Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: xfPkXso3sCNHKCYx4ToAk69qLH8zQLN/Yl0o+v+Qejg=
Subject key identifier: 5C:42:63:A1:E6:B7:26:60:04:BE:1B:A8:4C:9D:EB:EE:32:1F:E1:CB
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 019F867B011AA2C161D795FF7F939AD30F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 08E4
Signing time: Tue 21 Jul 2026 21:00:35 +0000
Manifest this update: Tue 21 Jul 2026 21:00:35 +0000
Manifest next update: Wed 22 Jul 2026 21:00:35 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: JvfEI1Mj6wvj4MmEB1/Ihl4MTX0pl/Fi7pdkzEHB32k=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7b:01:1a:a2:c1:61:d7:95:ff:7f:93:9a:d3:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jul 21 21:00:35 2026 GMT
Not After : Jul 22 21:00:35 2026 GMT
Subject: CN=5c4263a1e6b7266004be1ba84c9debee321fe1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:db:7b:ba:6f:db:70:59:15:c8:e9:e0:af:c6:
ee:0a:96:68:10:32:81:b4:90:c0:27:56:b1:e2:b0:
ef:6f:76:a7:7f:16:af:05:e6:e2:78:c7:0a:15:de:
7d:85:47:10:ae:5a:a1:80:9f:7c:4a:24:6e:24:a5:
c9:e1:fa:f0:74:40:12:49:f5:2a:30:4f:ef:71:db:
20:27:46:cf:19:05:9d:19:ea:f6:8e:35:b9:05:57:
7b:f5:9d:dc:c7:d3:59:5a:bd:b2:96:7e:a3:f8:08:
c4:bb:55:69:eb:90:ea:cc:24:c9:66:d1:94:f8:c2:
c4:7a:07:6f:0d:9d:6b:bf:e4:3c:de:25:19:d4:31:
1f:d8:5b:60:e7:5c:46:49:86:c9:23:16:3b:8c:86:
da:ed:a8:8e:1b:0f:d8:67:91:7f:72:d1:c7:36:66:
60:cd:f6:5c:43:65:4d:31:97:3d:e9:62:fd:c5:a5:
eb:53:7e:6e:81:b6:25:6a:e8:8b:1f:8e:f5:4c:66:
d4:88:ac:2c:37:52:b2:30:9d:00:44:bc:cd:a8:b7:
59:44:43:83:b1:2c:00:d0:bd:cc:4b:fe:07:a6:80:
fc:48:e1:7e:90:92:a9:20:60:68:54:ff:ac:7e:80:
da:19:60:dc:71:bf:65:d5:3b:f7:f6:70:29:15:87:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:42:63:A1:E6:B7:26:60:04:BE:1B:A8:4C:9D:EB:EE:32:1F:E1:CB
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ec:8e:9f:44:87:7a:2e:ec:45:c0:60:1e:c1:37:8f:43:84:
4d:66:b9:19:bc:5b:9f:9e:fc:55:8c:d3:69:6a:8d:0a:7b:b5:
45:19:f4:bd:bd:fe:0d:5f:af:29:82:6a:6a:c0:02:6c:0a:64:
98:0d:23:f2:68:33:3b:65:84:d0:9b:91:1a:28:68:f4:82:e7:
bc:77:66:6c:49:59:da:db:b8:6a:04:60:06:f6:42:15:f2:ac:
30:c1:6c:a0:e5:1a:0e:95:a9:5f:fb:ff:51:c5:1d:c3:1f:39:
f6:eb:aa:27:c3:d3:11:8d:78:e3:8f:e8:f8:53:5e:c7:76:bc:
83:aa:68:68:73:a3:a9:a8:4e:e9:10:9c:87:38:3c:21:38:eb:
ac:3a:0e:65:f1:2d:82:a4:1a:86:49:cd:38:1f:31:04:33:8a:
06:08:e9:18:be:4d:1c:7e:30:0b:c4:d4:6d:24:b3:12:99:5d:
fc:18:65:df:8a:1b:58:70:02:ce:cf:d2:b3:0b:1c:f8:73:b6:
c2:15:03:91:5d:14:69:cd:c5:25:82:df:01:37:a9:4c:fd:9f:
50:e3:e6:ab:67:50:18:47:83:c8:2d:c1:c5:0f:c4:82:5c:f2:
c7:ea:6e:63:78:57:f3:f3:7e:2e:ad:e6:0e:7c:74:d9:96:6d:
37:eb:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:04:41 2026 by rpki-client