Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: 7QBxiTSdZkfkWPXFJ3MHASskWui8ysxiGFohYg5FIzQ=
Subject key identifier: 98:0F:42:43:08:A5:4A:1F:E6:AC:2E:F8:EC:AF:13:5B:29:9F:DB:72
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 019D378997C52E79115F4550E54ED71776B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 07B2
Signing time: Sun 29 Mar 2026 03:00:57 +0000
Manifest this update: Sun 29 Mar 2026 03:00:57 +0000
Manifest next update: Mon 30 Mar 2026 03:00:57 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: dosqsuaai5qF9uciXXZJEV4trRymUXx663DTsH1dVKI=)
2: q4ymNypCeYCDh5Jdw23U-ypzjiE.roa (hash: zp/+BxeAmcCMbS7nT6vnltxLIb38O2i4zuujdCCgNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:97:c5:2e:79:11:5f:45:50:e5:4e:d7:17:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Mar 29 03:00:57 2026 GMT
Not After : Mar 30 03:00:57 2026 GMT
Subject: CN=980f424308a54a1fe6ac2ef8ecaf135b299fdb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:fc:85:36:40:09:44:6f:db:23:51:5c:cd:
a0:e2:67:c5:f3:69:7c:f4:72:19:e8:75:a6:fe:e4:
7b:97:e2:63:26:1d:2b:cb:05:f2:ef:f9:01:7a:d1:
7d:9a:61:22:9c:ec:d0:04:10:e2:f2:90:42:5d:6b:
9f:39:3c:16:69:94:2b:86:2a:99:a3:9b:f2:ed:cb:
96:03:26:d4:cc:79:9c:cb:5f:4b:b0:7d:6b:e8:b0:
86:19:d8:48:48:1b:23:76:fc:51:2f:ef:94:ff:50:
a0:18:b2:85:30:78:aa:52:52:6b:45:2e:f0:f1:0d:
26:80:3a:6c:12:9e:9e:1d:93:14:cd:2f:e6:b9:7c:
55:5c:53:3e:cc:c4:23:c9:9d:a8:9f:56:e7:13:b7:
bf:80:c8:84:e6:72:cb:40:e5:e2:68:86:91:c9:7e:
c9:c3:63:96:2c:7a:98:00:6a:9a:dd:af:61:97:f0:
79:29:43:54:48:d3:c7:a9:ae:96:26:ed:8b:43:7e:
41:e3:df:e8:c4:11:86:f9:9d:c8:a8:14:b2:0e:ad:
8b:b3:01:fe:38:7a:f1:f9:6a:91:71:4c:60:62:d9:
f3:cf:55:30:da:fd:f6:16:f0:df:e1:de:af:61:b3:
23:16:9d:f3:83:f7:29:7f:f7:f9:2a:bc:32:c8:7a:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0F:42:43:08:A5:4A:1F:E6:AC:2E:F8:EC:AF:13:5B:29:9F:DB:72
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:6c:11:54:3d:3c:32:e3:90:47:ae:0e:87:83:a5:b8:e4:
06:ec:34:9c:cd:70:1a:eb:83:b8:9c:64:43:3d:e1:06:d2:f0:
ff:a7:86:e0:d8:98:56:76:c5:27:63:42:b3:75:5f:82:26:a6:
e2:68:b9:f4:2b:fd:89:ad:76:45:18:1b:3f:63:44:df:8a:21:
a2:5f:d5:b7:9d:f1:50:2d:32:49:f3:79:09:04:91:c5:f3:fd:
fd:7b:75:a4:06:1f:88:e8:2a:3a:48:97:2c:72:3e:c6:a1:39:
3d:60:43:7e:ec:e9:e0:25:c7:a5:9f:7e:50:be:ea:c8:2f:32:
27:16:12:8b:af:0d:61:42:fc:45:a7:6b:9e:fb:ed:57:f8:43:
e6:66:ee:49:44:55:87:81:86:26:4a:ea:9f:0a:0a:6d:1e:6c:
a8:28:bd:21:32:d0:21:73:ee:34:56:d1:f3:ee:7c:c6:d7:5d:
d8:ad:26:c9:c9:7e:e3:00:dc:65:a5:64:ee:cc:02:af:e7:44:
12:1a:11:c6:bf:38:89:b6:18:80:50:51:f4:13:ad:66:e5:ed:
bc:f3:47:71:b5:8e:ee:c4:9b:ee:cc:15:70:fb:7e:cb:35:e9:
27:d0:2a:86:96:72:99:98:d8:27:1a:34:8f:1f:19:05:b9:32:
ea:1a:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:17 2026 by rpki-client