Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: XNGuXmO6yHlzuBXWOUmosTsDOFyLb8qqJo9nQMb02SE=
Subject key identifier: 4A:F2:61:55:31:A1:88:A0:64:A3:73:65:C1:D1:BF:05:33:7C:6B:B0
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019D382E7BE71C336BBD626ED744EB8A32A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 1372
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: fxX/LAASIP7EHQ2jDrNDkYSXAM1NvhUeTD/mwiustgA=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7b:e7:1c:33:6b:bd:62:6e:d7:44:eb:8a:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=4af2615531a188a064a37365c1d1bf05337c6bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:8b:af:f6:d3:45:76:5e:12:75:de:39:97:
b9:f6:ed:6a:71:bf:80:47:21:5f:fd:dd:88:db:39:
40:38:b2:ae:4b:a1:89:78:48:14:16:c9:75:7f:09:
94:1a:9b:82:5e:27:11:aa:4e:58:e6:94:83:e0:dd:
55:66:41:bc:93:78:0e:e5:a8:c2:f4:4f:29:7d:e4:
3a:24:37:5f:7d:9e:df:e7:33:d5:a1:eb:c5:f0:37:
d5:72:77:41:12:aa:ce:da:4d:5a:51:68:0f:5d:e4:
71:39:50:e3:02:9a:b9:a4:b3:3d:7e:b8:a0:b4:ab:
0f:cb:bb:3e:af:89:5f:80:ea:19:76:c3:19:88:28:
fd:71:b0:d5:e6:05:ca:69:b6:47:57:c6:54:d5:66:
82:0d:af:8d:f7:e3:de:1f:66:88:c0:28:af:f7:a2:
14:8c:f4:65:21:fd:c0:0b:b8:17:45:48:a6:37:80:
f8:04:ff:94:9e:2b:f8:17:2f:b6:88:b9:a9:63:0f:
cf:66:4b:17:34:b4:d5:ed:4f:de:f1:0f:06:69:63:
a9:e9:f7:17:25:22:e8:42:52:82:96:af:a7:37:ef:
9b:90:28:d3:ed:fe:8d:8e:b9:09:10:73:1b:a3:42:
1d:c0:35:23:09:ab:b3:d3:de:72:7f:42:86:b4:ae:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F2:61:55:31:A1:88:A0:64:A3:73:65:C1:D1:BF:05:33:7C:6B:B0
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:ef:22:ab:dd:25:49:bd:83:da:a9:90:2a:cd:0e:0d:51:
1c:6e:a0:dd:6d:a4:09:53:53:d3:14:27:60:06:4f:fc:20:9c:
d1:a9:c3:82:39:4e:72:3c:2e:b0:26:42:6b:2f:90:b0:b2:0b:
4d:1f:28:39:02:99:f3:fd:0f:bd:b9:ae:92:55:af:58:f3:8d:
5e:ae:4a:36:bd:34:cf:ab:90:40:40:73:26:26:d4:4f:a7:b2:
82:9b:c4:c3:25:23:82:29:c7:79:2d:43:cf:b8:bb:3b:d1:5d:
a7:19:f8:6c:e7:42:22:31:5f:df:60:4a:36:dc:ca:fb:e8:c3:
02:fc:cd:03:65:0b:a3:15:6c:3c:da:7c:3e:37:94:6a:64:89:
cd:ba:e1:4c:c9:d0:cd:2a:c2:ef:7b:2f:39:fb:7b:27:83:45:
f9:ed:7e:68:6f:69:4f:33:1d:6d:53:d9:61:78:6d:80:e1:09:
25:dc:e4:31:30:46:02:0b:a8:67:24:bf:e0:76:2a:f3:72:eb:
b1:c2:a6:d4:11:83:61:f7:78:76:52:7d:ab:9a:22:34:06:ee:
3f:ca:b8:5f:94:72:97:bb:01:64:91:fb:b4:9f:90:60:ca:a4:
e1:d2:bc:b8:da:ce:34:df:d5:b3:27:a6:54:31:db:1f:85:45:
a8:0c:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:10 2026 by rpki-client