Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: jA8jOHIsH6zw0/2YMdOL/L+HZv1ce60p6CcxHSSfVC4=
Subject key identifier: D4:0A:CA:DE:F6:B6:26:C2:DF:BB:AF:96:D9:79:34:79:B1:1E:8B:A1
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019E9B8553B02AD92CB8F600417461CFCE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 142A
Signing time: Sat 06 Jun 2026 06:01:06 +0000
Manifest this update: Sat 06 Jun 2026 06:01:06 +0000
Manifest next update: Sun 07 Jun 2026 06:01:06 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: m4BRs4ILo6+uEVM0aOh+2RdRkOUaTzx9g8lqv/+Fe0Q=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:85:53:b0:2a:d9:2c:b8:f6:00:41:74:61:cf:ce:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Jun 6 06:01:06 2026 GMT
Not After : Jun 7 06:01:06 2026 GMT
Subject: CN=d40acadef6b626c2dfbbaf96d9793479b11e8ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:ba:10:55:9f:e5:13:39:65:a4:da:55:d3:
e9:7b:fc:9b:0a:26:ba:b3:3a:93:da:25:3c:81:a8:
fa:f5:e6:45:f8:b9:57:09:21:32:54:dd:a0:12:be:
97:32:52:be:56:37:1a:c8:a8:1b:60:78:71:59:45:
e1:cc:e0:1e:19:bc:c0:11:03:95:98:34:5e:5d:f1:
79:2e:33:0a:7a:81:ab:35:f9:f0:94:5d:f2:a4:bf:
cf:33:f5:b4:79:e5:19:bf:6e:1b:52:67:f7:e5:85:
55:04:14:c2:a9:24:47:2a:43:f2:10:ac:4a:df:c8:
9d:eb:46:d1:bd:90:61:c7:63:46:61:e3:5c:63:83:
30:95:f2:8c:50:fc:cd:28:19:9e:84:82:2c:f5:48:
0e:23:fa:b2:21:67:3a:74:d4:df:35:14:69:63:99:
3e:98:e6:70:1a:c5:92:31:19:49:6a:55:a5:20:56:
9a:d8:62:ae:02:55:bf:9f:ed:3d:e8:93:c5:59:ae:
17:63:4f:01:0e:00:36:6b:ec:31:b9:66:1d:c1:28:
b3:62:e2:18:98:ff:70:50:c6:61:99:3f:fa:73:c6:
f8:b8:3e:0e:13:48:54:b9:0d:f8:7e:c9:19:56:bf:
94:2d:e8:45:5b:61:da:c7:2a:09:3a:b0:58:83:e8:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0A:CA:DE:F6:B6:26:C2:DF:BB:AF:96:D9:79:34:79:B1:1E:8B:A1
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cd:dd:97:88:74:46:e7:35:77:de:d4:aa:a0:83:35:2d:a6:
33:89:bf:8f:32:05:af:99:28:9d:44:8d:82:1e:35:1f:2e:e9:
39:cc:25:8a:11:1b:dd:b0:4b:1d:b4:79:fc:a8:50:58:00:bd:
df:b8:ff:d3:91:d9:36:c0:be:12:da:51:93:83:66:6a:bb:bf:
6b:94:56:00:74:8f:a0:df:21:83:f4:2c:6e:5a:b2:80:98:fb:
68:50:8e:b1:35:82:d7:9b:c6:fa:01:a2:fb:bb:ec:ba:e0:cc:
94:06:73:f5:f0:49:71:2d:f1:18:3d:af:7a:51:38:13:27:46:
9a:7a:48:0c:12:bb:6a:77:fb:61:fe:90:dc:8e:6a:02:80:50:
d4:14:bf:8c:cc:81:60:78:78:0a:73:83:c7:0b:fb:95:6d:5d:
32:1d:d7:a4:94:54:92:e2:6d:fe:89:bd:86:2f:31:f4:06:94:
bf:ff:90:40:22:1c:ff:2d:58:91:28:b5:34:3d:44:31:38:b9:
ca:fa:0e:35:d1:48:7e:4e:39:d2:cc:60:24:d2:77:34:09:4d:
2d:32:8c:89:c6:e4:f3:34:9e:37:ad:17:6e:c7:03:3d:73:97:
50:57:7b:9c:60:99:9f:c8:3d:9f:5f:05:09:8f:61:b3:66:7a:
e8:b0:28:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:07:56 2026 by rpki-client