:C0:D7:76:CB:F2:E7:DF:C7:38:B7:CD:1C:0A:95:B9:6F
Authority key identifier: 22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
Certificate issuer: /CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Certificate serial: 019D37F71167621372932CB5494996A38AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
Manifest number: 0258
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: IqETXjyWLnRuT1fR6qSUoEnwOxs.crl (hash: 69GVbiHjZzpt/ebmDqEVd3vX86m0bx1WU7CWuy7jozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:11:67:62:13:72:93:2c:b5:49:49:96:a3:8a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=a1c9f4b7c0d776cbf2e7dfc738b7cd1c0a95b96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:32:b0:c0:a1:b9:13:5f:ee:f8:e9:c5:d6:
1f:98:5f:9e:03:11:72:69:19:0e:70:15:d3:ef:1b:
29:57:2d:12:57:e5:c4:a4:d9:6d:88:26:f5:a7:cf:
9f:a2:03:d9:12:6f:ce:b0:64:ba:ae:77:b0:89:31:
f7:d7:18:a0:8d:38:8f:d8:14:40:b5:0a:a2:6d:9c:
8f:07:53:a7:21:31:b8:74:31:0d:17:30:12:d1:ec:
48:78:26:77:ed:54:d5:b5:97:3d:e4:df:87:8f:ce:
97:55:85:9e:c5:3d:33:a5:5c:94:66:b2:9f:1a:8e:
97:8d:c2:cd:48:c1:ed:c0:e5:af:a1:c7:e8:07:54:
ad:5d:b3:3e:bd:91:43:81:ae:ae:bc:11:e7:c8:d1:
67:be:5f:87:0d:c0:e8:26:43:6e:bd:37:d8:60:6a:
42:ea:ae:33:fd:ba:57:6b:6b:82:54:de:97:c1:ac:
03:9b:9e:f1:6c:ec:b5:49:d2:d5:c8:de:2d:aa:87:
ba:8b:37:ce:51:af:c4:b9:93:25:ab:11:fe:28:4e:
a0:81:9e:d9:7e:83:c6:66:6e:b0:8f:bc:f2:90:6e:
88:5a:f2:63:f7:7e:96:34:cf:ae:fd:09:7f:36:51:
a1:97:fc:49:a0:13:b0:80:4a:d7:51:3d:17:0c:ea:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C9:F4:B7:C0:D7:76:CB:F2:E7:DF:C7:38:B7:CD:1C:0A:95:B9:6F
X509v3 Authority Key Identifier:
keyid:22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:56:5a:3a:04:52:8d:46:a1:18:e1:f6:c9:7c:1c:35:6a:
e0:e5:e0:01:e8:a8:26:be:65:c1:73:b0:07:78:3e:d4:67:0f:
76:1e:b7:de:74:aa:f0:4b:43:60:4a:40:63:f4:a9:02:53:4a:
ca:bf:63:b1:13:8a:45:b3:9c:00:b6:5f:de:86:00:c6:95:cf:
5a:a2:e3:2a:7a:52:db:1b:a8:f4:68:6b:ba:96:6a:d7:94:b0:
9c:dd:fb:d5:2b:8a:17:8c:9a:c0:ba:b0:89:d7:b5:ae:5c:b9:
3e:4b:56:74:4b:2e:7d:f0:9a:b4:17:a3:76:a2:3c:2f:c7:e5:
1f:9f:1c:58:90:b5:53:26:0c:27:9f:f0:0e:a7:7b:01:34:8a:
3e:9f:21:61:c6:bd:2c:98:c7:5b:a5:53:2c:89:72:de:86:c8:
ee:a0:7a:2f:c8:85:6a:b2:44:23:fa:74:a8:94:4f:7d:7f:b6:
77:b3:11:36:ff:3e:03:e2:eb:e8:0c:b4:7a:2c:1b:b9:f3:fe:
16:4c:96:b2:02:61:46:5c:4e:e8:c9:dc:79:29:a1:ef:90:c8:
44:19:06:60:94:5c:f7:9e:20:d4:a3:99:e6:c6:a8:7f:96:fc:
17:3e:af:25:97:42:78:dd:c3:1f:e2:82:43:0c:b5:37:39:13:
37:04:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:57 2026 by rpki-client