Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: 1j4M03wiimPKaqvWXD3qKPa5ZNzCVoTGiiJQXH+dJmI=
Subject key identifier: C3:4A:81:67:A3:D1:6B:F7:8F:05:32:5F:14:78:0D:73:AB:02:E9:97
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019F8531F4EF6B90B2A6876D5623A49A357D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 14A3
Signing time: Tue 21 Jul 2026 15:01:11 +0000
Manifest this update: Tue 21 Jul 2026 15:01:11 +0000
Manifest next update: Wed 22 Jul 2026 15:01:11 +0000
Files and hashes: 1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: N2ZlMCMwhwBs8Dtha7q5sOLWhPDxQ0lp1Ki9yG1QT6A=)
2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:f4:ef:6b:90:b2:a6:87:6d:56:23:a4:9a:35:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Jul 21 15:01:11 2026 GMT
Not After : Jul 22 15:01:11 2026 GMT
Subject: CN=c34a8167a3d16bf78f05325f14780d73ab02e997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:27:2a:6d:34:fb:b8:16:5a:86:26:98:81:
9b:91:00:e3:23:ab:60:5b:ad:f5:95:d3:6a:1c:f3:
36:7e:79:d4:4a:1f:16:8b:6f:32:5a:43:e1:35:44:
a3:b0:bd:68:53:24:c2:47:c2:fb:50:82:94:7f:0f:
40:55:4c:f9:d7:36:b3:00:c0:b8:52:d5:0b:dd:e8:
31:ae:1a:c5:cd:b5:5f:6c:f0:57:23:9c:d2:ba:c0:
e4:51:07:ba:c9:7c:0a:77:d4:40:27:13:10:61:d0:
7b:30:2a:20:df:11:f6:c7:36:56:cf:44:86:09:49:
5e:64:d3:c2:96:a1:8d:73:0c:90:a1:7e:b8:4c:f8:
d9:89:8a:e8:3b:24:5a:bd:bc:5d:a1:f7:64:26:de:
40:a8:f6:57:ff:5c:52:d9:97:67:6e:ba:62:c4:ec:
55:b4:7a:8e:51:bb:19:df:75:1e:b1:51:b7:87:9d:
71:f9:fd:32:76:27:2b:ff:65:91:0d:fc:b9:72:37:
c7:c8:de:d2:63:82:3d:f3:31:d6:b9:f4:72:10:23:
1a:5b:9a:e9:3b:13:0b:92:36:15:93:1e:05:97:29:
86:1c:8c:fd:d3:4b:ef:97:63:56:a5:0b:71:7c:bb:
55:67:cf:a0:e4:b1:af:14:a7:49:78:95:b8:40:1d:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4A:81:67:A3:D1:6B:F7:8F:05:32:5F:14:78:0D:73:AB:02:E9:97
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:68:e0:b1:a9:bb:c9:ef:e2:00:a0:c7:41:96:c0:4f:e6:
4c:4d:df:f2:b2:3d:ca:8b:63:bc:38:9e:5a:84:07:be:01:f6:
0a:24:42:c0:9d:bc:f5:e0:f5:a7:11:eb:cc:1c:d2:29:12:13:
64:e7:2e:00:f9:65:b4:c3:70:b6:40:e0:53:e5:3c:d7:96:f3:
e2:dd:9d:d6:ec:54:93:02:f6:6c:55:62:69:c5:26:2e:22:d0:
f9:b1:61:73:11:32:54:a2:50:e8:8c:ee:a5:2b:d3:17:fd:7c:
5a:ea:28:2d:ef:21:40:8e:84:7a:4a:44:e6:d2:47:34:ea:76:
61:83:1c:7a:50:9f:e1:cf:36:04:58:d9:20:a1:fd:70:00:83:
64:8b:7e:17:26:3c:1f:78:ba:c5:6d:01:f6:55:30:dc:00:3e:
b6:e0:f4:2a:05:c3:11:85:5e:be:fd:ae:b5:a2:71:1a:a4:3e:
54:78:8f:d8:27:e2:3d:f4:b7:d1:5e:8e:a4:cc:55:ce:53:f7:
8c:43:32:45:d4:65:36:54:5e:a5:68:2d:b2:3c:40:4c:f3:b0:
4a:ef:9c:da:2c:64:ff:d1:ef:6f:b7:6a:e7:35:e0:4b:c5:8c:
03:43:19:1a:1e:b7:6b:45:f9:2c:69:4d:33:d5:d9:5c:48:05:
1b:e4:c5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:28 2026 by rpki-client